Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
File: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft (raw, json)
Hash identifier: 0zH0KaQvawrpZLGPaDXhdBgQoV8dtfrkqag/n4+AxIc=
Subject key identifier: F5:7E:27:ED:DE:C5:65:FA:5D:B0:00:BC:F2:F9:D0:71:26:32:32:63
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Certificate issuer: /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial: 019D26CD6876A8D50CB7965DE345DEA3ED80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
Manifest number: 1139
Signing time: Wed 25 Mar 2026 21:01:28 +0000
Manifest this update: Wed 25 Mar 2026 21:01:28 +0000
Manifest next update: Thu 26 Mar 2026 21:01:28 +0000
Files and hashes: 1: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl (hash: 1GfVw+qNf1D+st0lS7Lb5zyYANZLpScdphzdzO+cI8M=)
2: 9gVKfPDu8oaxgCYhsIHGv4QIfWU.roa (hash: fllRN8SucuRDRWnVjdcisQzmvofCxZ5K6VMo5ZRY8Z0=)
3: YOp__Ry-NGpngn9AjDGoHEbjeCg.roa (hash: ON5r8fZJQGVj6wPi39Ya/7ATYu3d/0MWZ+FMIC4DzPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:68:76:a8:d5:0c:b7:96:5d:e3:45:de:a3:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Validity
Not Before: Mar 25 21:01:28 2026 GMT
Not After : Mar 26 21:01:28 2026 GMT
Subject: CN=f57e27eddec565fa5db000bcf2f9d07126323263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:5b:14:0d:f6:87:22:5e:1c:fd:5c:34:4a:
15:87:c8:4e:a4:da:e8:c8:59:d2:f4:cd:e3:20:c8:
f6:b4:5d:e5:e8:93:5e:cb:19:27:54:68:84:2a:cc:
51:ba:e0:25:9f:29:6e:1f:b6:68:2c:f5:c1:3e:09:
c0:53:f9:a7:76:27:b8:ac:ec:7b:70:ff:65:df:e7:
31:b4:23:2f:84:f0:bd:a6:a7:bf:6e:a8:86:e3:14:
3f:17:d1:1e:a6:aa:21:d3:ba:a4:dc:56:d4:ff:f4:
a4:58:20:de:9e:e7:99:a6:bf:41:9b:da:36:f5:24:
64:3c:3e:8a:3b:08:58:23:e1:2a:d2:1d:46:d7:f9:
50:98:7a:be:bd:ed:60:94:73:51:24:1e:87:cd:3a:
40:e4:e4:d6:6c:87:6b:40:1f:aa:01:23:c2:26:6c:
ce:d6:84:71:5b:68:3f:25:75:fd:cc:2f:a7:db:35:
1b:7c:0f:b1:2e:e7:db:62:21:6b:e6:30:4d:d1:5b:
a3:36:2f:60:ae:cf:07:91:7d:37:4e:19:b4:d9:3a:
32:c9:52:41:1a:9f:9c:57:88:01:ae:41:ba:3f:12:
46:3d:ea:4a:cf:9e:db:bc:08:9a:c4:1b:62:14:7f:
b8:c3:20:7e:de:c2:e5:47:c8:e9:4f:78:b6:6e:05:
b7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7E:27:ED:DE:C5:65:FA:5D:B0:00:BC:F2:F9:D0:71:26:32:32:63
X509v3 Authority Key Identifier:
keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:02:ed:2b:ff:2b:e1:e5:a9:3f:95:b7:32:40:e3:30:c0:13:
89:78:ef:a4:b0:7d:79:7a:13:12:ab:0a:55:b3:90:a8:c7:13:
16:48:b2:57:9c:ed:52:cb:84:51:20:eb:aa:bd:56:d4:19:e2:
dc:9e:b1:fe:7b:dd:cd:35:a8:6c:50:8a:02:e2:a4:24:b6:f0:
f9:8d:35:23:89:ac:c8:d2:22:43:84:9d:0d:e0:1c:ae:21:47:
0e:f1:03:29:72:81:90:9a:d4:66:07:91:46:79:36:d4:71:44:
02:2d:f0:bb:8d:a9:f4:ff:49:cc:b7:9b:3f:31:a3:c2:c0:37:
d9:38:96:70:f1:62:1b:1b:65:33:5c:9b:b1:37:99:7b:b9:c8:
92:87:60:27:c6:d3:ab:87:61:69:f5:41:70:3c:96:57:c7:fa:
cf:e4:35:4c:3b:0a:32:96:6c:08:8f:ee:c5:aa:34:7a:f7:ad:
3b:35:bc:d2:de:a7:cb:c0:cf:c3:16:38:be:cf:54:cf:71:6c:
cb:cb:dd:75:08:b3:85:ee:ce:02:b4:a4:dd:18:35:3c:0f:31:
7c:14:a1:04:0b:db:76:42:59:22:67:5f:38:ed:a4:c3:89:f0:
ab:47:d1:ea:20:6e:21:a0:21:7e:b7:73:ae:ce:eb:d8:d0:1d:
cf:2a:bd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:40 2026 by rpki-client