
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
File: 0elpYhQkgMux04QRdx60_z45g58.mft (raw, json)
Hash identifier: /cxTkbOaCilfJBIpDtQXFTWyfDa6GvsSe9OjKED0kuE=
Subject key identifier: 91:42:7F:F2:BF:D5:FC:A1:04:5F:7D:96:86:6D:0F:55:EE:63:02:3B
Authority key identifier: D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
Certificate issuer: /CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Certificate serial: 019D2A3BCCA0BB825F244C17BA982249505F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
Manifest number: 0CE8
Signing time: Thu 26 Mar 2026 13:00:54 +0000
Manifest this update: Thu 26 Mar 2026 13:00:54 +0000
Manifest next update: Fri 27 Mar 2026 13:00:54 +0000
Files and hashes: 1: 0elpYhQkgMux04QRdx60_z45g58.crl (hash: VJvrBH6pEI09FsSoUHYhXruwjfTpH0v0Afjv/uVIBss=)
2: cHvhPA5WiP2hlNkTCQAUdFz33aQ.roa (hash: kklG1LK9LOsPTVd1KnUPw3+fJn5429kCodQSEA85c8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:cc:a0:bb:82:5f:24:4c:17:ba:98:22:49:50:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Validity
Not Before: Mar 26 13:00:54 2026 GMT
Not After : Mar 27 13:00:54 2026 GMT
Subject: CN=91427ff2bfd5fca1045f7d96866d0f55ee63023b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:9b:55:02:61:9a:bf:54:3b:02:69:1c:ab:
bb:88:83:26:e0:1b:44:55:9e:de:7f:e1:7f:61:6a:
78:95:a9:11:6f:42:12:f4:3d:3a:58:f3:2d:97:38:
ca:7e:b7:a2:ed:e6:99:2c:3e:28:e2:62:43:40:5d:
97:ff:ba:5c:96:9f:9c:5a:4c:17:d6:6d:1c:65:50:
9d:36:38:60:3f:fc:c1:43:c3:9d:1d:8e:ac:c7:3a:
a9:0e:8d:91:32:7e:27:f7:12:7f:af:28:f2:67:55:
00:2c:af:d4:38:24:bf:68:d5:e5:09:e8:29:76:f0:
16:57:29:2a:06:ee:29:8f:76:e6:b3:66:09:96:7f:
00:70:74:70:1e:6b:3b:5d:a2:d0:2c:1c:45:8f:36:
0b:06:9a:2b:f2:38:59:52:8a:60:a1:41:6b:22:97:
72:62:6d:e3:b1:37:24:ed:94:ce:f5:d8:3f:59:c0:
d1:b4:55:2c:49:95:05:eb:ef:99:98:b3:ce:f7:d3:
66:08:8c:69:65:3b:53:7a:86:00:2a:89:6b:93:f8:
96:76:67:91:88:db:8b:12:fb:46:86:79:ed:b8:14:
d5:b6:30:0d:d2:26:fc:dd:ea:77:5d:cf:49:20:4f:
70:91:63:7e:f1:65:18:ef:f9:cc:50:8e:f9:a9:de:
bc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:42:7F:F2:BF:D5:FC:A1:04:5F:7D:96:86:6D:0F:55:EE:63:02:3B
X509v3 Authority Key Identifier:
keyid:D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:17:9d:b2:6b:1b:42:97:2f:76:c8:07:cf:6e:fb:0d:65:af:
db:8a:a6:5b:7f:f4:68:28:b3:b2:d7:76:2a:a2:a4:54:6a:ed:
94:85:af:16:f3:6c:82:b2:38:01:b2:57:22:9f:ad:24:d8:a6:
57:f8:72:73:a5:8e:10:18:c1:c9:29:2d:42:da:0d:b0:94:4e:
9f:c3:34:27:6b:48:b2:ad:aa:ef:c5:2e:a6:9d:10:ea:a7:76:
2e:b1:11:1a:3a:9c:ea:21:64:50:f3:f1:55:c4:9a:be:34:9b:
22:0e:74:e3:ff:51:36:ba:41:2d:8c:2a:b3:4b:8d:0f:f4:b5:
33:4d:5f:58:86:47:21:cc:ac:28:c0:9b:4a:9c:5e:92:c9:ba:
e2:9f:6d:d0:13:07:e8:c1:d2:45:2e:1d:ce:52:16:fe:36:75:
db:dc:f9:6d:45:e6:93:68:33:aa:3a:d9:7c:a0:30:ed:d4:1c:
ef:63:ed:ba:dc:b2:4c:f8:c4:5f:32:07:4c:7a:02:aa:7d:73:
23:8b:9b:e7:93:1a:12:81:81:ed:db:48:6c:62:10:c7:8d:34:
6a:03:f7:c6:2b:0f:d1:5d:12:4d:b9:3c:b9:28:3e:8e:fc:e9:
92:5d:f9:60:4a:61:ec:97:62:6b:0e:7c:70:1d:dd:7a:33:97:
87:10:28:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:00:12 2026 by rpki-client