Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft
File: 0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft (raw, json)
Hash identifier: ki9wkFy16pYjrzOLGnP0suKKF6C3JIO2tLNWFpCR0FM=
Subject key identifier: D7:92:8A:26:8B:FD:54:4D:13:D4:67:0E:88:05:06:16:14:63:4F:A4
Authority key identifier: D0:45:CD:00:73:6E:5A:0E:C2:3B:90:82:65:87:0D:56:0D:55:1B:02
Certificate issuer: /CN=d045cd00736e5a0ec23b908265870d560d551b02
Certificate serial: 019D281694BC402CFDEDD319DD992C0FE0D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft
Manifest number: 0162
Signing time: Thu 26 Mar 2026 03:01:01 +0000
Manifest this update: Thu 26 Mar 2026 03:01:01 +0000
Manifest next update: Fri 27 Mar 2026 03:01:01 +0000
Files and hashes: 1: 0EXNAHNuWg7CO5CCZYcNVg1VGwI.crl (hash: ajQki51LMzPSJ0Rvh86EaxAyiq7L9fNydl0d6qUY3Js=)
2: Pxo9ehHbXZebC306inRLM7y0iaU.roa (hash: DAOuRN4HFLh3V3C0ykmvw7d38j+IxJOCGqFgIfyZtA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:94:bc:40:2c:fd:ed:d3:19:dd:99:2c:0f:e0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d045cd00736e5a0ec23b908265870d560d551b02
Validity
Not Before: Mar 26 03:01:01 2026 GMT
Not After : Mar 27 03:01:01 2026 GMT
Subject: CN=d7928a268bfd544d13d4670e8805061614634fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:5b:1e:7f:0a:04:87:68:e3:c2:0b:15:33:
42:f9:fe:cd:5b:f1:2e:72:ea:5a:0c:a3:3d:f7:24:
fd:49:75:eb:8a:ec:e4:5c:fc:dc:e0:47:0b:48:42:
6c:8c:45:d1:dc:6b:2b:3c:50:d0:9e:f4:41:c7:75:
58:66:41:fc:63:6b:c0:09:4b:70:9d:1a:71:0b:19:
61:9c:82:9f:b7:eb:24:af:ab:76:8f:65:2d:23:ce:
a8:af:90:24:77:a6:4d:c7:d6:3c:87:31:be:fa:17:
59:18:d7:41:ce:d0:21:6c:f2:20:7a:0a:7a:1f:a0:
c3:a1:76:28:a7:bb:6d:ee:1e:38:f4:42:c4:23:ed:
2b:54:fa:ef:ea:b1:88:e1:9c:c5:98:4e:ea:9e:da:
1f:0e:ec:9a:98:8b:3e:fe:25:ca:2e:8a:58:e6:82:
01:9a:0d:45:2d:03:83:ed:d8:86:bc:dc:46:b7:a0:
51:7c:4a:2c:7a:01:02:37:42:42:a4:61:ef:2e:c1:
2c:09:ad:3e:8b:ba:34:ca:2c:af:af:f5:a0:0b:35:
63:32:0e:0d:f2:94:24:28:5e:ae:88:62:c9:92:98:
c6:ba:e3:c6:3f:f3:6d:e4:42:bc:90:90:00:51:4f:
f9:96:08:fa:e8:0b:aa:51:a5:87:29:12:f4:bb:c5:
f5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:92:8A:26:8B:FD:54:4D:13:D4:67:0E:88:05:06:16:14:63:4F:A4
X509v3 Authority Key Identifier:
keyid:D0:45:CD:00:73:6E:5A:0E:C2:3B:90:82:65:87:0D:56:0D:55:1B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9e:74:ed:3a:41:09:0f:be:83:02:a4:19:8d:5c:a5:9c:33:
5a:fc:bc:45:9d:24:81:b5:f1:6a:86:4f:d5:94:b2:56:62:49:
1d:0e:a6:2f:69:dd:11:35:cc:ab:d8:dc:7e:04:2e:de:db:5a:
7d:f7:be:77:88:a8:fe:20:2b:53:2c:ca:9f:ce:eb:a4:25:ac:
93:c5:44:15:5c:82:8a:00:42:5e:ea:14:04:de:f0:89:19:fc:
90:27:dd:92:b0:29:9e:f7:d4:1f:ce:8d:fd:95:b7:0c:80:9c:
bd:cd:af:71:f5:f7:9a:66:27:3d:03:a6:44:bd:ad:d3:70:66:
5d:4b:29:1b:0e:45:77:10:1e:78:76:a3:f7:68:ca:7c:a2:a7:
e4:dd:2c:20:95:31:a2:de:dc:b5:f5:3e:2b:47:1b:7c:d6:63:
03:c6:50:ff:3c:bc:69:da:ac:8d:81:b8:08:e6:98:5c:29:57:
aa:5d:97:97:f1:75:22:13:07:29:69:bd:0a:5b:ad:c5:f7:03:
c9:fe:d9:00:c5:a6:99:77:ef:4a:7a:ef:bb:ca:36:63:96:73:
4c:7c:06:43:e2:e8:b1:b0:04:c5:d5:04:a2:9f:bc:02:dd:f2:
96:33:c6:75:0f:4c:43:84:4a:da:e2:bb:f5:3c:8b:d7:de:27:
45:d5:bd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:38:02 2026 by rpki-client