Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft
File: 0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft (raw, json)
Hash identifier: VYVrAq4Hs5oWOPCTT3bXTItMIU/Lz+YTdSqvb6MrGB8=
Subject key identifier: CE:44:29:1B:B2:46:DA:A4:41:9F:E0:3B:A4:3D:D8:F4:0C:A9:E9:85
Authority key identifier: D0:45:CD:00:73:6E:5A:0E:C2:3B:90:82:65:87:0D:56:0D:55:1B:02
Certificate issuer: /CN=d045cd00736e5a0ec23b908265870d560d551b02
Certificate serial: 019F90235C271A86DB7F0EBCA1AA8C72457A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft
Manifest number: 02A1
Signing time: Thu 23 Jul 2026 18:01:04 +0000
Manifest this update: Thu 23 Jul 2026 18:01:04 +0000
Manifest next update: Fri 24 Jul 2026 18:01:04 +0000
Files and hashes: 1: 0EXNAHNuWg7CO5CCZYcNVg1VGwI.crl (hash: XyKUBLNt82T5Da8vuEzw55k3x1opq7mTJj5296ejLfE=)
2: Pxo9ehHbXZebC306inRLM7y0iaU.roa (hash: DAOuRN4HFLh3V3C0ykmvw7d38j+IxJOCGqFgIfyZtA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:5c:27:1a:86:db:7f:0e:bc:a1:aa:8c:72:45:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d045cd00736e5a0ec23b908265870d560d551b02
Validity
Not Before: Jul 23 18:01:04 2026 GMT
Not After : Jul 24 18:01:04 2026 GMT
Subject: CN=ce44291bb246daa4419fe03ba43dd8f40ca9e985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:80:c8:f4:60:4e:4e:31:49:57:e6:dd:59:08:
a4:d9:1a:d7:21:13:ba:38:f9:a9:2a:e7:52:ba:96:
93:27:66:33:fc:6e:95:77:0d:3e:2f:00:b8:e6:31:
f1:15:5e:ca:ae:81:d8:12:5f:7a:cc:68:05:1d:c6:
4c:1a:d7:4d:df:a2:30:d7:0e:14:86:68:29:54:2c:
ec:00:ec:75:c3:70:19:50:8c:ba:85:f0:0a:23:e1:
cd:eb:c4:18:2e:35:2b:eb:f8:1d:05:dc:d1:e6:d3:
99:08:35:95:d1:e7:45:21:8a:22:c7:14:9a:be:17:
00:4d:16:f6:a2:21:6b:32:46:4d:be:2d:77:7b:f3:
db:e7:20:57:75:c8:13:e2:e4:c8:c9:3e:d9:b3:d6:
41:e8:ef:33:eb:95:59:5d:72:4f:9c:fb:e5:7e:96:
46:42:16:ce:94:78:13:b9:f8:f4:fb:ea:5d:5a:62:
51:01:ba:01:52:35:18:b8:37:44:db:9a:67:84:16:
3d:e5:62:48:c4:01:58:68:61:4f:b0:46:23:4b:28:
b0:2d:c4:19:9c:7d:bc:b9:49:3d:a7:cd:7d:1c:55:
8a:66:15:7d:e1:5a:68:41:ab:75:25:28:b3:81:6e:
c6:51:f1:08:9b:27:db:fd:36:60:7c:24:78:f7:57:
63:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:44:29:1B:B2:46:DA:A4:41:9F:E0:3B:A4:3D:D8:F4:0C:A9:E9:85
X509v3 Authority Key Identifier:
keyid:D0:45:CD:00:73:6E:5A:0E:C2:3B:90:82:65:87:0D:56:0D:55:1B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:15:6a:c6:4e:fb:a0:75:be:36:ab:05:ca:7e:41:02:b6:d4:
a0:8d:df:35:f7:9e:e8:4b:c8:16:2c:9a:f9:93:24:80:ab:32:
98:38:09:a7:56:49:20:78:f3:16:75:7a:35:e9:ac:b2:48:d9:
3e:27:fa:c9:03:47:69:70:45:e6:dd:80:4c:9b:21:61:4a:a1:
13:b6:1d:ee:f3:d1:6d:f7:5e:e8:c1:1a:f5:d7:83:d7:39:dc:
78:02:09:05:9c:14:b5:36:9d:55:6f:24:5b:92:17:9a:24:8b:
b7:d5:b7:9c:c4:c3:8b:85:70:28:a3:6f:f9:20:e4:5d:81:52:
2a:e0:f1:ba:ce:b5:2a:36:b9:a8:49:1f:19:71:ec:52:98:64:
4e:16:78:e9:2b:ce:98:4d:71:e4:f3:44:1a:32:d8:dc:fc:b6:
d7:64:72:7a:6d:7f:90:0f:f0:d3:f4:36:0a:f2:70:78:9c:b1:
36:ea:92:22:73:14:62:37:4c:7c:9c:36:90:9b:a6:10:bc:55:
13:14:97:68:03:a4:65:f3:f3:41:dc:e6:1d:02:9b:f3:dc:4c:
bf:31:07:e2:ba:d2:9e:77:34:41:ea:8e:d5:5b:87:fe:80:09:
fd:77:87:90:33:0b:3c:0f:ec:55:8e:37:b7:16:7c:b5:9a:6e:
fb:40:92:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:13:02 2026 by rpki-client