
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
File: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft (raw, json)
Hash identifier: 1uNK1wQKHJBbui5vdD3HPdS7ec50iM8K8/0/SxhIfQU=
Subject key identifier: 59:1D:E7:63:2C:AE:89:C7:DF:FC:9F:46:0D:77:4E:54:6C:D3:A0:1C
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Certificate issuer: /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial: 019E2994E8A5C716509801418257AE813A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
Manifest number: 11BF
Signing time: Fri 15 May 2026 03:01:25 +0000
Manifest this update: Fri 15 May 2026 03:01:25 +0000
Manifest next update: Sat 16 May 2026 03:01:25 +0000
Files and hashes: 1: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl (hash: yHz/vYySkv4Xe1RvP96hDE+YKUTZdY4LFXbhB37E6I4=)
2: 9gVKfPDu8oaxgCYhsIHGv4QIfWU.roa (hash: fllRN8SucuRDRWnVjdcisQzmvofCxZ5K6VMo5ZRY8Z0=)
3: YOp__Ry-NGpngn9AjDGoHEbjeCg.roa (hash: ON5r8fZJQGVj6wPi39Ya/7ATYu3d/0MWZ+FMIC4DzPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:94:e8:a5:c7:16:50:98:01:41:82:57:ae:81:3a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Validity
Not Before: May 15 03:01:25 2026 GMT
Not After : May 16 03:01:25 2026 GMT
Subject: CN=591de7632cae89c7dffc9f460d774e546cd3a01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4f:46:24:c8:7c:1f:bc:9c:dc:62:fc:71:0a:
71:57:c7:a0:53:c0:d5:ea:24:69:ce:bf:1d:c4:69:
0e:c0:a3:06:5d:25:49:9a:dc:08:24:13:c5:d6:30:
7a:16:31:8b:5c:6c:b7:1f:6d:03:7e:f2:ef:d1:2f:
5d:ec:fa:7e:e4:b1:f1:1b:c9:e7:6c:9d:35:b6:cd:
f2:66:f2:eb:d5:8b:02:6b:2d:e0:3e:4d:6c:7d:aa:
d7:e5:2d:36:86:20:c2:27:fb:2f:0f:d1:1c:c9:7e:
60:92:03:7b:86:ea:05:b0:51:b2:c0:ac:36:61:e3:
66:cf:6b:46:3c:d6:4e:16:38:c8:5b:fe:e3:da:fc:
41:67:71:79:c2:32:ac:7a:f8:73:f1:c1:da:d8:44:
c8:3e:98:bd:3e:ca:b5:27:ec:8d:6d:b6:47:97:97:
1b:33:bc:ab:36:1b:57:39:28:b3:37:eb:9c:11:d6:
d4:6c:02:94:a3:cd:ff:4c:35:94:65:29:0f:13:5c:
6a:1b:a9:02:a4:e9:3d:19:c4:18:f0:a4:d1:a7:f4:
f5:0b:b6:84:a6:bf:de:aa:c0:38:25:a6:16:16:b3:
fe:1b:e7:d0:3a:24:a7:a2:87:9f:4a:b4:28:95:b8:
98:e3:8d:1d:7f:76:c5:db:78:a7:21:ce:ed:05:58:
dd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1D:E7:63:2C:AE:89:C7:DF:FC:9F:46:0D:77:4E:54:6C:D3:A0:1C
X509v3 Authority Key Identifier:
keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f4:15:9e:d4:15:2b:bc:34:70:df:8d:b3:09:6c:b2:fa:45:
ae:e5:71:b1:7f:e2:ae:46:f9:26:ab:96:96:51:b3:9e:a3:34:
16:ea:39:12:94:bf:8d:86:a2:80:1c:18:85:42:6a:0a:c5:1f:
11:d4:62:43:10:23:40:fc:19:16:04:69:bb:41:cb:8f:14:40:
9d:2b:34:87:e2:0c:33:5b:6c:d1:cc:21:e8:bf:aa:2e:52:13:
31:f9:b8:25:5b:4c:1e:b9:df:04:23:91:1d:76:33:79:98:7a:
19:9f:ed:ef:cc:1c:0a:09:a4:d8:6d:8b:9a:ed:ce:18:49:3e:
7c:2d:96:01:fe:88:dc:5a:55:d2:5e:ad:1c:5a:9b:b6:33:ca:
70:a6:7f:db:30:0d:33:8c:00:2a:93:67:a5:bf:6c:d3:18:cf:
b2:73:db:4c:30:e3:bd:55:bf:0f:8a:ec:67:3e:31:51:dd:1d:
16:54:e9:5a:16:ae:6b:7e:3c:db:09:2f:e7:27:b4:14:60:68:
4f:1e:0c:97:5b:ac:15:9c:03:b7:de:ac:05:9c:0d:b7:57:a0:
39:ac:ab:c3:4a:ba:e9:31:9e:96:9d:69:13:0f:c2:21:54:3c:
df:da:8f:ce:16:34:88:db:1a:99:4a:f8:d0:47:cb:02:c4:0f:
1c:10:2b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:58:59 2026 by rpki-client