Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
File: 0euG-JN4a8R309ALoP8eI57mIm0.mft (raw, json)
Hash identifier: ayMhCN2CUql7rP2hDCCYqED0TLJfNzqvbv5f22D78O4=
Subject key identifier: 9D:77:1F:0A:22:9A:8C:C2:D3:AC:97:A2:3A:68:2A:CF:C8:B9:AE:18
Authority key identifier: D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D
Certificate issuer: /CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
Certificate serial: 019D3909A654EADF2C0CD0C89E6F077739B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
Manifest number: 0436
Signing time: Sun 29 Mar 2026 10:00:26 +0000
Manifest this update: Sun 29 Mar 2026 10:00:26 +0000
Manifest next update: Mon 30 Mar 2026 10:00:26 +0000
Files and hashes: 1: 0euG-JN4a8R309ALoP8eI57mIm0.crl (hash: NiK7a3nxmLiE/8V6eUu+aGzItPRNa7nA/nm7s3uTz6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a6:54:ea:df:2c:0c:d0:c8:9e:6f:07:77:39:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
Validity
Not Before: Mar 29 10:00:26 2026 GMT
Not After : Mar 30 10:00:26 2026 GMT
Subject: CN=9d771f0a229a8cc2d3ac97a23a682acfc8b9ae18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d7:8a:1d:29:b2:bf:4a:1a:91:1b:ab:63:5f:
af:ab:a3:0b:73:0f:fa:fd:af:12:2d:9a:57:c1:e0:
f9:9a:c7:1a:89:bd:a4:54:c4:86:a4:96:c2:1e:97:
f4:c8:d7:e5:1a:9a:38:0a:ac:9f:96:22:c1:fe:77:
79:fc:c6:72:bf:18:f1:b2:e9:b1:c4:ea:ee:ff:b0:
46:89:64:34:66:89:1f:39:98:22:d8:cb:40:92:11:
54:1f:4c:b7:db:68:1c:2e:f4:c2:3f:54:94:e9:62:
05:d2:8f:3b:d8:37:4f:58:4e:11:7f:9f:cd:62:b8:
14:96:56:d7:46:b1:39:4c:f8:b5:f7:38:9c:1d:92:
49:24:d6:d5:6f:2c:1f:5c:e6:63:51:5c:91:69:56:
97:fc:8b:2d:e6:f4:e8:c0:59:af:c3:03:d9:86:9a:
ac:e6:b0:e0:22:74:5a:ee:19:e7:1c:a2:d2:9f:b7:
6e:2b:4d:e9:b0:75:9a:f0:ed:2f:f1:b9:20:5f:9c:
45:9d:c4:e4:dc:f4:9f:80:46:28:8f:c4:a6:8a:47:
24:28:68:7b:d2:c5:b2:a8:66:7c:3d:e8:f8:bb:53:
6a:41:07:68:dd:4b:45:01:19:28:c4:d5:fc:6a:a4:
ae:32:6a:3f:ee:e1:54:61:b3:fe:df:f9:bd:a6:13:
92:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:77:1F:0A:22:9A:8C:C2:D3:AC:97:A2:3A:68:2A:CF:C8:B9:AE:18
X509v3 Authority Key Identifier:
keyid:D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:53:98:4b:83:ad:42:73:22:1b:84:83:50:42:ea:9b:ae:b1:
0b:18:ff:d8:ac:d2:40:4c:4a:29:cc:90:a3:83:8e:7a:b7:14:
5f:07:0f:6e:2a:2e:96:3c:73:ed:8f:9c:81:92:86:01:1e:2d:
15:02:dc:5b:07:10:9d:fc:62:5d:b4:83:7c:3e:76:fc:53:df:
e3:a2:5a:84:12:e9:95:9d:3c:b3:19:08:be:f4:00:56:02:73:
b8:e3:92:66:47:7f:e6:ee:2f:c5:3c:45:c9:72:27:3a:af:8d:
b9:6f:35:80:97:9c:18:1f:e9:44:61:ae:c6:38:dd:fd:aa:35:
e7:aa:f4:12:d2:6c:9b:77:38:1e:8b:74:fa:77:0b:64:7d:5d:
ae:46:f3:80:08:6f:d7:14:46:04:b2:37:59:eb:78:12:ef:27:
08:27:33:75:6d:c6:28:68:f1:42:58:f8:d9:d3:43:e7:38:6e:
31:d3:7a:35:16:4e:4e:28:83:78:40:91:54:bb:56:65:12:dd:
23:91:e6:60:ba:5b:66:42:c4:35:6e:23:fc:ea:3c:cc:fe:d9:
9c:47:00:42:e9:06:03:17:f2:91:bd:a9:86:23:21:36:61:df:
90:23:80:46:f1:ac:e7:c1:a4:a6:90:16:a6:93:a0:ff:fc:53:
b6:69:25:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:54:42 2026 by rpki-client