
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
File: 0deIJuFxfsmT62TdEYeHawZej1g.mft (raw, json)
Hash identifier: 4XvyYTFfgwaLyS4TKMeJLrMW6j8XfqiG4kA4szypX8Y=
Subject key identifier: 5A:15:F8:FD:ED:D4:C6:51:5F:4C:BA:83:34:2F:E7:19:C8:9A:CE:6C
Authority key identifier: D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58
Certificate issuer: /CN=d1d78826e1717ec993eb64dd1187876b065e8f58
Certificate serial: 019D0553F6978E5E4D493A8710837E46156E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
Manifest number: 1039
Signing time: Thu 19 Mar 2026 09:01:21 +0000
Manifest this update: Thu 19 Mar 2026 09:01:21 +0000
Manifest next update: Fri 20 Mar 2026 09:01:21 +0000
Files and hashes: 1: 0deIJuFxfsmT62TdEYeHawZej1g.crl (hash: kJjmeCjCi1QmMjv+b5VyoxolM02xWyVI91a6vXbDurI=)
2: 8zWkLs5MayVp3_SzYbBPRAvFDTs.roa (hash: UellUSwtPKZmjJ1D+Fmg+BloHauGtQEDG+FE5/v9Mm8=)
3: OaKg-lG-pzNmRpP7SDCitTlZaNo.roa (hash: 5+9V4WRdjlkj5ldl1qKFN9pvoMnzM+PUFUtZ5jME0PE=)
4: wA-hfRcLQDeGt5CtIuqae7_R8vk.roa (hash: /Y6WA6ClXm7DeMMUhB/vYFyvxO+T8Bk+qE5LtkXuWg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:53:f6:97:8e:5e:4d:49:3a:87:10:83:7e:46:15:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d78826e1717ec993eb64dd1187876b065e8f58
Validity
Not Before: Mar 19 09:01:21 2026 GMT
Not After : Mar 20 09:01:21 2026 GMT
Subject: CN=5a15f8fdedd4c6515f4cba83342fe719c89ace6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:36:28:7b:2e:a0:28:ea:bf:a1:3e:c2:36:
d9:54:46:de:1d:36:37:92:6e:f9:21:7f:a4:c6:fd:
2e:e4:4c:52:fc:e7:32:a1:f6:9a:8f:e4:56:a0:2a:
1b:9b:f7:52:8a:af:8b:8f:a5:80:82:66:fc:53:32:
1e:b9:a3:8c:ed:55:40:2e:c1:28:8c:0f:2d:b3:ff:
8e:cc:5a:a5:5c:b6:43:43:d9:20:82:23:1b:9c:4d:
da:26:d2:f6:b3:e0:ab:b1:2d:58:72:90:9e:ad:1c:
20:3c:8f:e4:ec:e3:c2:bf:1d:33:05:99:90:95:53:
46:e0:3b:70:7a:e3:8b:71:b7:b2:51:1d:de:29:e4:
74:4c:d0:9b:73:f2:79:c7:01:0c:d2:cb:fc:7b:b4:
1e:31:a9:d0:bd:66:ae:d2:07:d3:1a:68:d9:8c:fb:
83:67:02:a4:3d:25:f3:43:06:d0:6a:a9:ca:af:2c:
4f:4a:77:8d:9b:86:b6:53:d8:28:64:93:89:9b:73:
f7:33:12:df:15:7e:a9:c0:81:79:37:63:3a:75:59:
1d:2a:8b:7c:4f:cd:39:2d:85:99:1a:b0:7e:d3:11:
80:a6:e5:68:8d:9d:db:74:49:2e:d5:5a:0d:08:34:
43:02:06:cb:4e:6d:e5:26:9e:7c:de:21:f6:8e:fa:
b7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:15:F8:FD:ED:D4:C6:51:5F:4C:BA:83:34:2F:E7:19:C8:9A:CE:6C
X509v3 Authority Key Identifier:
keyid:D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:fe:4d:4a:6f:c8:f4:8d:68:c3:dd:b5:e3:dd:19:58:98:a8:
bb:67:28:fc:70:db:a0:44:60:9a:8d:17:48:49:9e:29:36:0d:
9e:37:31:a0:4a:ae:25:47:df:11:e7:07:21:67:05:a6:0c:ee:
cd:30:d3:bc:f8:2c:9f:c9:db:65:6f:1f:4d:f5:04:63:a9:71:
bf:55:76:d7:ac:b5:ed:1f:ad:a4:df:4e:70:58:41:6a:9f:f8:
5f:72:df:4e:c3:00:b5:28:a7:a1:b2:d1:ec:ef:eb:b5:d2:4b:
f1:93:04:ce:c1:cd:66:b5:8c:8c:64:31:d8:cd:e7:ff:2e:18:
ae:f1:13:fd:dd:2c:08:50:cc:07:cf:43:8d:58:e6:61:1c:0a:
db:4a:fe:34:47:2e:ca:46:8f:57:f8:87:d2:9e:3f:47:e0:af:
26:cb:a0:46:47:4c:0b:f0:c3:63:c8:be:6a:a6:70:f8:f5:a1:
d6:f0:bd:d3:cd:4e:90:7d:42:54:10:64:dd:64:09:32:76:66:
8d:a0:f3:c5:6c:90:13:01:1c:2c:e4:5d:3e:ec:d4:85:ff:19:
51:88:83:ca:f4:c6:c0:6d:1e:81:32:17:2f:42:67:e6:56:d3:
8c:f7:53:67:49:1b:27:ef:84:6a:99:d3:e2:6f:43:47:54:e6:
3a:93:3d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:01:25 2026 by rpki-client