Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
File: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft (raw, json)
Hash identifier: PHZsY9Wb9qNVlmL8AAwR5/cOArJdIF9coXT4zIeR0YA=
Subject key identifier: 81:D2:BD:4C:2A:3F:76:ED:7E:5D:30:A5:78:0C:9C:03:DD:F3:AB:16
Authority key identifier: D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4
Certificate issuer: /CN=d217978586bff3a6777d55a9a9635841516d43b4
Certificate serial: 019E30A97770AC02DC1C70F3CD46F3D9CA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
Manifest number: 0EA3
Signing time: Sat 16 May 2026 12:01:12 +0000
Manifest this update: Sat 16 May 2026 12:01:12 +0000
Manifest next update: Sun 17 May 2026 12:01:12 +0000
Files and hashes: 1: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl (hash: r0BAPgitzhos1vyb8KSj1wo1BBzeZrvwGbzlJfKIe/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:77:70:ac:02:dc:1c:70:f3:cd:46:f3:d9:ca:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217978586bff3a6777d55a9a9635841516d43b4
Validity
Not Before: May 16 12:01:12 2026 GMT
Not After : May 17 12:01:12 2026 GMT
Subject: CN=81d2bd4c2a3f76ed7e5d30a5780c9c03ddf3ab16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:68:63:73:c9:06:75:4f:00:ac:3f:07:bc:
4c:d5:9e:91:55:d2:cf:c5:ae:0c:eb:4d:53:4b:13:
83:c4:cb:c7:d1:06:68:4d:f9:2e:53:a8:59:eb:5a:
67:c9:a0:42:e2:65:24:c0:e8:9e:1a:79:9b:00:23:
4b:cd:36:19:eb:df:88:fe:b2:1b:c8:8e:48:a1:ec:
71:33:47:ea:c3:34:dd:b6:b9:1c:7e:58:6c:7d:f6:
34:63:c8:1f:03:02:c9:ec:ad:b4:c5:86:ae:46:a1:
47:9f:f2:fe:7b:dd:65:ca:78:39:79:13:4f:74:ca:
ed:e6:36:02:93:68:f0:0c:0f:29:cb:2b:01:f7:c4:
74:92:3d:bd:3a:0d:7c:a7:58:74:5a:f2:ce:c2:77:
b7:5b:f8:bf:fb:67:a7:02:99:18:4b:3a:5a:b7:4a:
6a:a5:b3:2b:33:70:f8:cf:b5:f5:26:e5:e5:05:bf:
68:72:d4:bd:07:fe:f6:e8:e6:92:dd:eb:23:cb:69:
14:fd:9d:c4:e0:72:03:e8:44:b8:c6:bc:54:62:c3:
0d:48:b1:b4:55:88:ff:3b:71:90:a0:92:3d:9f:5a:
ad:6d:fd:ce:9e:c3:2a:1a:98:c3:d8:19:70:3e:de:
ce:64:3c:fd:cc:32:b9:9f:3d:2a:67:61:b3:50:8e:
36:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D2:BD:4C:2A:3F:76:ED:7E:5D:30:A5:78:0C:9C:03:DD:F3:AB:16
X509v3 Authority Key Identifier:
keyid:D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e6:fc:47:18:5f:6a:97:c2:26:bc:a5:7e:53:95:3d:15:62:
a6:bb:e3:dc:65:32:d0:55:93:ae:7f:ea:4f:95:01:43:70:cd:
09:a1:42:b0:cb:52:c2:e6:dd:f9:2c:2d:7f:cd:e0:49:ef:82:
ba:06:47:34:80:bb:bc:82:e2:15:da:a0:8c:69:f6:0a:94:4f:
9f:ef:0d:6d:11:a7:b8:2b:bf:90:42:43:ef:76:54:67:9a:03:
4f:da:fa:d1:54:fb:19:46:6c:1c:b1:81:a2:a4:8a:ed:37:3c:
86:e0:65:0b:e5:85:05:0d:54:82:2c:be:96:da:2b:64:c8:5f:
40:71:84:85:46:72:7d:a4:4f:82:75:8d:bf:19:ad:4c:6b:9b:
44:8f:bc:70:70:f2:9c:b7:21:ca:7d:b1:53:59:c5:a9:e4:6e:
dc:67:91:d4:53:f9:4d:f4:5b:f9:15:36:bf:1c:d8:16:09:7e:
e2:e5:0a:a6:c2:51:23:06:f5:5f:bd:d2:69:fe:94:f9:53:3b:
dc:ba:a2:d0:1e:9d:c5:77:89:61:f7:ca:32:34:f3:94:24:6e:
45:20:e7:e0:91:40:cd:1b:27:f2:b1:23:af:0f:cd:b8:dc:95:
c7:f8:52:b7:e6:07:84:18:76:30:dc:ce:7c:f3:6b:4f:80:83:
43:c9:01:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:49 2026 by rpki-client