Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
File: 0euG-JN4a8R309ALoP8eI57mIm0.mft (raw, json)
Hash identifier: UcEQ2RNGkuukc0bEHbHzK4HaOTHcqLNMxW+PGA1tqIU=
Subject key identifier: 64:82:F9:3E:0B:72:A4:D3:FC:15:3A:57:3D:80:70:1C:0A:29:8E:A3
Authority key identifier: D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D
Certificate issuer: /CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
Certificate serial: 019D25BA29AD71D319BCB76C9F994C5A2A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
Manifest number: 042C
Signing time: Wed 25 Mar 2026 16:00:50 +0000
Manifest this update: Wed 25 Mar 2026 16:00:50 +0000
Manifest next update: Thu 26 Mar 2026 16:00:50 +0000
Files and hashes: 1: 0euG-JN4a8R309ALoP8eI57mIm0.crl (hash: 3uFqu02HrWJ+6km8CJWFmFL8fTo+w5kG76fU/kLzC4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:29:ad:71:d3:19:bc:b7:6c:9f:99:4c:5a:2a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
Validity
Not Before: Mar 25 16:00:50 2026 GMT
Not After : Mar 26 16:00:50 2026 GMT
Subject: CN=6482f93e0b72a4d3fc153a573d80701c0a298ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:56:28:b3:ff:7b:05:2e:8f:3a:f0:b4:73:
22:c6:b3:e8:26:b2:bc:00:32:75:8d:51:44:f8:9d:
ee:8d:fc:58:90:79:80:71:1a:17:fc:e3:58:83:79:
d5:62:5f:2a:51:41:16:2a:71:4d:1c:50:b4:a0:49:
39:ef:18:5d:6f:c1:08:f8:fb:02:2c:2c:85:c6:b4:
7e:16:5a:87:ff:ec:8a:69:dd:60:8e:0e:c7:84:05:
cc:6f:13:8c:19:e5:b1:59:fb:2b:3c:71:78:49:b1:
fd:cc:d1:17:44:49:ba:bc:d2:4f:0c:43:78:2c:02:
14:33:84:26:2c:34:1b:69:d9:73:90:db:8a:4f:0f:
cb:c0:ed:b3:93:08:1c:fa:1b:df:54:79:53:cb:16:
4b:c7:b3:b9:f8:87:d7:f4:6c:6f:0c:3d:bb:5a:68:
6e:0c:1c:cd:64:76:ca:ef:28:2b:85:ac:dc:14:29:
8e:72:38:f9:b1:b3:d3:3d:65:72:8e:e4:d0:2d:3b:
e6:43:19:4d:bd:6c:a1:9a:ac:2e:14:7f:5b:4e:b4:
76:e2:cc:92:12:ce:54:77:77:16:ab:ce:5e:ec:94:
fe:63:ee:3f:da:d3:ed:0a:96:8d:87:64:bc:3b:71:
4b:7f:5c:f1:5d:0b:63:3e:11:8a:cb:d5:50:fe:05:
fb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:82:F9:3E:0B:72:A4:D3:FC:15:3A:57:3D:80:70:1C:0A:29:8E:A3
X509v3 Authority Key Identifier:
keyid:D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a1:1a:ca:6e:fe:84:c0:e5:83:47:c6:85:22:7e:80:1b:4f:
da:07:09:94:48:7e:0f:15:0b:ee:cf:41:f6:b0:b6:4d:7c:54:
46:51:09:03:19:df:0b:61:86:2b:04:82:67:e8:09:e5:22:db:
78:d4:72:9f:d4:da:96:9d:3c:bf:29:6a:bf:3a:1e:04:8f:65:
3d:08:0c:06:bb:e3:b6:4e:84:14:dc:f9:61:44:87:56:47:2f:
3d:ed:29:96:27:30:e0:e1:6d:61:d7:59:83:37:99:b2:e2:2c:
28:07:70:2e:a2:d4:60:8d:d8:b2:0c:82:2f:f0:43:11:3b:92:
7d:11:bc:53:ce:98:92:a3:7a:a7:df:0c:3a:3a:94:7c:ab:33:
8a:4f:e0:a4:27:d9:bc:ad:00:a7:2f:84:d7:6b:9f:8f:63:9d:
0e:aa:d5:a4:bb:37:4d:39:d5:13:fc:89:77:83:15:ca:5f:9b:
64:9f:dc:7d:48:06:df:b2:1d:e5:6e:49:fe:7a:5d:45:2a:bd:
08:a2:d9:b1:39:27:00:25:7a:10:1e:cb:77:0d:a0:aa:d8:e8:
8b:e2:74:01:35:c5:df:36:a9:76:b5:63:e7:d3:f2:34:e2:79:
28:e9:0a:12:83:c4:74:a5:46:55:89:96:6c:90:87:38:88:4f:
17:07:00:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:11 2026 by rpki-client