Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
File: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft (raw, json)
Hash identifier: +vQGTOPryENf71/XexO7zAg6fa3WqUxh2YttwBcDiyo=
Subject key identifier: 03:AC:A9:CA:6C:9A:B0:C9:DB:F9:16:C8:93:FA:D8:4F:0B:E5:E6:7B
Authority key identifier: D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
Certificate issuer: /CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Certificate serial: 01A13E5CDC4975AAB899916FF19CF56680CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
Manifest number: 075F
Signing time: Thu 15 Oct 2026 07:00:35 +0000
Manifest this update: Thu 15 Oct 2026 07:00:35 +0000
Manifest next update: Fri 16 Oct 2026 07:00:35 +0000
Files and hashes: 1: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl (hash: 0Qi2JN+083qmTCQiMIssIeBsv7Mud2NJEpacNegWWaY=)
2: he8kJ9DCXibthyRw5bWWfdO-zeI.roa (hash: CB90W0F1vwsIT9jZbtFWr7qRy3OvwRqYaZVqidxtkOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:dc:49:75:aa:b8:99:91:6f:f1:9c:f5:66:80:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Validity
Not Before: Oct 15 07:00:35 2026 GMT
Not After : Oct 16 07:00:35 2026 GMT
Subject: CN=03aca9ca6c9ab0c9dbf916c893fad84f0be5e67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:97:92:be:1e:40:7e:dd:e3:df:2a:0d:44:f0:
32:f7:7b:db:4c:fe:6a:42:60:fe:18:b7:78:f2:94:
ef:ea:04:50:b8:e5:06:3a:e9:45:dc:80:19:5d:a8:
3b:30:f4:ed:4a:ad:aa:32:bf:f8:bb:5d:cf:3a:74:
3b:0e:33:8b:70:7a:1d:8f:ef:41:62:c0:94:28:3a:
f3:f1:84:59:9c:9a:0a:ed:f7:13:e4:f2:0b:d1:a7:
f9:f8:31:02:38:b9:07:e1:b5:f1:f5:cc:5a:a5:b3:
8f:e4:6c:2e:93:dc:a0:50:f5:bd:57:83:cd:f3:5c:
95:38:02:6f:cb:5c:72:ad:8c:f1:36:eb:be:52:39:
5c:d7:d9:e0:3a:1e:a9:18:27:0d:1f:7a:70:07:5d:
f1:f7:52:90:67:f0:08:c2:15:79:65:c3:32:2a:e2:
54:0e:3d:97:5f:e0:80:c9:97:a8:59:e5:8e:ca:8f:
71:19:77:fc:fe:51:fe:0b:51:3e:22:e4:88:02:ba:
37:72:7d:d4:82:a8:ed:a6:ad:28:45:34:5f:f0:dd:
19:18:65:bc:6a:0e:80:42:4a:b2:43:63:cd:6e:e4:
6e:bf:54:60:5b:f1:70:fd:df:c1:f8:dd:51:af:bc:
ae:0e:36:5f:7d:ef:aa:23:12:de:c6:e1:e6:cd:db:
88:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AC:A9:CA:6C:9A:B0:C9:DB:F9:16:C8:93:FA:D8:4F:0B:E5:E6:7B
X509v3 Authority Key Identifier:
keyid:D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4a:e0:e0:b8:79:76:1c:eb:81:ac:bd:44:2d:1c:23:68:86:
d8:8e:97:08:37:6c:fc:eb:af:4d:a8:a2:09:e6:28:79:f1:e3:
ad:85:86:3a:2b:63:57:6a:b8:78:f8:06:ed:ec:28:46:48:ee:
01:f3:46:17:13:3a:58:c5:6e:94:fe:3a:2e:ee:ed:b3:06:cb:
7b:20:7f:9a:58:fb:6b:a7:10:1b:10:03:7a:29:4e:96:ba:32:
e4:94:48:60:dd:4b:cf:63:bf:ab:c2:45:e5:e9:95:ba:f6:3f:
0f:50:f4:02:c5:e4:b1:9c:ad:e1:cb:d4:ca:e2:1b:af:18:8e:
cd:f8:c8:9c:80:62:cd:70:ba:d3:f8:d8:65:36:34:ae:ee:88:
0b:da:8c:47:a7:48:25:22:25:32:28:a2:2c:a3:e7:55:43:40:
5c:67:3c:52:4d:59:45:fb:20:0d:bf:fd:7d:8d:a2:33:17:4a:
8f:b6:45:30:62:6a:e9:12:7e:18:ef:53:9e:db:52:3c:e1:0c:
fb:5b:10:31:3f:4b:28:79:43:53:07:aa:df:f2:5f:0e:c2:9f:
18:39:36:02:25:78:89:52:59:b0:54:8f:5a:1a:fd:75:5f:8a:
4f:15:80:15:3d:36:ad:60:14:db:60:cf:18:00:35:e7:4e:c6:
d2:26:87:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:06:05 2026 by rpki-client