Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
File: 0eAT7IpcVt8kGpslY9ER-OVDv5E.mft (raw, json)
Hash identifier: FF14L9ez53I08nmkwtR1QqS6UVXzdwuLEWl7AAOmoU0=
Subject key identifier: 7A:5C:39:48:3E:0D:52:3C:25:1D:C3:0F:6F:7B:32:F4:1E:DB:13:59
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial: 019D27724388F2334C02235F1B0B3AB26D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
Manifest number: 18A1
Signing time: Thu 26 Mar 2026 00:01:32 +0000
Manifest this update: Thu 26 Mar 2026 00:01:32 +0000
Manifest next update: Fri 27 Mar 2026 00:01:32 +0000
Files and hashes: 1: 0eAT7IpcVt8kGpslY9ER-OVDv5E.crl (hash: IR73z6qErnV2BGI3TyDGRU1Tj/4vFz/ENgcX5AXirBA=)
2: HJaqxqktn6jSURWfLmaFrTGw4k0.roa (hash: nCPkWfg8fjBLOL82SkTcjqLkB+FTPueLRpgWHpz5rHo=)
3: X8qnUQA1qg1cnkzl8QaDSyMhQm4.roa (hash: 0vr+LOr1h8ehAYfiW23NLACGpkor4jsJll80Z2l7cCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:43:88:f2:33:4c:02:23:5f:1b:0b:3a:b2:6d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Validity
Not Before: Mar 26 00:01:32 2026 GMT
Not After : Mar 27 00:01:32 2026 GMT
Subject: CN=7a5c39483e0d523c251dc30f6f7b32f41edb1359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ca:70:19:e7:a0:88:c6:31:07:71:cf:10:a2:
cd:00:49:f1:c0:84:00:8c:cb:7c:76:a6:e1:ba:83:
61:b0:4d:a6:be:ba:a5:c0:8f:5f:a3:ca:66:3d:31:
fb:e7:ec:51:3a:72:90:f7:9f:87:36:ac:0b:fb:77:
ef:3b:b7:6d:16:23:e9:ba:85:ff:2a:08:4d:79:4c:
9a:b9:cb:f2:c4:8f:3f:3b:97:08:b7:c4:8e:51:74:
0b:62:0b:b2:36:47:be:fe:63:a0:12:ac:a6:12:1d:
71:8d:f8:94:78:41:8d:9b:40:36:d2:fe:bd:a8:a9:
42:44:09:0b:dd:a0:23:20:f9:10:2f:a6:af:b4:fe:
35:86:84:6a:24:1e:c4:1f:76:1b:08:aa:3b:ef:bc:
ce:fc:d4:4a:cd:a7:63:a6:3d:c6:9a:2d:2d:4b:b2:
6a:2e:50:7e:33:e8:82:6c:c4:65:89:1a:27:b2:99:
e9:93:36:8a:c9:bc:b9:98:fe:74:11:f9:5c:09:f1:
fc:b5:bf:69:62:ce:68:33:08:98:2f:90:08:96:6a:
c6:ce:ee:b5:7f:0a:04:aa:2e:67:36:3a:a5:3b:e8:
e3:b9:6a:d4:17:14:3b:6c:42:30:a2:7a:21:5f:31:
1f:70:cc:1a:6e:c4:89:ba:d3:32:21:92:61:c6:95:
2f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5C:39:48:3E:0D:52:3C:25:1D:C3:0F:6F:7B:32:F4:1E:DB:13:59
X509v3 Authority Key Identifier:
keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9e:73:40:3d:ec:f3:a2:36:5a:13:92:d0:fe:9e:01:4c:83:
4d:cd:e0:20:e0:32:dd:ef:6e:c2:2f:7e:78:26:66:ac:9f:bb:
6d:83:de:8a:56:69:86:e6:70:68:1e:e6:47:d0:de:68:b9:8a:
10:64:59:4d:4c:ff:75:3a:38:fb:3d:ad:2c:88:a5:88:a7:27:
83:79:83:1f:5e:a8:37:69:10:df:73:45:6a:85:70:70:90:b6:
53:fb:90:e2:4a:72:4f:5e:f0:58:7c:4c:2c:e8:59:36:93:1a:
b5:53:82:8e:ae:7e:e4:b6:35:c8:e9:ff:b5:97:c7:71:84:bd:
ff:5c:63:1e:c1:12:34:46:f8:5c:c9:5f:11:e7:63:43:c8:91:
8f:ee:d7:bd:0f:0a:84:73:13:52:a5:ad:fa:0f:52:77:67:b9:
94:ae:3f:8e:7a:95:d9:74:9b:db:37:9e:40:eb:02:1a:74:18:
ae:c9:3a:4c:25:a9:e2:86:15:53:09:a5:1d:9e:40:dd:c1:c9:
b4:34:5c:cc:a4:45:48:cc:7e:10:84:fc:c9:57:0e:12:2b:86:
0f:be:7e:e4:5b:99:1a:e5:25:e2:c3:81:f9:9b:9e:4f:2f:ec:
e3:57:1d:b0:5b:84:fc:72:63:5a:88:69:37:3f:e8:cc:41:b4:
6d:88:8e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:13 2026 by rpki-client