Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
File: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft (raw, json)
Hash identifier: 5tTz59cfz1vfIIXY7gbN8/kJuSSXnl/7F+xIcVN6SZs=
Subject key identifier: 80:00:53:4F:81:3B:13:D5:DF:74:FC:FE:D8:60:19:88:75:5E:34:24
Authority key identifier: D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4
Certificate issuer: /CN=d217978586bff3a6777d55a9a9635841516d43b4
Certificate serial: 019D378996B4F10194CE2535DD085A9CB972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
Manifest number: 0E22
Signing time: Sun 29 Mar 2026 03:00:56 +0000
Manifest this update: Sun 29 Mar 2026 03:00:56 +0000
Manifest next update: Mon 30 Mar 2026 03:00:56 +0000
Files and hashes: 1: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl (hash: Z1tbk1Usga5Se9ESCa1YU9vSjyEunn4qUn2BEXcWMiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:96:b4:f1:01:94:ce:25:35:dd:08:5a:9c:b9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217978586bff3a6777d55a9a9635841516d43b4
Validity
Not Before: Mar 29 03:00:56 2026 GMT
Not After : Mar 30 03:00:56 2026 GMT
Subject: CN=8000534f813b13d5df74fcfed8601988755e3424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:8c:41:37:57:3f:85:96:c4:4e:f3:43:75:
37:cd:09:a8:ec:a3:b7:4b:dd:3a:f8:4d:99:07:9c:
ef:32:aa:4c:a1:31:3d:dc:58:1d:23:4e:17:86:c9:
81:5b:48:14:4d:bd:a7:4d:dd:36:bc:3b:c3:b1:25:
80:b8:70:d2:31:e8:94:94:da:58:24:7b:68:1a:be:
f4:6a:66:ae:4b:f9:3d:79:3c:c2:d0:7c:c4:dd:92:
69:83:de:e3:71:82:a6:b2:57:2f:4c:4b:0f:a1:cd:
40:f3:d1:04:1b:2d:17:a5:44:14:8e:0f:60:ad:cc:
ef:59:56:b4:c4:c4:89:2f:ad:71:51:49:46:e5:af:
d8:cc:2b:81:b2:6e:2a:ac:0c:0a:80:9a:f1:eb:82:
d5:70:ac:b7:27:6a:93:ed:06:21:40:6f:9c:cc:ac:
36:26:08:dd:9a:74:cf:39:19:cd:9b:fe:1f:c9:a7:
74:e2:33:61:95:69:53:b4:e5:e8:09:ef:51:1c:2e:
d6:f5:7e:fa:68:5e:8e:b7:45:51:38:cb:7c:ca:99:
5b:d0:96:ea:38:f5:43:5f:89:6c:00:a9:4a:29:07:
53:dc:e6:31:46:3e:16:d6:13:36:27:e3:6b:2d:4e:
ff:94:da:67:c8:79:4b:28:e9:f7:3a:49:89:f2:4a:
bb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:00:53:4F:81:3B:13:D5:DF:74:FC:FE:D8:60:19:88:75:5E:34:24
X509v3 Authority Key Identifier:
keyid:D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b9:ef:dd:07:26:bc:00:47:fe:2e:22:4f:01:22:59:ed:68:
32:66:c9:2d:b7:a6:49:f1:a0:14:c6:df:37:89:47:34:aa:b3:
b8:ae:57:f6:c5:f5:78:f2:59:49:98:f7:b6:4e:3d:cd:35:03:
e1:e2:b9:69:97:2e:de:83:0f:a3:1c:55:6b:1b:1d:7a:98:06:
f4:bb:ce:4a:19:31:58:12:77:53:15:e4:38:07:05:fa:22:49:
22:37:ef:09:46:e5:11:b1:7e:cc:a8:21:89:75:18:01:81:1a:
de:2f:ce:26:23:b9:e5:3b:37:80:cf:e3:92:88:7e:b9:5a:43:
8e:1e:8c:0b:fa:99:a8:c4:73:93:56:04:93:3c:11:8e:e8:57:
d9:c1:0a:e5:a2:bc:04:55:40:dd:18:c5:12:f1:3a:03:15:d9:
5f:dc:63:7c:e5:28:13:d9:dd:ee:fa:73:a6:b0:29:c5:f9:52:
73:e3:12:da:97:74:ed:6f:d7:08:18:5e:91:0c:e1:2d:31:64:
80:6e:50:47:96:d8:97:3e:84:86:79:89:5f:46:86:f2:ac:d2:
ed:fa:5f:fa:dc:78:57:70:94:b1:f9:5d:6a:59:f1:67:21:24:
e9:dd:dc:c1:a3:1f:28:68:be:95:8f:36:a3:2e:e6:01:80:89:
68:24:05:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iZa08QGUziU13QhanLlyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMTc5Nzg1ODZiZmYzYTY3NzdkNTVhOWE5NjM1ODQxNTE2
ZDQzYjQwHhcNMjYwMzI5MDMwMDU2WhcNMjYwMzMwMDMwMDU2WjAzMTEwLwYDVQQD
Eyg4MDAwNTM0ZjgxM2IxM2Q1ZGY3NGZjZmVkODYwMTk4ODc1NWUzNDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb2MQTdXP4WWxE7zQ3U3zQmo7KO3
S906+E2ZB5zvMqpMoTE93FgdI04XhsmBW0gUTb2nTd02vDvDsSWAuHDSMeiUlNpY
JHtoGr70amauS/k9eTzC0HzE3ZJpg97jcYKmslcvTEsPoc1A89EEGy0XpUQUjg9g
rczvWVa0xMSJL61xUUlG5a/YzCuBsm4qrAwKgJrx64LVcKy3J2qT7QYhQG+czKw2
JgjdmnTPORnNm/4fyad04jNhlWlTtOXoCe9RHC7W9X76aF6Ot0VROMt8yplb0Jbq
OPVDX4lsAKlKKQdT3OYxRj4W1hM2J+NrLU7/lNpnyHlLKOn3OkmJ8kq7OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAAU0+BOxPV33T8/thgGYh1XjQkMB8GA1UdIwQY
MBaAFNIXl4WGv/Omd31VqaljWEFRbUO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhlWGhZYV84NlozZlZXcHFXTllRVkZ0UTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83OTBhNzgtNGEyZC00ZjE2LTg4MGEt
NGNlNGQzYjE5N2Q4LzEvMGhlWGhZYV84NlozZlZXcHFXTllRVkZ0UTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83OTBhNzgtNGEyZC00ZjE2LTg4MGEtNGNlNGQzYjE5N2Q4
LzEvMGhlWGhZYV84NlozZlZXcHFXTllRVkZ0UTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLnv3Qcm
vABH/i4iTwEiWe1oMmbJLbemSfGgFMbfN4lHNKqzuK5X9sX1ePJZSZj3tk49zTUD
4eK5aZcu3oMPoxxVaxsdepgG9LvOShkxWBJ3UxXkOAcF+iJJIjfvCUblEbF+zKgh
iXUYAYEa3i/OJiO55Ts3gM/jkoh+uVpDjh6MC/qZqMRzk1YEkzwRjuhX2cEK5aK8
BFVA3RjFEvE6AxXZX9xjfOUoE9nd7vpzprApxflSc+MS2pd07W/XCBhekQzhLTFk
gG5QR5bYlz6EhnmJX0aG8qzS7fpf+tx4V3CUsfldalnxZyEk6d3cwaMfKGi+lY82
oy7mAYCJaCQF/w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:04 2026 by rpki-client