Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
File: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft (raw, json)
Hash identifier: G3mfYQ4cIT80b6zlELXDy225MvME2zkAJKSZNwBo8sE=
Subject key identifier: 5D:10:84:7D:45:F9:7A:0C:38:52:A3:FF:A6:F0:E4:CE:53:56:03:BC
Authority key identifier: D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
Certificate issuer: /CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Certificate serial: 019F17F9DD12880F7D6B045451C66C692636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
Manifest number: 0642
Signing time: Tue 30 Jun 2026 10:01:18 +0000
Manifest this update: Tue 30 Jun 2026 10:01:18 +0000
Manifest next update: Wed 01 Jul 2026 10:01:18 +0000
Files and hashes: 1: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl (hash: 6iqKbDqpGKNeeEjsq3hHXwbFFpxGh8ME2pGx4uks0g8=)
2: he8kJ9DCXibthyRw5bWWfdO-zeI.roa (hash: CB90W0F1vwsIT9jZbtFWr7qRy3OvwRqYaZVqidxtkOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:dd:12:88:0f:7d:6b:04:54:51:c6:6c:69:26:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Validity
Not Before: Jun 30 10:01:18 2026 GMT
Not After : Jul 1 10:01:18 2026 GMT
Subject: CN=5d10847d45f97a0c3852a3ffa6f0e4ce535603bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f1:79:20:27:91:b7:57:df:0f:bb:8a:1c:bc:
a9:4f:be:00:b4:b5:6b:a7:68:06:10:a5:c4:4e:0d:
75:26:1d:96:5a:43:7f:57:2e:08:51:60:42:b4:2e:
39:c7:ab:3b:a3:fb:e6:51:ab:25:bf:ae:cf:e8:4d:
b1:d2:83:a4:71:cd:74:e4:97:1f:08:ca:f4:da:78:
b5:1b:69:a1:3a:f2:52:7a:a4:4c:bd:e9:bb:7f:5c:
22:c3:d6:19:5a:eb:c9:00:5d:18:10:e1:62:9e:90:
72:9d:d3:93:c9:58:bd:b0:a4:93:db:01:e2:2b:9e:
54:36:f7:51:e3:bf:1b:f7:7c:8b:29:1b:12:98:64:
19:7c:87:03:10:70:30:c1:f7:0c:d8:ac:d9:3d:b7:
60:9b:12:7b:19:a6:98:6d:03:e9:8d:30:29:50:6c:
1e:6c:5c:41:92:f0:0d:8d:6a:86:94:4f:72:4d:b3:
ac:d0:b5:19:b0:36:bf:c8:bb:3c:81:e3:d1:1f:8e:
1c:d3:b8:3e:86:9a:60:b5:e5:4a:d1:7d:3d:b8:84:
5d:ee:b0:de:12:2f:c9:c6:c9:f1:de:2b:62:7f:7d:
27:2b:59:c8:f9:20:45:e2:79:e9:0b:28:96:7d:49:
1f:cb:62:46:d4:6f:ca:3c:63:a1:f9:35:1e:cf:73:
5f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:10:84:7D:45:F9:7A:0C:38:52:A3:FF:A6:F0:E4:CE:53:56:03:BC
X509v3 Authority Key Identifier:
keyid:D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ee:4b:b1:a4:77:0a:4d:e1:58:c9:49:8b:0d:e3:35:75:72:
7a:7d:b1:9f:25:38:bf:83:c5:e3:2a:24:9f:17:e6:60:c6:21:
a8:f4:88:26:7c:72:18:00:16:44:ea:2f:04:37:e6:42:2b:1f:
b4:99:c0:99:56:d9:88:23:cb:8c:e6:d3:67:0f:cd:59:74:d4:
16:56:39:13:b6:22:a0:8f:10:d0:aa:7e:9c:a1:cc:97:8f:54:
df:3e:90:8d:64:99:6f:aa:e4:2d:a2:8e:ee:e6:e8:7f:38:e0:
bd:e8:a1:50:c6:0b:a3:1b:23:4d:55:d6:bc:b9:de:5b:d7:4d:
12:39:94:72:bd:16:42:bd:dd:cf:fd:b9:09:57:06:6f:c3:7b:
0d:f8:d3:ca:85:8f:74:d1:53:57:99:fc:aa:1e:05:50:6b:c0:
47:ff:be:3c:99:c8:d0:f7:6a:16:f5:8f:23:24:2a:08:a1:a5:
a6:1a:63:1c:3b:13:5f:ed:7a:0f:11:47:5a:6a:cc:83:46:7f:
23:a7:9a:b5:2c:84:41:f8:f6:2f:89:ea:62:23:fb:9f:1a:f2:
13:6f:5b:14:a1:73:d7:85:c9:3d:bc:fe:95:b6:c5:5c:12:fd:
dd:3f:b6:c2:9c:ee:d2:e7:61:ed:e5:6f:47:74:f5:96:bb:5e:
1b:d8:4d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:11 2026 by rpki-client