Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
File: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft (raw, json)
Hash identifier: o4KbB/D+X6IxlopRwQRDu2rhkw0GHaxxfdhVpmRDHEs=
Subject key identifier: 59:69:8B:62:F1:B3:7D:89:0E:51:E0:D9:C2:13:13:CC:67:88:88:08
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Certificate issuer: /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial: 01A0D53947888F6DE5820B67901FB3550962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
Manifest number: 1321
Signing time: Thu 24 Sep 2026 21:01:35 +0000
Manifest this update: Thu 24 Sep 2026 21:01:35 +0000
Manifest next update: Fri 25 Sep 2026 21:01:35 +0000
Files and hashes: 1: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl (hash: QjDIY/WUN/FVEkYSGn8V17CHVNWMOUrQklRfjx32ytg=)
2: 9gVKfPDu8oaxgCYhsIHGv4QIfWU.roa (hash: fllRN8SucuRDRWnVjdcisQzmvofCxZ5K6VMo5ZRY8Z0=)
3: YOp__Ry-NGpngn9AjDGoHEbjeCg.roa (hash: ON5r8fZJQGVj6wPi39Ya/7ATYu3d/0MWZ+FMIC4DzPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:47:88:8f:6d:e5:82:0b:67:90:1f:b3:55:09:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Validity
Not Before: Sep 24 21:01:35 2026 GMT
Not After : Sep 25 21:01:35 2026 GMT
Subject: CN=59698b62f1b37d890e51e0d9c21313cc67888808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:08:9f:58:17:22:7d:ef:eb:85:c3:70:15:
5f:ea:12:51:2f:ba:0c:d6:1a:28:4d:f5:4b:8e:08:
5d:c1:97:18:60:51:60:ec:ac:ec:d4:3e:1e:cf:bf:
06:8f:a5:86:74:0c:c3:60:ac:22:c3:b2:37:e0:e4:
4f:15:89:92:4f:1a:7b:6a:8e:73:8c:1b:4a:71:6d:
cc:df:ee:63:ab:3e:a8:f5:64:0f:b2:12:22:f9:0f:
b9:0f:72:73:ed:8d:f3:3c:7f:20:dc:ca:24:7b:33:
61:57:aa:60:03:2f:25:da:38:dc:ad:00:fb:80:eb:
81:ad:58:81:da:a3:47:9e:3c:6a:06:81:13:c2:b1:
eb:83:88:24:60:d9:82:ec:ae:53:2b:7b:fd:ec:68:
bd:62:04:f3:51:94:83:cf:78:b1:60:05:96:e4:15:
91:8e:81:c5:68:0c:79:fb:d4:3c:02:f7:62:8f:eb:
b4:99:1f:86:fe:e3:2f:dd:ca:31:4a:21:b3:39:33:
df:c2:4d:7d:3b:4e:13:c1:ff:e0:d5:77:0d:d6:d7:
0c:ca:43:03:7f:b4:3b:ef:dd:e3:7e:e0:99:ba:65:
06:87:f1:25:1c:c8:60:8d:de:ca:5f:6d:98:5c:c5:
33:54:bd:a4:9a:f1:f8:c8:83:d4:91:e6:63:ca:c7:
73:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:69:8B:62:F1:B3:7D:89:0E:51:E0:D9:C2:13:13:CC:67:88:88:08
X509v3 Authority Key Identifier:
keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:7b:a2:bd:c9:47:7c:0f:1f:4c:f3:14:b3:de:c6:4d:16:60:
3f:ae:49:8c:8f:90:c7:14:ef:ca:37:ec:83:d6:95:a2:90:bb:
15:88:65:3e:96:65:d3:5d:11:53:4a:ae:f2:f4:06:f8:06:45:
13:03:52:78:5f:88:6c:74:69:be:d2:ce:88:5a:82:54:fc:b3:
82:a6:d8:36:33:33:10:8a:f0:3c:23:52:49:b8:d0:bf:07:21:
c2:b4:ca:95:ef:36:07:e5:3d:8b:4e:86:79:07:e3:12:93:02:
a7:bc:9a:e6:f8:4c:26:d8:da:74:ae:7f:f7:b5:4c:e2:e0:60:
e1:1d:5d:45:03:ad:6c:d4:af:d2:a9:37:4a:34:98:3d:b4:70:
42:c7:c9:60:36:64:aa:bd:23:6c:13:81:81:58:ad:41:b5:a3:
a8:6e:93:04:df:6c:ac:a7:21:2e:41:38:f6:69:16:3d:02:bb:
46:52:e2:32:f6:26:5d:80:a1:59:f6:e6:ad:d4:0b:36:13:32:
ec:c7:31:d3:4f:63:f4:4a:4b:df:13:93:14:e3:6f:e4:77:c5:
0a:5e:a1:0e:a6:1b:39:14:6a:ea:92:1f:2f:c6:55:38:8b:e8:
4b:3a:85:b2:ec:1d:4e:e6:36:8f:7a:b2:0c:c5:b4:a6:0d:6d:
9a:3e:35:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:13:58 2026 by rpki-client