Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
File: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft (raw, json)
Hash identifier: Ijsz+S57JBB25Q50cJyhzDyXyaWe7ivYv6TUbhYL5bA=
Subject key identifier: 4D:9F:CA:16:77:48:C5:7A:D9:28:11:15:82:CB:6C:C7:A6:E0:4A:9F
Authority key identifier: D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
Certificate issuer: /CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Certificate serial: 01A13D139038C8E95280CF18856EFC49C127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
Manifest number: 0729
Signing time: Thu 15 Oct 2026 01:00:54 +0000
Manifest this update: Thu 15 Oct 2026 01:00:54 +0000
Manifest next update: Fri 16 Oct 2026 01:00:54 +0000
Files and hashes: 1: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl (hash: WoPKwwzdW4VCRrBorsy78d9PiqkysmXsiw7KQmScBSw=)
2: v795sY2U8jhvRzL8MVmYlvFz9_s.roa (hash: Hn47sYXDYoB/4A+t0th2lMVq06CbmCPSmHDsJlsUcW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:90:38:c8:e9:52:80:cf:18:85:6e:fc:49:c1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Validity
Not Before: Oct 15 01:00:54 2026 GMT
Not After : Oct 16 01:00:54 2026 GMT
Subject: CN=4d9fca167748c57ad928111582cb6cc7a6e04a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:71:ed:78:53:80:02:be:5e:85:a8:2f:3a:9f:
12:c1:ff:0a:ba:39:4a:94:96:39:ba:c0:76:d9:75:
4b:f5:0d:8b:1d:1b:c5:02:54:01:39:ba:94:11:8e:
ae:2d:23:48:0c:02:77:35:ca:b4:3e:6b:51:35:30:
83:16:b1:25:12:95:14:3d:6d:0f:ce:c2:de:d4:f5:
18:92:81:40:5d:0d:0f:6a:f0:e4:e8:1e:99:ab:99:
c3:5a:fd:8a:fa:4d:27:a7:5e:45:da:4d:d2:e2:57:
87:5b:97:70:f5:1e:ed:dc:92:84:92:47:62:77:2e:
36:67:6e:82:34:d9:f1:b5:4c:90:5f:5b:4a:f6:20:
b3:54:9e:8e:d1:7f:44:78:e8:5b:db:4b:ff:77:71:
0e:8b:57:82:75:6d:b6:e6:94:c2:64:8e:22:3e:61:
5c:36:39:0e:e7:3e:5f:9f:78:33:c7:94:d1:1f:a2:
d2:c0:69:4d:28:1b:0b:8c:af:30:c1:f0:a0:64:6d:
48:9f:da:f2:52:02:e8:24:8e:72:12:e9:e4:a7:20:
35:5f:95:c7:a8:18:b3:45:93:b0:77:79:34:31:9d:
56:64:7a:de:51:f4:66:ec:3e:14:d2:8e:7c:91:aa:
87:63:2b:46:88:c6:96:bc:bb:78:3d:56:6c:b9:fd:
2a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9F:CA:16:77:48:C5:7A:D9:28:11:15:82:CB:6C:C7:A6:E0:4A:9F
X509v3 Authority Key Identifier:
keyid:D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c8:3e:fa:18:6b:fb:11:92:55:bc:a4:94:b0:de:e3:7e:74:
61:6d:a2:80:58:de:0c:44:7d:14:8b:e4:88:2c:7b:02:1a:ba:
9d:a1:bd:3f:4a:8c:b3:5a:01:00:a8:40:9d:d2:d0:9b:5a:dd:
57:f0:1f:30:55:67:ae:9b:0c:87:4f:d5:b9:9c:82:96:93:af:
4c:32:0f:30:cc:d9:83:6d:d1:e6:85:05:84:c3:04:eb:2b:7c:
af:2e:ce:f7:2f:63:3e:f9:7f:32:72:d9:ac:49:3a:05:e5:e1:
0b:7e:8e:d4:bf:f7:4b:24:c6:c2:c1:19:22:32:b1:56:02:10:
c4:5a:c8:85:ff:0b:11:d7:ee:d8:5c:34:f0:f1:c2:f6:c5:9e:
8a:62:2a:91:bc:3a:c7:e6:8c:15:9e:5e:59:3b:e6:44:30:bf:
24:29:25:6a:9e:10:03:78:98:ca:0a:be:87:22:0b:c2:57:a1:
a1:ee:4f:44:b1:80:01:68:5e:ac:30:9f:77:fc:9e:4b:6f:a3:
cc:08:a3:6b:27:fa:27:65:a8:ee:26:6f:b7:07:03:b3:8b:f3:
57:fe:2f:60:ee:eb:9b:ef:9d:63:64:e6:4c:00:19:13:08:8e:
37:b3:80:95:83:26:8d:d5:60:e0:9d:56:fa:00:f1:a1:62:25:
5f:06:73:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:16 2026 by rpki-client