Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft
File: 0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft (raw, json)
Hash identifier: DMkqUZdga32UbUIjOmCllbKLTEx9/KF1qmaopFvXCtw=
Subject key identifier: 96:01:79:B9:EC:CE:AE:1A:4C:06:8C:3C:49:B2:96:FC:A8:A0:83:41
Authority key identifier: D0:45:CD:00:73:6E:5A:0E:C2:3B:90:82:65:87:0D:56:0D:55:1B:02
Certificate issuer: /CN=d045cd00736e5a0ec23b908265870d560d551b02
Certificate serial: 019D3977BBB5D031FE79401EE5602E277B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft
Manifest number: 016B
Signing time: Sun 29 Mar 2026 12:00:41 +0000
Manifest this update: Sun 29 Mar 2026 12:00:41 +0000
Manifest next update: Mon 30 Mar 2026 12:00:41 +0000
Files and hashes: 1: 0EXNAHNuWg7CO5CCZYcNVg1VGwI.crl (hash: 4bkCV4Rj0rKgW7LWN/qMLGjYrbEqrpNG2tyzsU+WM+w=)
2: Pxo9ehHbXZebC306inRLM7y0iaU.roa (hash: DAOuRN4HFLh3V3C0ykmvw7d38j+IxJOCGqFgIfyZtA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:bb:b5:d0:31:fe:79:40:1e:e5:60:2e:27:7b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d045cd00736e5a0ec23b908265870d560d551b02
Validity
Not Before: Mar 29 12:00:41 2026 GMT
Not After : Mar 30 12:00:41 2026 GMT
Subject: CN=960179b9ecceae1a4c068c3c49b296fca8a08341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:a2:44:1b:6e:ea:f5:e1:88:dd:b8:97:92:
65:66:32:ba:76:a6:b1:9f:26:c7:95:67:10:96:f4:
7d:58:81:76:b0:03:c9:31:af:18:57:44:4d:35:a4:
bb:f4:e4:fc:ac:c7:97:a7:6f:07:fd:61:02:f2:b3:
1b:83:be:0a:cb:4b:be:b3:54:f7:fe:13:59:b4:99:
20:a1:b2:f5:49:f3:49:f4:8c:57:f5:08:6e:c9:76:
14:02:c0:43:55:65:1e:61:74:28:4d:ab:7a:0b:3b:
0c:1d:d4:44:d6:40:a2:a3:be:7a:fb:e8:45:cc:e9:
79:8d:9a:34:13:40:c7:ad:8c:01:8f:63:46:71:cc:
af:83:20:91:36:a3:f1:7b:e8:66:b9:3a:9b:c9:33:
b4:ac:e4:00:33:fd:f6:ef:14:85:5c:2c:d5:ba:74:
26:69:b9:81:3d:98:7e:44:8e:b4:d0:59:2c:f2:ec:
c8:54:97:45:8c:2d:83:eb:87:d8:b6:9b:23:67:9b:
08:8a:c2:6f:cb:f2:d9:03:07:e4:ca:a4:31:db:cd:
28:1b:89:a3:eb:1c:33:d4:17:9b:ea:64:0d:12:fa:
0e:1f:89:77:62:3b:1d:8a:cb:ef:50:56:b5:fc:a4:
dc:eb:4d:08:10:ba:79:ed:d6:3f:63:e0:f5:cb:e9:
cf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:01:79:B9:EC:CE:AE:1A:4C:06:8C:3C:49:B2:96:FC:A8:A0:83:41
X509v3 Authority Key Identifier:
keyid:D0:45:CD:00:73:6E:5A:0E:C2:3B:90:82:65:87:0D:56:0D:55:1B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:8b:2c:96:37:e3:5c:33:08:f1:f4:84:05:aa:b7:62:c5:bc:
c4:5a:7f:c4:b5:44:fb:d7:d1:01:20:74:81:4f:0e:6b:25:64:
97:d0:29:a7:8d:8e:29:7a:2b:48:fe:99:8f:41:6c:74:06:87:
aa:b3:8a:10:fe:ee:33:93:f3:f7:01:f3:cc:8d:0b:84:68:02:
7a:fd:37:24:d4:69:15:4d:45:18:ad:88:92:69:70:a5:0a:a9:
73:68:5f:be:74:fb:32:5a:b1:d8:87:63:8a:ea:72:54:94:cd:
f3:11:35:10:f7:82:70:89:e4:3c:9f:13:24:2f:1b:ab:66:68:
43:4d:71:d1:02:93:91:e8:37:81:ba:fa:97:05:e4:c9:0d:2e:
c9:5f:7e:d5:60:56:b0:ec:6b:ce:a5:e0:ac:47:d0:93:97:8e:
f2:fa:25:ce:89:55:0c:b5:20:da:62:bc:da:31:0d:9f:e9:c0:
8e:f0:28:10:49:23:08:41:3c:b1:8e:a9:6c:dc:bf:e7:da:ed:
d6:18:4f:63:b9:1e:a2:9a:ec:97:03:66:dc:7b:81:47:37:0b:
be:c7:12:99:98:85:c8:af:57:62:a5:f6:85:14:4d:d8:ff:ee:
d2:fb:a1:f8:1f:d2:2b:27:30:0e:85:55:a5:6d:51:da:bb:20:
6d:d2:78:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:19 2026 by rpki-client