Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
File: 0e1mT0ry-OEZuHomjF1DA_uzYRY.mft (raw, json)
Hash identifier: Z8cC0eSW8PyxQ+laRMgNbOIjGhXL3XuJmZPd63dKnOk=
Subject key identifier: 57:5E:A5:B4:3B:54:21:17:04:12:01:C3:7F:97:AC:3A:8C:77:1B:01
Authority key identifier: D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16
Certificate issuer: /CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116
Certificate serial: 019D26CD2BA557DF88F1DE849C63E49B87F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
Manifest number: 01B3
Signing time: Wed 25 Mar 2026 21:01:13 +0000
Manifest this update: Wed 25 Mar 2026 21:01:13 +0000
Manifest next update: Thu 26 Mar 2026 21:01:13 +0000
Files and hashes: 1: 0e1mT0ry-OEZuHomjF1DA_uzYRY.crl (hash: vt3Jf3gY53O9JG8e/CbQYsGwRWvQxEk/VvK9IdtMDVQ=)
2: BMvBIwftHVjOq-ECziUj7FT9eNs.roa (hash: VyJ9dmhC8T/OTxMz+hnV4q4zH9/xxLGMFMd7o25VL7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:2b:a5:57:df:88:f1:de:84:9c:63:e4:9b:87:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116
Validity
Not Before: Mar 25 21:01:13 2026 GMT
Not After : Mar 26 21:01:13 2026 GMT
Subject: CN=575ea5b43b542117041201c37f97ac3a8c771b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:82:27:65:43:79:26:99:fc:be:ec:c4:17:ac:
3e:6b:46:ec:51:a6:d8:a2:f3:c1:6e:f1:40:df:f5:
f2:ad:64:9a:fa:06:91:b0:52:88:70:56:c8:44:d5:
67:ac:51:89:f8:d4:76:dd:84:9f:bb:29:7c:71:b8:
81:10:b9:a3:13:84:12:f1:7c:b8:ca:69:3b:00:eb:
16:63:80:9a:cd:63:3b:87:a9:92:03:c7:52:5d:97:
81:54:5d:25:87:60:20:96:dc:c3:d5:f7:ff:ac:a3:
cd:9c:e7:16:6a:9d:73:85:db:68:6d:49:cd:fb:6d:
98:fb:6a:42:21:cf:00:9e:2e:08:b7:ed:81:8d:6b:
45:53:a2:34:85:f0:4f:3d:fe:61:e9:70:aa:bf:a2:
ac:da:7a:47:d6:a9:52:fd:c9:5d:38:14:d0:f8:6c:
7d:f6:53:76:4f:bf:d7:c9:1e:4c:5e:4b:c8:4b:4b:
19:56:30:8b:8c:bb:ee:77:9c:b0:46:42:d4:20:2f:
c6:fe:d8:97:6b:d4:73:53:b8:33:ef:e8:04:b2:19:
5d:5e:79:ee:33:9e:aa:c4:a7:37:2d:aa:00:f2:9c:
c4:38:98:78:48:d2:04:79:62:4e:e5:ff:d6:b6:46:
b0:4f:a4:dc:f7:ef:9d:94:8c:05:75:eb:3c:e0:1a:
6c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5E:A5:B4:3B:54:21:17:04:12:01:C3:7F:97:AC:3A:8C:77:1B:01
X509v3 Authority Key Identifier:
keyid:D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:da:70:4f:d4:54:96:60:4a:8c:f4:43:d8:58:ae:05:1f:5e:
58:ce:93:5b:03:af:b1:26:e1:a0:4a:f2:72:82:a6:73:c6:33:
ac:26:95:cc:b1:f9:0e:f8:5f:7b:f2:d9:99:3c:2e:0f:54:05:
51:d4:ac:b4:d0:df:bd:20:6b:d5:25:96:d7:03:ce:65:1f:69:
40:77:5a:0f:0e:b1:37:37:49:87:39:97:b3:81:1e:37:6b:1b:
3b:c2:26:ea:8a:d9:7f:22:01:55:71:0a:62:09:7e:76:d3:61:
cc:90:e5:a4:28:99:c2:f9:cb:b8:e7:d8:ce:34:5a:95:cb:78:
4a:3e:aa:87:c8:ec:f8:5a:42:d8:df:d0:ce:ba:bd:6e:b3:ae:
1f:25:50:27:e9:95:0d:55:e1:95:c7:9d:2e:ef:f3:2b:4b:00:
44:94:0c:fa:05:3f:5b:49:99:31:49:74:35:02:2b:f7:d4:83:
7a:7f:92:4b:92:91:92:d1:3e:34:5f:d7:38:5d:bc:f7:f7:84:
7f:67:2b:03:af:f6:20:8c:40:a8:37:7b:3a:19:84:ce:86:31:
fb:c6:d6:c7:b1:ce:32:1c:5d:74:93:48:1a:8c:bd:18:82:0a:
e9:85:21:55:d1:9e:d7:9e:d5:b7:a5:fe:3f:a3:92:23:55:82:
8a:b6:2a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:17 2026 by rpki-client