Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
File: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft (raw, json)
Hash identifier: i7t4Hk1NkEVwboMlZbkPX1Gnz9Uqnrvm2qESvOY3oG8=
Subject key identifier: 6D:BF:40:57:D9:4D:2A:09:7E:B5:E9:0A:8F:76:CE:4C:B0:7A:E9:CF
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Certificate issuer: /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial: 019E1C103A8506B028ED1F582925D202CC15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
Manifest number: 11B8
Signing time: Tue 12 May 2026 12:01:25 +0000
Manifest this update: Tue 12 May 2026 12:01:25 +0000
Manifest next update: Wed 13 May 2026 12:01:25 +0000
Files and hashes: 1: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl (hash: MfyHE1Hj7IS+DgAIgxzUAPOWB0oFNJiIbNubelP3iVo=)
2: 9gVKfPDu8oaxgCYhsIHGv4QIfWU.roa (hash: fllRN8SucuRDRWnVjdcisQzmvofCxZ5K6VMo5ZRY8Z0=)
3: YOp__Ry-NGpngn9AjDGoHEbjeCg.roa (hash: ON5r8fZJQGVj6wPi39Ya/7ATYu3d/0MWZ+FMIC4DzPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:3a:85:06:b0:28:ed:1f:58:29:25:d2:02:cc:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Validity
Not Before: May 12 12:01:25 2026 GMT
Not After : May 13 12:01:25 2026 GMT
Subject: CN=6dbf4057d94d2a097eb5e90a8f76ce4cb07ae9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6b:3a:ca:4e:ba:55:f8:d8:b7:71:4d:4d:0b:
f4:b8:dd:eb:d8:da:74:eb:eb:89:47:99:5f:cd:92:
aa:63:2f:ea:00:11:06:48:7a:b8:85:4b:8e:51:c5:
eb:ad:03:9a:4a:4f:14:ea:c5:81:b4:9f:90:40:55:
71:50:33:14:b2:44:94:d8:f9:26:e1:13:29:7d:2a:
e8:2a:3b:8d:54:fb:9a:6a:bf:df:3a:58:f7:50:f5:
64:3b:29:1e:2b:2c:df:5d:27:ee:a3:13:66:1f:89:
aa:ef:dc:2c:8f:c5:db:68:0b:3c:60:05:4d:ff:65:
49:18:ba:e9:24:07:eb:06:ba:ac:0e:e9:67:7e:33:
3e:12:58:dd:d3:8c:30:1f:e6:02:a7:03:48:44:b7:
8d:4d:ed:45:40:0b:9d:5c:d9:d2:22:dc:98:a6:b8:
81:b1:7d:92:d4:89:08:e1:6d:63:9a:a9:4f:48:17:
1b:e5:cb:eb:c1:72:67:f8:46:e6:f9:ec:7e:0c:60:
4c:13:62:71:3b:17:90:c7:85:10:c7:ae:cf:73:5c:
8b:07:76:77:98:2b:26:0b:a3:04:22:6e:c5:41:b5:
2a:88:f2:82:05:ea:38:bf:4a:2d:05:f5:fb:cd:2a:
5c:7a:d0:92:03:16:9b:1a:38:7c:93:c3:dc:79:fa:
4b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BF:40:57:D9:4D:2A:09:7E:B5:E9:0A:8F:76:CE:4C:B0:7A:E9:CF
X509v3 Authority Key Identifier:
keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3c:c4:0b:39:e1:f7:92:4c:63:c4:cc:7b:3d:9d:fe:30:8a:
70:02:8e:c9:d1:68:07:c2:d4:8c:95:f4:97:f7:a4:11:bc:6c:
62:7c:ea:7b:ba:c1:f3:05:02:0a:dd:c7:1d:c8:45:44:7f:eb:
79:e7:0a:c4:90:17:95:32:d1:cd:9d:b1:29:dd:c2:5f:a8:c2:
1a:3c:d9:ea:17:ce:aa:4e:2e:b4:19:e0:65:a1:06:e8:67:b5:
ec:16:2e:8b:dd:dc:aa:49:6c:be:84:22:f2:62:63:19:7f:f3:
a6:fc:c2:bc:05:19:6e:ec:98:1b:7d:b8:f1:99:e4:18:9c:65:
9b:08:ce:fc:83:7a:51:65:cf:e1:b0:ac:4d:37:a7:b2:f7:d6:
77:54:90:7a:49:ea:ff:e5:c1:5f:0f:96:d9:ea:17:9f:15:c9:
65:4f:85:51:03:20:ad:f4:f3:91:57:ca:1d:3a:c1:5c:13:6f:
a4:a4:7a:fb:f9:74:1c:99:ce:78:59:a9:56:c7:a3:29:92:18:
01:42:01:05:39:7b:17:f3:f9:5c:01:7f:f1:c2:29:2f:8d:ae:
34:13:b3:5f:87:a4:b2:e5:30:09:4f:7c:1f:a7:f3:1d:ec:ba:
22:8c:a3:7f:66:30:31:de:58:2f:ae:9c:3e:74:bd:17:c4:8c:
23:df:6e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:17 2026 by rpki-client