Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
File: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft (raw, json)
Hash identifier: hzARh4FVGAq8dxsiy53LIYgWhOwydveTaPzrhC6GXjw=
Subject key identifier: 52:46:7F:C0:D8:12:CC:35:A6:67:84:24:30:72:A2:A1:56:93:F2:B1
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Certificate issuer: /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial: 01A1DFB9E3A80A6068DB01998EEBDE712A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
Manifest number: 13AB
Signing time: Sun 15 Nov 2026 15:01:03 +0000
Manifest this update: Sun 15 Nov 2026 15:01:03 +0000
Manifest next update: Mon 16 Nov 2026 15:01:03 +0000
Files and hashes: 1: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl (hash: 7wJTwzmLg5rENWdOX5LEoHY11lLbgufpxJ0uLeipw/E=)
2: 9gVKfPDu8oaxgCYhsIHGv4QIfWU.roa (hash: fllRN8SucuRDRWnVjdcisQzmvofCxZ5K6VMo5ZRY8Z0=)
3: YOp__Ry-NGpngn9AjDGoHEbjeCg.roa (hash: ON5r8fZJQGVj6wPi39Ya/7ATYu3d/0MWZ+FMIC4DzPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:b9:e3:a8:0a:60:68:db:01:99:8e:eb:de:71:2a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Validity
Not Before: Nov 15 15:01:03 2026 GMT
Not After : Nov 16 15:01:03 2026 GMT
Subject: CN=52467fc0d812cc35a66784243072a2a15693f2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:e1:11:3b:89:10:c2:49:20:c2:b0:23:d4:
44:d0:ad:bf:32:24:b6:d1:0b:b5:fa:cd:f0:3a:17:
a3:0a:8f:8d:4b:5b:4b:7a:c2:58:43:62:47:2b:5e:
55:0d:aa:75:21:3d:72:ef:4d:56:00:a4:0d:bd:1a:
5c:0a:a3:b9:53:e9:ba:fb:52:f6:ad:65:58:97:0b:
52:d5:12:d8:46:98:0c:9e:27:a5:52:11:b9:fc:03:
63:de:37:c8:50:60:2d:4f:5f:e1:09:f2:23:70:67:
32:88:ae:8b:7c:92:85:d8:02:9c:97:32:8e:e5:dd:
a6:fa:06:5c:f4:0b:fe:44:94:78:ec:51:76:34:0a:
9b:1b:af:89:42:81:c7:ee:6c:55:4c:75:e6:ad:b5:
45:ad:79:ba:95:a0:5b:4c:92:18:65:a5:7f:f9:8a:
8b:dc:35:6c:50:04:2a:7e:dd:e0:86:ef:b7:0c:53:
b9:88:b9:48:84:1f:b0:89:de:ca:5d:bd:7c:ba:14:
b5:3c:8f:ab:bb:f7:d0:67:4b:a8:53:c7:00:eb:97:
e9:3f:cc:a4:f9:b0:df:8a:a8:24:c2:c6:ac:73:62:
9d:e8:bb:6f:e9:43:43:b9:f0:e4:65:3e:4d:8a:0d:
fa:3a:65:d2:3f:6f:89:f9:f1:0b:64:d2:18:06:2a:
01:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:46:7F:C0:D8:12:CC:35:A6:67:84:24:30:72:A2:A1:56:93:F2:B1
X509v3 Authority Key Identifier:
keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:16:72:4b:53:57:79:33:1c:e3:41:fd:7b:d0:cc:3d:12:13:
28:25:8e:07:85:b1:f1:02:84:a8:91:1f:6f:cb:ba:90:e7:6b:
55:2c:c0:8f:ac:14:72:bb:02:7f:68:cb:3a:ec:f4:17:1a:e5:
99:ec:52:5c:6f:c2:15:f7:fd:0e:6a:bf:9b:53:01:57:ec:8e:
56:fc:e8:c1:26:d9:56:7b:5a:da:b7:a7:91:97:19:c1:c5:3a:
7c:1e:b1:b8:14:72:56:f3:92:1a:fb:01:64:a2:5e:92:c5:b1:
8a:03:f7:14:ef:33:be:41:9e:15:5b:7d:9a:25:cb:cc:b5:52:
b2:40:79:b6:02:db:e3:13:b7:2d:56:05:77:20:03:a5:5f:2e:
28:c6:97:40:f7:43:83:95:8c:b2:63:82:54:b2:7b:9e:07:fe:
a1:4e:52:48:48:4f:56:6a:ba:4f:5e:8c:2e:b6:21:0c:0d:13:
a2:29:a6:3a:3c:0e:48:70:c6:9f:db:8e:33:f0:63:9e:9b:dd:
2c:6b:f7:7d:f7:ef:28:73:94:04:d7:2e:7a:4e:47:1b:33:64:
42:40:59:39:b6:d0:39:70:02:9e:7b:4b:07:49:6a:c6:bd:3c:
08:55:da:cc:0c:77:1f:82:bb:8d:7c:85:09:1c:ee:94:5d:f5:
cc:48:93:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:06:52 2026 by rpki-client