Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
File: 0mpECeqR9QbWM4ccbDVUDUYDN9E.mft (raw, json)
Hash identifier: GTdHPZcPvQIuJJM/x2ixDMO0s+Dg6SxDHSmGH/PquJo=
Subject key identifier: 1F:8F:C5:AE:A3:09:43:E0:B5:31:F3:6A:4B:14:2D:EE:AD:5C:29:D6
Authority key identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
Certificate issuer: /CN=d26a4409ea91f506d633871c6c35540d460337d1
Certificate serial: 019D25F13411FFF5695698B013CFFFDDB33D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
Manifest number: 1067
Signing time: Wed 25 Mar 2026 17:00:57 +0000
Manifest this update: Wed 25 Mar 2026 17:00:57 +0000
Manifest next update: Thu 26 Mar 2026 17:00:57 +0000
Files and hashes: 1: 0mpECeqR9QbWM4ccbDVUDUYDN9E.crl (hash: aCtZFwOwfqRlSjgkGDUcljPFGHjbL8SKK7+4K6d+du8=)
2: AcTeoEML1ryHQtehrMdoz9pSMNk.roa (hash: 58HREcExgCm4jYk7OfR+la9NkSYLp6wFVz1Zv1g3G6w=)
3: wzoQWaU78B1JYcVEw1aU_m666Qg.roa (hash: YXxlzjY6ITzVnS2guD8G2HgvMXrNu1UDUO++sIfSdhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:34:11:ff:f5:69:56:98:b0:13:cf:ff:dd:b3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26a4409ea91f506d633871c6c35540d460337d1
Validity
Not Before: Mar 25 17:00:57 2026 GMT
Not After : Mar 26 17:00:57 2026 GMT
Subject: CN=1f8fc5aea30943e0b531f36a4b142deead5c29d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:37:27:6c:13:d3:1a:55:b7:8c:51:df:0f:38:
a0:69:ca:d0:0b:9d:31:cd:25:4e:2f:35:3c:ce:10:
34:f7:d9:83:ee:fb:06:3d:21:3e:53:52:28:64:62:
d6:ab:97:45:70:c4:32:c8:6a:f0:16:e5:69:b3:ab:
87:e3:27:c7:ab:4d:19:49:de:2d:bb:ae:a1:5e:0b:
99:6e:5a:7c:1d:77:9f:9a:60:94:df:62:ba:85:4d:
44:2c:b4:d0:97:e1:5b:3c:69:62:ce:e6:34:23:41:
ed:8f:bb:71:9e:99:fb:33:1f:17:78:e5:82:73:2e:
ef:83:2b:e2:01:5a:5e:09:1d:31:0a:0c:a2:ed:fb:
fd:17:48:23:ba:ee:97:7b:85:d4:67:a8:18:47:d3:
49:16:99:6a:7f:36:0f:7e:91:3b:71:44:0f:dc:06:
d4:93:12:d5:c0:97:9e:7b:f1:92:09:00:45:f2:68:
56:c0:6a:7d:e7:79:0e:d7:74:42:16:33:42:bc:b7:
6d:87:1d:8c:7d:15:2c:76:94:17:81:a3:c4:39:76:
ef:21:3e:92:a7:b0:b5:02:60:df:3c:11:39:df:96:
91:21:69:e1:08:ef:b5:ef:42:7d:5f:86:5e:2c:5e:
89:7f:ef:ca:70:c5:6f:bc:10:c1:df:32:f4:f1:44:
95:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8F:C5:AE:A3:09:43:E0:B5:31:F3:6A:4B:14:2D:EE:AD:5C:29:D6
X509v3 Authority Key Identifier:
keyid:D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f1:64:7d:7c:ae:b5:f8:f2:7a:ae:22:be:fe:da:09:b3:65:
b1:40:1e:a3:26:d4:d5:4e:47:4e:02:aa:f5:d0:bc:f0:cd:b9:
20:a2:9a:57:45:96:ac:84:59:70:42:87:0f:65:f7:d5:5b:b9:
14:ad:58:ff:19:91:33:04:5d:c4:64:c7:ed:20:f3:78:3e:e5:
06:ca:50:23:ad:0c:07:ee:00:e9:c4:4b:fc:9f:c3:cf:0c:8d:
7e:9b:f2:ba:7e:fc:c8:a3:46:ab:32:f2:00:a0:5d:74:6f:e7:
ae:37:f7:0f:3b:60:c9:33:a4:a6:f3:f1:2e:6b:db:a0:b8:20:
32:48:9f:43:fc:d2:7f:39:91:56:a4:2b:d0:6c:b0:1d:86:20:
4b:2e:ad:0e:53:57:05:32:d5:84:5d:2b:d6:bf:e9:f3:88:fc:
69:f7:fb:f4:d9:49:86:ea:a9:e5:35:43:5f:47:2c:9f:56:20:
ea:56:e8:33:9c:4e:c1:91:16:b8:33:e8:74:ab:b2:c3:8c:f3:
30:ff:7f:b3:bd:9e:87:f4:8b:a6:f0:fc:ef:53:ca:3a:02:a5:
26:73:ed:cf:f4:83:8e:21:9d:56:89:54:60:c0:7a:e7:2e:46:
a5:17:e4:3a:63:c1:8a:ca:52:09:72:55:28:86:9a:81:51:24:
34:88:36:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:54 2026 by rpki-client