Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
File: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft (raw, json)
Hash identifier: 05XgW5R/oOMipEkJxIDbX4+vDa3/Is3bxnNTXdB0VtI=
Subject key identifier: D8:2B:24:33:A0:D5:CA:5E:86:98:06:3C:94:9B:5B:4C:7B:30:B5:6D
Authority key identifier: D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
Certificate issuer: /CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Certificate serial: 019D371B44F4CA8606BA1EADD2FE2A392F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
Manifest number: 0549
Signing time: Sun 29 Mar 2026 01:00:27 +0000
Manifest this update: Sun 29 Mar 2026 01:00:27 +0000
Manifest next update: Mon 30 Mar 2026 01:00:27 +0000
Files and hashes: 1: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl (hash: jO3vp5j1gtyaRB4DMboSQtiLNm0ymGp1AHIGuV2szDM=)
2: he8kJ9DCXibthyRw5bWWfdO-zeI.roa (hash: CB90W0F1vwsIT9jZbtFWr7qRy3OvwRqYaZVqidxtkOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:44:f4:ca:86:06:ba:1e:ad:d2:fe:2a:39:2f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Validity
Not Before: Mar 29 01:00:27 2026 GMT
Not After : Mar 30 01:00:27 2026 GMT
Subject: CN=d82b2433a0d5ca5e8698063c949b5b4c7b30b56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:4b:28:03:a3:66:68:1b:a4:64:76:3e:f7:
d9:98:31:95:b1:8b:06:1d:c3:f3:2c:ba:aa:f4:ba:
d0:59:b2:cb:90:02:56:98:be:f2:12:64:24:f5:9f:
f3:4e:16:1b:36:fa:9e:bc:6d:fd:6d:0d:bd:b7:ae:
b0:06:bd:a1:57:92:8f:a2:3c:76:6d:3f:96:8d:72:
a6:93:c2:0b:34:d7:29:20:25:52:56:fd:27:61:67:
02:4b:27:f6:5d:43:13:83:b0:c5:69:74:68:dd:60:
b3:5a:9a:4b:d7:d8:73:5f:3e:6c:b7:7d:39:96:bf:
30:cf:10:59:34:4c:ac:d8:6a:2f:ff:4a:3a:36:27:
2c:ae:62:4d:9d:7a:8b:65:1b:53:ec:ed:1b:99:64:
99:f7:b6:0a:c1:5e:b6:23:98:5a:b9:39:27:86:94:
92:a8:a9:f0:4d:39:18:94:83:e0:ba:9d:73:ec:c9:
f5:8f:59:7f:4d:bd:3b:8a:8f:81:4a:ff:bd:c5:27:
da:7d:94:77:59:a8:0f:29:86:29:d5:84:a3:d9:2a:
63:4c:40:56:16:f1:a8:4c:56:e6:0d:01:d1:00:d2:
f9:25:5d:01:5f:0b:4e:0a:f6:0d:b7:72:96:c3:b6:
e3:70:32:b2:37:98:04:f9:44:30:39:3c:ac:ae:d9:
f5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2B:24:33:A0:D5:CA:5E:86:98:06:3C:94:9B:5B:4C:7B:30:B5:6D
X509v3 Authority Key Identifier:
keyid:D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:72:00:8c:0b:cd:e3:bc:c7:2c:0e:e4:5b:ed:2a:09:ad:66:
13:37:f7:bb:8e:c7:69:4a:56:b1:53:bd:67:35:80:41:9f:1a:
b7:01:97:e3:6a:f1:32:b2:b1:c4:f0:08:e8:88:ce:73:24:5c:
dc:27:62:e5:ec:39:4e:78:e8:35:f8:b9:b0:7d:65:63:9d:38:
ce:f9:4b:68:83:f0:ef:f0:f9:e9:73:03:d7:de:df:67:e0:24:
72:f6:f5:ca:e8:30:77:38:87:a4:65:8f:b9:7f:81:a3:18:e3:
a5:1b:df:4c:1c:2a:18:57:d0:30:ba:b4:f2:3a:5c:9e:88:b5:
3d:e2:ea:4a:e5:1d:0e:6e:36:3a:0f:6d:36:15:3e:6d:0f:0c:
31:cc:26:28:58:32:c0:83:81:d8:46:ab:ec:d2:9d:13:a1:cb:
79:4a:62:fb:fc:da:6b:a5:50:98:12:85:8e:1e:98:47:15:8f:
9d:3a:34:45:27:34:3f:29:82:63:6b:3d:d9:6e:68:b3:1e:8f:
8e:e8:ef:c5:ee:51:eb:a3:21:a7:a6:91:a6:9c:d6:7e:a8:2f:
1f:14:76:f2:e7:be:87:72:a2:80:2e:81:62:5d:f0:c6:17:41:
b3:38:e6:03:e0:5e:67:9f:7a:7c:e2:0a:18:76:4a:c4:c8:47:
55:d1:59:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:04 2026 by rpki-client