Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
File: 0eAT7IpcVt8kGpslY9ER-OVDv5E.mft (raw, json)
Hash identifier: sFWDxaLzKuiWU1xRQhU3gCtDAeirGP9NQ2eDxPtP/Yo=
Subject key identifier: 4C:3C:E7:76:0C:48:EF:4C:B7:D7:57:15:0D:34:21:33:5E:A0:12:33
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial: 019E1CB4F178183E3EA36784C4A56A6BF235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
Manifest number: 1920
Signing time: Tue 12 May 2026 15:01:20 +0000
Manifest this update: Tue 12 May 2026 15:01:20 +0000
Manifest next update: Wed 13 May 2026 15:01:20 +0000
Files and hashes: 1: 0eAT7IpcVt8kGpslY9ER-OVDv5E.crl (hash: u4fLvxwqgmRqObmOdPQkrIQyrCj0N+Zo+IJuQs1NjEQ=)
2: HJaqxqktn6jSURWfLmaFrTGw4k0.roa (hash: nCPkWfg8fjBLOL82SkTcjqLkB+FTPueLRpgWHpz5rHo=)
3: X8qnUQA1qg1cnkzl8QaDSyMhQm4.roa (hash: 0vr+LOr1h8ehAYfiW23NLACGpkor4jsJll80Z2l7cCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:f1:78:18:3e:3e:a3:67:84:c4:a5:6a:6b:f2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Validity
Not Before: May 12 15:01:20 2026 GMT
Not After : May 13 15:01:20 2026 GMT
Subject: CN=4c3ce7760c48ef4cb7d757150d3421335ea01233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:39:73:46:51:7b:c0:f8:b3:a7:0e:df:34:31:
aa:86:2f:f0:13:79:3e:f9:de:59:4b:8c:57:0f:00:
d9:82:49:41:e9:10:1b:f4:24:de:9e:44:c8:34:4a:
d9:55:ec:ca:8d:b5:65:ca:fd:9a:2d:bb:8c:1c:7e:
62:77:89:22:5b:49:4d:1e:87:58:2a:fd:5f:0e:4f:
fd:66:9d:c1:e2:d3:73:ce:50:b0:65:b1:6a:03:2f:
b7:36:82:f5:d2:09:92:31:ee:16:01:bd:bd:44:da:
32:c2:c2:38:43:73:80:97:96:52:ee:04:93:68:95:
5f:82:ba:86:01:07:d6:15:9b:bd:fd:98:26:a9:3b:
12:9c:35:fd:4d:be:eb:9e:d0:29:b3:69:d7:21:fc:
6e:bc:40:5f:bf:31:10:68:b1:f0:d8:d2:36:1f:9c:
db:df:d0:17:76:88:c0:e1:cc:0e:c3:da:b3:e0:70:
15:d2:d0:44:f6:24:93:b6:09:d9:58:c1:3d:a0:b8:
c2:40:00:95:9d:12:31:6e:77:50:9a:92:f3:5c:10:
9a:55:38:2b:57:cd:42:67:02:8c:68:26:55:2f:99:
7c:2a:89:d7:15:8b:dc:7e:de:6c:49:fb:04:79:8e:
cb:1f:e5:65:9e:df:34:8a:a6:ac:7b:05:24:db:f9:
55:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3C:E7:76:0C:48:EF:4C:B7:D7:57:15:0D:34:21:33:5E:A0:12:33
X509v3 Authority Key Identifier:
keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e1:fb:4d:7d:20:2d:7d:06:95:a1:5f:94:3e:28:31:fc:4a:
58:4a:48:57:2a:81:6a:42:bc:9d:1a:f0:41:21:23:e3:b0:e6:
55:fc:1d:d1:50:a8:4b:68:9c:4f:25:b5:ca:1c:15:d6:2e:0c:
7e:a1:de:c5:65:5f:9a:c5:72:20:30:d8:d8:3a:23:8f:c7:91:
90:84:a6:a5:bb:86:e4:b6:f6:bd:87:1a:1b:b1:ca:af:3e:fb:
47:ff:4a:0a:7b:68:27:ed:71:e6:be:53:8d:c8:2a:1e:b1:2b:
2a:87:36:60:de:c4:a4:dd:b3:07:01:af:20:6f:2a:a1:7a:07:
69:b8:2b:8d:6b:5b:38:02:6e:f8:80:12:06:21:e3:1e:dc:15:
1e:9b:ca:f8:92:1b:85:22:89:a1:22:63:d6:03:65:90:c0:ba:
ba:51:13:4f:e4:94:b1:9f:b2:41:60:76:6a:45:ad:42:b0:0a:
a8:a1:0f:47:00:a5:22:1f:32:eb:5b:c4:56:2e:a9:b9:08:96:
ab:8c:64:30:57:e5:35:43:af:d8:6e:9c:80:da:92:35:c2:e2:
32:25:2f:b2:a3:e3:29:9e:64:02:01:a9:23:63:5e:18:2a:d5:
52:8c:aa:51:00:5a:e1:3a:59:e1:59:40:5a:7f:2c:7e:12:42:
aa:24:9a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:02 2026 by rpki-client