Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
File: 0-2n3wX226CeOefUvex7rg7_urA.mft (raw, json)
Hash identifier: gBnmqYpTvOPA65Z9HHPpuqy/3NGcXFyPMGZsFdRIGOI=
Subject key identifier: E1:42:D5:5F:F4:74:85:86:5B:84:EB:BF:FD:38:1E:75:59:1E:EC:0A
Authority key identifier: D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
Certificate issuer: /CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Certificate serial: 019DCF3E25111E0DA0570494391BCAF9424C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
Manifest number: 05E6
Signing time: Mon 27 Apr 2026 14:00:49 +0000
Manifest this update: Mon 27 Apr 2026 14:00:49 +0000
Manifest next update: Tue 28 Apr 2026 14:00:49 +0000
Files and hashes: 1: 0-2n3wX226CeOefUvex7rg7_urA.crl (hash: JBlHZCGFmulmR8BJhhagvf3ndFnUcQhMsoqbkATPV5I=)
2: qTWraqPBRkXUgfYW4gfB3AS-jm0.roa (hash: Rbt0ZTsq9hRwXO+cnDLn20WShDhAg5xFObZyVKiajFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:25:11:1e:0d:a0:57:04:94:39:1b:ca:f9:42:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Validity
Not Before: Apr 27 14:00:49 2026 GMT
Not After : Apr 28 14:00:49 2026 GMT
Subject: CN=e142d55ff47485865b84ebbffd381e75591eec0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:f8:36:3a:ac:eb:ea:b8:9e:a9:f6:f8:1a:
35:44:17:e9:a4:7e:82:15:27:5d:aa:25:03:be:f9:
1a:c9:d3:31:ec:18:d9:83:78:f6:81:63:75:c1:98:
d5:ba:16:9e:8f:0f:6b:54:84:03:da:c8:b5:30:89:
a2:b7:45:a9:b1:e1:f5:32:43:c3:e5:e1:e5:4b:32:
1f:0e:f9:89:26:b7:4e:00:84:c9:91:fb:0a:fc:0b:
f5:10:5b:27:b8:9a:b6:cb:bc:fa:5d:ec:6b:68:9e:
37:76:f3:62:43:f0:9c:8c:5d:21:d4:98:f9:a3:34:
c3:d4:a9:11:ce:89:54:55:a3:8b:8b:81:f6:0e:d9:
af:10:59:e2:02:59:8e:e8:8e:38:84:fa:1e:70:f8:
80:5b:b7:21:f6:7f:9d:e3:1e:2f:0d:3a:23:65:ed:
82:6f:6b:5f:b7:ab:fe:8e:a4:e1:0e:36:c4:1e:a5:
a9:bd:d3:12:5d:3a:b9:1e:a2:cb:2d:75:ed:cc:23:
a2:c5:76:0c:f1:bb:36:ff:6e:56:85:50:3f:94:42:
6b:d1:33:be:24:b0:97:1c:d0:2f:fd:54:3d:fe:ac:
44:2d:32:eb:82:9c:da:12:7c:30:b1:61:07:a9:31:
22:fe:fc:d6:d8:c8:0c:03:d8:52:e0:ea:5b:ce:45:
33:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:42:D5:5F:F4:74:85:86:5B:84:EB:BF:FD:38:1E:75:59:1E:EC:0A
X509v3 Authority Key Identifier:
keyid:D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f5:2d:9d:de:cb:dc:47:45:fd:23:f5:59:2c:1b:c4:86:14:
ce:7b:49:e3:57:3c:94:41:fb:8d:cd:10:bf:9e:73:39:a6:8d:
41:94:5c:d5:4b:49:77:b2:3d:7d:ab:e4:5c:d8:30:97:47:cf:
95:21:f0:be:20:31:8d:5b:c0:6a:22:f0:40:c3:bc:59:02:41:
ea:5a:26:bd:3d:9f:9e:a1:01:5d:5a:cd:97:64:df:25:e7:d1:
8c:b0:c3:fa:13:0f:04:5d:7e:89:32:6d:5a:27:3f:d1:64:19:
82:f5:f3:32:70:a4:14:d1:e7:07:81:5a:08:61:11:15:75:7d:
4a:3e:49:e0:fd:43:3c:51:c8:3e:ea:75:c9:ed:6f:61:a5:ef:
c5:3d:30:17:5d:c7:75:47:26:25:94:71:b7:4d:3b:5b:cd:8c:
0b:6e:96:44:62:41:79:80:36:a0:76:ca:60:94:56:92:fd:4a:
a8:10:59:4e:c1:bc:a0:bd:2a:11:73:63:33:21:07:8c:8b:88:
c1:78:b0:11:5a:5e:ed:29:58:c0:0a:77:a7:ba:d0:4d:5f:f9:
e9:f0:76:1b:f0:a9:ca:40:06:95:6d:a5:c7:64:01:52:b4:9f:
d6:bf:f2:18:8b:b6:09:d7:83:d6:5d:34:14:61:cd:24:62:10:
04:2d:67:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:40:53 2026 by rpki-client