Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
File: 0lE5LNfm5ApFwbikR5iA7vlg8zA.mft (raw, json)
Hash identifier: hOrBpTteSCFx40P3eBrycL3XndtqH8sgpeJO9ofcO3U=
Subject key identifier: E5:91:5A:BF:6C:6E:EC:EF:B6:73:56:B5:9B:74:0D:3A:FE:29:3E:9D
Authority key identifier: D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
Certificate issuer: /CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Certificate serial: 019D37C0AD62D1DB075C75E83399D257A1CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:01:07 +0000
Manifest this update: Sun 29 Mar 2026 04:01:07 +0000
Manifest next update: Mon 30 Mar 2026 04:01:07 +0000
Files and hashes: 1: 0lE5LNfm5ApFwbikR5iA7vlg8zA.crl (hash: 5VFGcjhOE2ur7k2FPbg2PPoeit4AL7KIzOwZbDaPbJs=)
2: 12mV3ZosY8cTKWpFfBQEfwnx0BM.roa (hash: sqnV6smhnureA54M31ulMVSP8a9WYb/7AIpEIZop+fE=)
3: w-By4YicrBafnG_nw52slsPB7Mo.roa (hash: EbrbjE7k8b3TDf5vDoluKgnOO0qKqQeCgXWBufBzO7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ad:62:d1:db:07:5c:75:e8:33:99:d2:57:a1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Validity
Not Before: Mar 29 04:01:07 2026 GMT
Not After : Mar 30 04:01:07 2026 GMT
Subject: CN=e5915abf6c6eecefb67356b59b740d3afe293e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:7e:68:1d:2d:7c:3d:dd:fc:8b:3d:99:a6:
cd:02:e1:75:bc:c7:f6:49:23:57:31:6f:d5:ae:45:
e6:4d:3b:21:09:8a:b5:b4:aa:28:27:71:86:be:29:
fe:55:32:bd:c0:ba:4c:a2:4b:66:f9:a7:65:63:c7:
54:3b:46:c0:28:cd:22:c8:c7:be:97:78:62:f9:74:
af:50:ca:f2:e2:d9:81:b6:af:41:41:b4:42:25:00:
33:91:24:fe:3c:95:2a:9c:99:9b:d9:43:04:89:c5:
34:93:71:8e:0c:77:8e:36:d7:42:75:ea:9a:58:79:
3f:b2:f3:6b:b3:11:17:d8:43:28:4c:29:61:b0:80:
91:dc:0c:51:e8:42:51:31:99:4b:96:82:4d:37:db:
c2:09:42:5b:c8:9c:ab:4a:bc:c2:eb:60:1f:d6:2e:
9b:e4:58:e7:f0:cb:b7:7d:07:5b:fd:78:bb:fa:58:
fc:16:c9:a3:05:1d:80:db:60:8b:e4:a0:ca:19:97:
60:b7:f4:91:ca:ba:32:7a:a3:61:a0:54:7f:97:07:
e5:b2:92:3e:a3:42:10:ea:3d:f4:08:49:7d:bf:be:
3b:3a:4f:b0:6a:9f:76:93:1a:8a:06:36:1a:3b:2a:
e2:06:9c:e6:5e:d1:d1:ef:24:05:eb:fd:40:4b:16:
8a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:91:5A:BF:6C:6E:EC:EF:B6:73:56:B5:9B:74:0D:3A:FE:29:3E:9D
X509v3 Authority Key Identifier:
keyid:D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e1:f6:3f:03:32:0b:6a:33:f9:a3:e8:57:a8:b3:e1:7d:ab:
eb:cc:19:6a:df:4e:ec:93:ca:ff:4f:82:a8:45:63:1d:76:bd:
76:29:c7:59:47:e3:41:57:3e:c6:fe:0d:ce:5a:02:36:fd:cf:
e0:a4:b1:bc:c3:66:5e:7f:b7:dd:e6:58:80:67:ae:6e:38:00:
5d:da:5d:41:b6:8e:55:be:cd:0e:ed:f9:c1:a1:2e:aa:f7:97:
5d:e1:c8:f9:0a:38:34:eb:f1:48:f2:7d:e7:b5:98:61:1b:8c:
2a:ba:e6:c0:16:19:0b:b2:a7:fc:21:57:78:ab:e5:2c:5d:96:
ba:d8:7c:bd:98:30:80:5b:3f:28:28:12:bf:97:7b:79:fe:b8:
01:e4:c4:01:98:32:6a:5d:18:da:e3:35:f0:9f:fa:b9:55:c2:
df:ac:98:4f:75:63:79:6a:d8:50:7b:49:23:f9:d1:d4:40:3c:
18:c4:17:8a:49:a6:bc:43:da:ed:bc:ba:39:ac:d1:02:10:4b:
6c:6a:f4:de:f4:2d:a9:c3:6b:17:b9:b3:c0:b9:1e:f3:c1:8f:
75:01:22:c4:c4:02:e5:c3:78:23:cf:97:11:46:63:48:ce:70:
5e:44:94:84:d7:7e:02:be:7b:f4:99:2f:e3:d9:a5:be:af:7a:
04:91:5a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:38 2026 by rpki-client