
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
File: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft (raw, json)
Hash identifier: zJg4y+jEJfM9hmNdzW75kVtQo5eG1IBU+cok94aoTWM=
Subject key identifier: 1B:91:AF:69:C9:3A:84:86:11:0B:E9:1F:87:C3:10:7B:F5:AD:55:0F
Authority key identifier: D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
Certificate issuer: /CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Certificate serial: 019E303B231EB5CB170D4A4FA032F7B366D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
Manifest number: 05CA
Signing time: Sat 16 May 2026 10:00:42 +0000
Manifest this update: Sat 16 May 2026 10:00:42 +0000
Manifest next update: Sun 17 May 2026 10:00:42 +0000
Files and hashes: 1: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl (hash: +ptoalrkUG5If73bSjGEnoX7fFtMVX4NA1U50bi5Deg=)
2: he8kJ9DCXibthyRw5bWWfdO-zeI.roa (hash: CB90W0F1vwsIT9jZbtFWr7qRy3OvwRqYaZVqidxtkOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:23:1e:b5:cb:17:0d:4a:4f:a0:32:f7:b3:66:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Validity
Not Before: May 16 10:00:42 2026 GMT
Not After : May 17 10:00:42 2026 GMT
Subject: CN=1b91af69c93a8486110be91f87c3107bf5ad550f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:af:cf:2d:ac:88:2a:e5:31:aa:d5:c8:24:
ac:ed:93:7a:6c:f8:3f:fc:30:b9:18:96:ee:61:81:
09:50:46:d7:a2:39:5c:7f:9e:b1:17:da:8a:aa:90:
ba:32:0a:76:3c:f1:06:41:2c:b2:6b:3f:c6:3e:fa:
71:3f:59:21:87:80:46:a8:58:87:b2:64:10:59:ef:
3c:6f:4f:62:bf:2e:dd:e1:02:83:f7:41:66:9e:69:
6b:75:94:22:39:81:6b:6e:29:6c:85:22:95:ce:14:
06:ff:a1:38:7f:ad:c3:0f:3b:20:1a:8f:17:5e:02:
56:c1:cc:0b:81:a0:40:96:2a:be:c2:d7:5d:6c:3b:
57:b3:4d:f6:bd:e9:4f:14:0f:79:b2:42:9a:54:f2:
0d:9c:07:1c:35:dd:fc:ae:df:5f:d1:9e:64:4a:36:
e0:f8:fb:41:c8:53:20:35:c4:eb:01:97:d9:36:82:
34:9c:97:a6:55:80:b5:cf:cc:1f:af:20:1a:88:9f:
d7:dd:47:32:00:29:31:07:a9:51:5b:ef:dd:0a:71:
de:b3:5d:d6:88:ab:6b:4f:f8:65:65:e3:ef:c5:31:
87:15:6f:47:45:52:e7:df:5f:ff:0d:07:28:b2:93:
10:0e:b2:4e:f3:39:f2:1f:bd:83:8e:e1:68:07:a7:
7d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:91:AF:69:C9:3A:84:86:11:0B:E9:1F:87:C3:10:7B:F5:AD:55:0F
X509v3 Authority Key Identifier:
keyid:D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d1:59:eb:67:5e:7d:c5:e0:8a:88:e9:5b:78:47:54:0d:63:
57:0d:71:d0:80:3d:d6:35:61:14:3d:a3:fd:9b:af:db:c5:be:
db:ad:46:fd:85:bf:24:11:82:05:6d:3b:49:5c:d9:3b:57:d6:
47:68:86:5c:2c:28:e4:cb:87:69:86:15:b8:b6:6a:fe:1a:89:
f5:02:77:3a:15:3a:13:7a:da:36:e8:1f:49:07:a5:40:ed:88:
d4:42:e2:3e:11:78:b9:49:5b:cc:83:36:40:2f:12:0a:8a:15:
34:89:e1:63:63:40:d7:26:d0:78:bd:e9:84:3b:37:5c:9e:af:
91:e5:a2:0a:b3:26:f7:72:fa:bd:7c:54:32:e0:a0:2b:6c:9e:
23:7e:42:06:d8:6e:39:77:84:9f:3e:96:7c:02:e9:c6:af:e9:
6b:89:82:91:e3:f5:2d:6e:c3:6f:9e:e8:fd:94:25:11:86:45:
a8:b5:56:94:4d:54:8e:a0:e6:97:a5:5a:74:d1:b5:52:eb:a4:
f4:49:1c:f2:1e:97:7b:85:99:27:06:f8:b8:8c:a0:75:57:5a:
95:92:09:9e:0c:ae:83:42:b3:3e:ea:13:ee:55:56:ae:7f:33:
d3:3e:f5:a6:7c:e1:f9:38:16:3f:40:5e:17:32:66:18:9c:5c:
19:74:77:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:02 2026 by rpki-client