Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft
File: 0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft (raw, json)
Hash identifier: rQjKgSPfkpZo5Xv1UMDin5nwC+EkLSgUus15pjwb8A0=
Subject key identifier: 94:A4:97:6A:9D:AC:BF:13:0A:B3:75:6B:38:B3:24:56:CB:E5:BC:A0
Authority key identifier: D0:45:CD:00:73:6E:5A:0E:C2:3B:90:82:65:87:0D:56:0D:55:1B:02
Certificate issuer: /CN=d045cd00736e5a0ec23b908265870d560d551b02
Certificate serial: 01A0D494A3C6E39C63D69919D92B13F522D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft
Manifest number: 0349
Signing time: Thu 24 Sep 2026 18:01:46 +0000
Manifest this update: Thu 24 Sep 2026 18:01:46 +0000
Manifest next update: Fri 25 Sep 2026 18:01:46 +0000
Files and hashes: 1: 0EXNAHNuWg7CO5CCZYcNVg1VGwI.crl (hash: QP12lMcQMIwViP3OO8Ldyhq9XP5G5i5ByWfKa7iWsxs=)
2: Pxo9ehHbXZebC306inRLM7y0iaU.roa (hash: DAOuRN4HFLh3V3C0ykmvw7d38j+IxJOCGqFgIfyZtA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:a3:c6:e3:9c:63:d6:99:19:d9:2b:13:f5:22:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d045cd00736e5a0ec23b908265870d560d551b02
Validity
Not Before: Sep 24 18:01:46 2026 GMT
Not After : Sep 25 18:01:46 2026 GMT
Subject: CN=94a4976a9dacbf130ab3756b38b32456cbe5bca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:96:b1:ac:59:97:31:ed:ef:23:76:04:6e:
d6:26:f9:4b:34:c1:f7:a7:89:a5:2d:c8:af:a1:15:
1c:a5:eb:1f:19:62:d3:cb:89:da:61:05:b7:95:a4:
45:1d:4a:a7:90:39:49:59:8a:3c:ad:9a:bd:63:ad:
93:ee:14:23:0b:d0:b0:15:d6:bf:3c:c3:2e:3a:3e:
4d:1d:76:49:bb:49:bc:48:7d:01:1f:fe:38:08:b9:
72:c1:17:a1:64:eb:3c:7e:dc:56:89:e8:7a:09:ee:
ac:23:a2:43:f9:d0:e5:ff:8b:41:6f:c3:e3:a7:ef:
99:58:08:eb:76:b7:6c:59:7e:5b:b4:11:32:37:81:
36:51:11:68:fb:b0:ed:02:a6:ce:d7:30:5c:08:0e:
a7:c0:35:eb:e0:d3:8f:08:f2:fe:b9:ef:81:93:a2:
d9:28:c0:8b:e1:2b:6d:ab:52:8b:04:e7:3d:9d:6e:
82:df:2b:24:b8:43:22:5e:1a:21:01:97:e8:02:2d:
64:61:ef:33:4e:ee:38:1f:64:2c:c3:3f:81:9c:71:
86:3c:10:a6:a2:b0:81:03:e7:80:81:81:5f:f2:89:
98:b4:bc:4f:f1:91:91:1f:eb:1b:e4:a2:55:c9:16:
42:1c:30:6f:85:ff:99:73:e0:1e:11:5a:ca:d1:63:
5e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A4:97:6A:9D:AC:BF:13:0A:B3:75:6B:38:B3:24:56:CB:E5:BC:A0
X509v3 Authority Key Identifier:
keyid:D0:45:CD:00:73:6E:5A:0E:C2:3B:90:82:65:87:0D:56:0D:55:1B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:30:d1:f7:d9:f1:ee:7b:ba:07:2a:f8:e9:69:a9:31:05:87:
2b:e5:b5:c4:72:3a:d4:e0:91:47:ba:8c:e8:e8:6b:6a:fa:df:
40:35:e7:7d:42:a7:4a:93:47:52:20:9b:ea:e5:e3:bd:bc:e7:
a5:64:0a:61:10:85:c6:3c:26:30:a0:cb:26:6e:aa:5c:2c:3f:
82:4e:51:1b:0c:1b:7c:06:ca:bd:6e:7e:5d:79:ed:c3:43:06:
01:33:32:67:18:00:17:e0:d7:4b:96:8f:94:24:3d:2b:5b:5e:
b7:5b:b5:ee:0d:3a:88:ec:a9:2b:42:39:99:d1:2e:cf:30:00:
be:4a:a8:8f:cf:97:32:be:84:6f:84:1e:db:11:ae:87:66:1b:
4d:c4:1e:06:58:66:bb:11:84:6e:d7:0d:64:ff:2f:72:5a:02:
a3:da:37:c3:35:12:73:18:b9:fc:b7:ec:e4:ff:65:1b:20:f2:
7d:7d:9b:98:b9:09:93:32:4f:75:49:59:ce:78:b3:61:72:b3:
88:a8:4a:e6:0a:6b:1a:2a:22:fa:aa:6b:ea:33:ec:89:14:25:
a3:b1:a3:9a:45:48:1a:4e:7e:45:ab:41:5b:e6:89:08:8c:b0:
c8:c2:c9:f0:dc:fb:13:85:dd:2b:35:58:ac:e2:fa:ee:d1:cb:
61:d7:38:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:52:54 2026 by rpki-client