Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
File: sE0XVlP7vejZidJ-OCe8AR4CCgE.mft (raw, json)
Hash identifier: U0jQwd8z6PqoyRO4DJC43ujUVwzmHQh70wZSSHjn2oo=
Subject key identifier: 69:60:61:B7:83:89:15:18:48:46:4E:73:47:FA:39:59:86:F2:83:45
Authority key identifier: B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01
Certificate issuer: /CN=b04d175653fbbde8d989d27e3827bc011e020a01
Certificate serial: 019D273B245BDF455A930B6A3581D65E65E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
Manifest number: 094A
Signing time: Wed 25 Mar 2026 23:01:20 +0000
Manifest this update: Wed 25 Mar 2026 23:01:20 +0000
Manifest next update: Thu 26 Mar 2026 23:01:20 +0000
Files and hashes: 1: C64-Jz9cM1Y02wj-eYPR8kiNDFM.roa (hash: pQ+PTe9eRZ2bMKuA8XKpNpYesialrqlyPz+/RShJ3Nw=)
2: sE0XVlP7vejZidJ-OCe8AR4CCgE.crl (hash: RHO6szgFKL0HDI62FglvYgKnJ66lKXhatJemxTSi1Dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:24:5b:df:45:5a:93:0b:6a:35:81:d6:5e:65:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b04d175653fbbde8d989d27e3827bc011e020a01
Validity
Not Before: Mar 25 23:01:20 2026 GMT
Not After : Mar 26 23:01:20 2026 GMT
Subject: CN=696061b78389151848464e7347fa395986f28345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5f:6f:01:1c:ed:03:8c:3b:ea:45:46:dd:f7:
c2:81:41:66:75:21:ba:a3:bc:73:7d:ff:1f:32:4c:
92:39:d3:5c:0f:8b:c7:b5:ee:da:ac:21:2f:a2:2c:
5f:ab:fa:ec:c6:fb:f5:3f:7f:07:da:da:63:35:16:
35:74:2f:70:ce:7a:6f:22:c6:31:50:d6:8a:1a:72:
f3:a1:d6:14:f2:53:01:23:d0:f7:9f:73:ac:1a:d1:
4f:89:22:83:10:62:86:5c:f3:17:ba:a6:13:73:a9:
64:29:8f:2a:9c:73:22:be:a5:c8:86:7f:44:cd:b5:
7e:7a:7f:5f:ad:dd:3a:28:b2:9b:e1:d1:a6:f4:41:
6e:4d:ab:89:7d:0b:3e:de:7a:b6:28:88:4b:88:80:
1a:c1:7f:1a:da:e3:9c:72:f3:86:12:40:ef:cd:be:
c0:08:12:97:af:46:03:63:48:3d:1f:91:18:f5:c9:
67:e9:be:ba:81:7c:6f:77:e6:a2:f7:17:76:71:7d:
28:d8:e4:b7:12:85:2b:42:5b:34:4b:b3:e0:d6:9e:
ca:a7:e4:41:ce:6e:72:c8:84:d7:99:8b:2f:cb:92:
a4:ca:d2:55:f4:43:0d:46:76:b8:a2:d6:bd:f6:73:
a3:ab:26:61:9b:4a:f7:5d:e4:f1:af:a8:5a:f1:22:
a1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:60:61:B7:83:89:15:18:48:46:4E:73:47:FA:39:59:86:F2:83:45
X509v3 Authority Key Identifier:
keyid:B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:be:c4:a8:9c:94:11:d1:30:43:d7:7f:6c:9a:f3:bf:14:af:
28:a9:2c:58:d6:a7:1c:fa:79:c1:1b:c8:ae:2a:c8:1f:b5:57:
78:59:21:02:1c:2e:85:67:81:d8:01:c8:aa:53:93:2c:78:bc:
45:54:25:34:90:1c:95:96:95:a3:81:75:ba:b0:63:45:dc:f2:
81:7a:59:ed:6d:b5:45:e4:10:8e:28:3a:16:03:b1:fc:6e:01:
91:5b:15:ec:cc:9a:b1:7f:bb:93:09:52:4c:28:ea:40:fb:0b:
73:b5:d4:ed:57:51:e8:8b:9b:0c:e1:b7:eb:ab:29:03:15:ab:
29:42:d1:d0:2e:df:e1:a4:04:47:90:04:fa:0e:c0:d6:ae:d1:
37:e8:16:c2:ec:b4:22:13:44:8c:c1:65:48:a7:a7:67:ad:0d:
e6:bd:34:37:56:7b:69:43:b0:0d:f9:1a:95:4c:47:70:b8:1a:
1d:f5:22:f5:11:da:eb:6f:e4:88:5f:2e:0d:ca:f2:0b:38:d2:
91:b1:e9:07:aa:3f:85:dc:0c:9f:26:1b:13:8b:6b:b0:36:ea:
e2:ff:57:27:34:b0:74:4c:8f:06:aa:65:9c:78:df:18:66:09:
5c:f1:25:87:56:53:2c:3c:25:ff:a1:b4:bd:7a:cf:f3:a2:b3:
9a:dd:07:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:16 2026 by rpki-client