Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
File: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft (raw, json)
Hash identifier: SKRjKz1shBKefOQsrZpffLaoJxyKELe4QuDA+GxqygY=
Subject key identifier: B1:AC:D0:89:72:DE:F9:CF:E0:1A:56:36:3A:06:51:8D:D8:8C:F2:8C
Authority key identifier: D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
Certificate issuer: /CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Certificate serial: 019F91A3884E7BFFD91CCFF24B4E9C25E5A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
Manifest number: 0681
Signing time: Fri 24 Jul 2026 01:00:41 +0000
Manifest this update: Fri 24 Jul 2026 01:00:41 +0000
Manifest next update: Sat 25 Jul 2026 01:00:41 +0000
Files and hashes: 1: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl (hash: QFcQWjE+PLaIXAPm7IFgIF4zBo5EDHiK4hs99KHu19Q=)
2: he8kJ9DCXibthyRw5bWWfdO-zeI.roa (hash: CB90W0F1vwsIT9jZbtFWr7qRy3OvwRqYaZVqidxtkOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:88:4e:7b:ff:d9:1c:cf:f2:4b:4e:9c:25:e5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Validity
Not Before: Jul 24 01:00:41 2026 GMT
Not After : Jul 25 01:00:41 2026 GMT
Subject: CN=b1acd08972def9cfe01a56363a06518dd88cf28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:f9:64:ab:95:60:4a:8b:ac:fe:e0:31:f2:
6d:65:c8:3c:f5:52:8e:60:97:67:8b:9f:00:50:a4:
08:45:93:24:1d:01:04:62:67:43:c3:48:82:dd:c9:
fb:4f:60:9a:77:20:2d:2a:81:3d:a2:f3:84:20:58:
be:90:9b:5b:72:9d:97:6e:91:24:ff:84:a6:a7:df:
f0:c9:73:85:82:da:e1:87:55:30:ae:27:22:5c:61:
88:b1:48:4e:23:f4:fb:c9:a8:77:3d:93:76:29:f2:
af:30:ee:dd:04:99:fe:00:24:1f:8f:ce:b3:e1:e9:
9f:d8:f1:b0:63:41:8a:9e:52:6f:48:66:7a:65:87:
97:c7:e5:4d:c8:07:12:e1:1f:ab:5f:1e:2e:9d:22:
4a:c2:45:e9:18:55:a2:15:bd:41:03:45:d8:34:bf:
0c:da:22:74:5e:0e:ee:a4:7b:15:bc:cb:49:46:e5:
8b:5b:3e:67:f5:c0:8d:9f:52:8a:73:8e:64:72:d0:
97:d0:d4:e0:b1:b0:50:29:d3:f5:84:85:54:12:67:
21:a5:8f:72:b8:9e:fd:95:e6:35:16:d4:f5:6b:ff:
48:ac:07:4a:38:57:da:46:7b:27:f2:69:a3:97:2e:
5b:16:90:88:0c:8f:de:47:84:8c:4f:87:8c:52:1b:
6c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AC:D0:89:72:DE:F9:CF:E0:1A:56:36:3A:06:51:8D:D8:8C:F2:8C
X509v3 Authority Key Identifier:
keyid:D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:06:96:0f:52:b5:2e:d7:60:da:a4:04:95:53:45:20:e0:36:
0b:4c:ec:b0:27:97:23:05:e1:d5:02:29:66:a0:ea:ef:34:fe:
c4:da:df:06:44:66:8f:63:cf:cf:5e:20:35:8f:fd:3f:78:56:
bd:02:48:fc:fd:49:bc:72:b0:4b:bb:a4:2f:40:a2:4b:1a:24:
e6:01:14:d4:ad:17:3a:be:d2:b0:e2:b1:df:d8:81:8e:ed:1c:
e8:d9:9b:47:e4:dd:e7:98:3b:94:36:36:29:f0:61:da:22:97:
5a:69:2b:db:57:2a:9e:ca:d6:0f:81:5a:0a:a5:fe:58:dc:68:
77:94:d7:80:68:6b:1d:43:c0:f0:11:30:92:36:44:d6:ce:a2:
63:a2:d6:19:87:30:25:b4:c5:db:73:16:e8:cb:9b:7a:c9:25:
f1:73:ea:a0:db:99:e0:74:7a:0f:1a:ba:ce:ab:25:af:60:93:
dd:8a:5c:ce:55:f0:e9:ee:89:a0:d1:2e:c5:4d:a5:fc:bd:49:
36:a4:ea:f5:bd:18:0b:f3:8c:4d:63:e2:38:ac:ed:1a:bb:e4:
7c:87:96:a9:6f:a0:e5:26:28:dc:26:62:2e:40:bc:3c:7a:07:
69:ca:84:1c:2f:86:aa:f7:80:6c:24:1c:ea:59:e5:4c:b2:5b:
5f:de:2e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:58:14 2026 by rpki-client