Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
File: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft (raw, json)
Hash identifier: 8twDzFPbHWxdqdsCjgH64TE/BJLytLji63MQrJfW+uE=
Subject key identifier: A0:B7:19:B5:27:27:AE:34:F8:87:2F:FC:FD:44:38:10:D1:50:44:37
Authority key identifier: D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
Certificate issuer: /CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Certificate serial: 019D25BAB874FC7A846AD139C0D57967C594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
Manifest number: 0540
Signing time: Wed 25 Mar 2026 16:01:26 +0000
Manifest this update: Wed 25 Mar 2026 16:01:26 +0000
Manifest next update: Thu 26 Mar 2026 16:01:26 +0000
Files and hashes: 1: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl (hash: SwNp2vejGfdDbuiCDKpAy+XUXJu1MmX1cyuN4uHF2A4=)
2: he8kJ9DCXibthyRw5bWWfdO-zeI.roa (hash: CB90W0F1vwsIT9jZbtFWr7qRy3OvwRqYaZVqidxtkOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:b8:74:fc:7a:84:6a:d1:39:c0:d5:79:67:c5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Validity
Not Before: Mar 25 16:01:26 2026 GMT
Not After : Mar 26 16:01:26 2026 GMT
Subject: CN=a0b719b52727ae34f8872ffcfd443810d1504437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5e:33:a4:c3:50:c8:46:3c:e1:80:5d:22:45:
fc:09:ea:37:49:79:ea:8f:b7:15:67:dc:f3:c7:4a:
ff:80:61:20:3f:43:98:15:53:c7:7c:c6:72:0f:b4:
49:68:7a:e5:64:54:86:4f:4b:bd:05:24:c9:d8:9e:
4b:fd:50:3c:15:ef:ac:a4:c2:95:37:ec:1c:57:6f:
6b:d4:71:4d:d8:e4:c5:00:db:0e:b3:f0:e9:af:d3:
a8:fb:8c:c0:ea:9d:a8:68:c2:73:ca:ba:30:33:a7:
0d:ec:e7:77:d8:cc:47:1c:1c:4e:0c:a1:36:e4:c6:
75:f5:50:4d:ea:5e:14:8a:28:f4:58:8c:23:8c:f4:
c3:aa:11:ad:b5:78:49:e3:03:58:54:f0:aa:37:6a:
46:3d:5b:4e:e2:ef:ea:6e:78:41:61:8e:3b:15:b6:
34:bd:6c:fa:be:d8:44:f3:b5:18:2b:55:77:b5:ee:
fa:12:89:e9:91:77:b4:1a:46:b7:83:3d:aa:5b:41:
b3:af:c0:60:14:b2:6f:91:40:9f:2e:3c:b5:ca:a6:
5c:0b:48:d5:b5:fe:77:77:3a:fa:ba:e0:d9:39:ed:
63:65:15:d0:2e:1e:92:16:59:2e:44:d6:84:88:88:
bc:4c:5f:7f:88:ef:65:11:58:ae:f1:e5:4c:8a:51:
b6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B7:19:B5:27:27:AE:34:F8:87:2F:FC:FD:44:38:10:D1:50:44:37
X509v3 Authority Key Identifier:
keyid:D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8b:d9:cb:93:79:3f:d8:db:67:a9:7a:34:c1:2c:42:7d:fb:
23:d3:eb:9b:e1:7c:a1:ae:2a:ae:44:fb:7c:e1:f4:53:ee:a4:
42:90:2f:1f:02:32:25:25:6b:db:15:9f:40:da:c5:a3:d2:70:
ec:d0:bd:58:0d:df:56:f2:c5:9e:a3:dd:57:0a:76:f4:0c:f6:
1d:da:18:17:65:2d:11:1f:ef:5b:db:b3:a1:d5:3b:73:21:d7:
58:bd:a8:78:ce:f9:9b:17:fb:8b:1a:ec:53:ad:e7:df:c6:19:
f5:e1:a9:48:d8:c5:d0:87:34:d6:a9:a8:46:d0:a0:b6:29:29:
1e:ee:98:5a:19:a1:2a:96:b8:e3:77:70:cd:66:03:5d:5d:fb:
b9:3b:6a:5f:8f:60:10:27:5f:3d:7f:fb:6d:f5:f4:c9:89:ce:
b7:11:d6:89:46:5a:40:9f:a2:fe:b7:75:45:9a:50:0a:d5:2e:
84:10:63:f3:b5:bd:af:e5:44:20:96:f6:fe:1a:5d:d6:0c:3c:
02:c9:72:9d:27:fb:81:43:0d:ea:af:e6:10:e3:19:9c:c2:8f:
a3:15:55:ea:65:82:6b:3a:5e:f9:1d:bd:11:37:d8:62:87:dd:
3c:ab:a2:b3:a7:2e:69:91:19:60:72:88:86:a8:5e:89:5a:ea:
2d:66:ef:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lurh0/HqEatE5wNV5Z8WUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZTVlYjc1MzY2MjBiNTg1N2QxYmY1OTAxODNkNjUwY2Ey
MzIyN2YwHhcNMjYwMzI1MTYwMTI2WhcNMjYwMzI2MTYwMTI2WjAzMTEwLwYDVQQD
EyhhMGI3MTliNTI3MjdhZTM0Zjg4NzJmZmNmZDQ0MzgxMGQxNTA0NDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2l4zpMNQyEY84YBdIkX8Ceo3SXnq
j7cVZ9zzx0r/gGEgP0OYFVPHfMZyD7RJaHrlZFSGT0u9BSTJ2J5L/VA8Fe+spMKV
N+wcV29r1HFN2OTFANsOs/Dpr9Oo+4zA6p2oaMJzyrowM6cN7Od32MxHHBxODKE2
5MZ19VBN6l4Uiij0WIwjjPTDqhGttXhJ4wNYVPCqN2pGPVtO4u/qbnhBYY47FbY0
vWz6vthE87UYK1V3te76EonpkXe0Gka3gz2qW0Gzr8BgFLJvkUCfLjy1yqZcC0jV
tf53dzr6uuDZOe1jZRXQLh6SFlkuRNaEiIi8TF9/iO9lEViu8eVMilG2zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKC3GbUnJ640+Icv/P1EOBDRUEQ3MB8GA1UdIwQY
MBaAFNHl63U2YgtYV9G/WQGD1lDKIyJ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGVYcmRUWmlDMWhYMGI5WkFZUFdVTW9qSW44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82NWZhM2MtMDE3NS00Y2VlLTk5MzAt
NTljZmQ0NTNkZDE3LzEvMGVYcmRUWmlDMWhYMGI5WkFZUFdVTW9qSW44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy82NWZhM2MtMDE3NS00Y2VlLTk5MzAtNTljZmQ0NTNkZDE3
LzEvMGVYcmRUWmlDMWhYMGI5WkFZUFdVTW9qSW44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfovZy5N5
P9jbZ6l6NMEsQn37I9Prm+F8oa4qrkT7fOH0U+6kQpAvHwIyJSVr2xWfQNrFo9Jw
7NC9WA3fVvLFnqPdVwp29Az2HdoYF2UtER/vW9uzodU7cyHXWL2oeM75mxf7ixrs
U63n38YZ9eGpSNjF0Ic01qmoRtCgtikpHu6YWhmhKpa443dwzWYDXV37uTtqX49g
ECdfPX/7bfX0yYnOtxHWiUZaQJ+i/rd1RZpQCtUuhBBj87W9r+VEIJb2/hpd1gw8
AslynSf7gUMN6q/mEOMZnMKPoxVV6mWCazpe+R29ETfYYofdPKuis6cuaZEZYHKI
hqheiVrqLWbvFA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:40 2026 by rpki-client