Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
File: 0mepGaXTLOov1ByKnhhRC__86NY.mft (raw, json)
Hash identifier: 7dz72oa/elS5obWyUQiKKDZGByQHjr4+4HyZAs4oAW0=
Subject key identifier: B6:5E:E5:9C:F0:B2:D9:B9:25:D9:88:93:83:81:8C:9C:24:19:23:CC
Authority key identifier: D2:67:A9:19:A5:D3:2C:EA:2F:D4:1C:8A:9E:18:51:0B:FF:FC:E8:D6
Certificate issuer: /CN=d267a919a5d32cea2fd41c8a9e18510bfffce8d6
Certificate serial: 019D2AE03FE9AEF769C04F3E9B4ADBDDB652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
Manifest number: 12F7
Signing time: Thu 26 Mar 2026 16:00:32 +0000
Manifest this update: Thu 26 Mar 2026 16:00:32 +0000
Manifest next update: Fri 27 Mar 2026 16:00:32 +0000
Files and hashes: 1: 0mepGaXTLOov1ByKnhhRC__86NY.crl (hash: c4LyiHRUXeObSL4GHFgwVkyLXnOfk69QXg6jeTGyFXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:3f:e9:ae:f7:69:c0:4f:3e:9b:4a:db:dd:b6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d267a919a5d32cea2fd41c8a9e18510bfffce8d6
Validity
Not Before: Mar 26 16:00:32 2026 GMT
Not After : Mar 27 16:00:32 2026 GMT
Subject: CN=b65ee59cf0b2d9b925d9889383818c9c241923cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:bb:23:39:18:3d:01:5e:e2:d7:07:bc:99:
21:fd:7c:c9:06:9a:d3:6a:6d:58:e6:82:58:7b:24:
6c:56:50:41:19:af:86:bb:6b:fb:26:08:b7:1c:b9:
f3:1d:53:f3:e4:5e:ff:d5:08:85:fb:c9:2a:c8:74:
a9:29:a9:ef:12:54:c5:b6:ec:f1:06:30:5b:bc:55:
3a:42:51:b3:95:0d:c9:f7:65:24:bc:d4:40:53:e8:
0d:05:06:9a:be:2c:2e:e9:a3:3f:9d:df:15:8f:b8:
72:24:f9:78:01:5c:b4:e5:1d:89:76:c8:c5:20:a3:
9f:a1:c7:49:72:9c:61:89:63:1e:16:7f:21:fb:66:
68:97:16:f1:80:db:98:f1:43:9c:37:4b:8d:89:5c:
be:e3:97:25:e8:b7:3e:3e:0a:3f:59:ac:e7:d5:bf:
21:2c:4b:55:35:55:e5:80:7b:1c:71:94:11:c2:1a:
6d:5e:af:cb:2b:99:0d:5b:e7:41:5b:ca:9d:f9:1b:
49:33:4e:51:06:d7:ca:42:71:da:37:ab:c6:09:96:
6f:33:02:be:ed:fa:c9:8e:14:8a:28:d2:d0:d3:e8:
41:6a:81:10:4b:59:3d:5f:e4:0b:1f:91:d0:20:1e:
2c:7e:d6:88:e5:88:e5:33:07:68:e3:9d:ed:60:72:
90:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5E:E5:9C:F0:B2:D9:B9:25:D9:88:93:83:81:8C:9C:24:19:23:CC
X509v3 Authority Key Identifier:
keyid:D2:67:A9:19:A5:D3:2C:EA:2F:D4:1C:8A:9E:18:51:0B:FF:FC:E8:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:3b:b9:5e:12:d1:e8:94:da:5e:d2:f0:00:f8:06:f8:99:d5:
4d:ba:77:65:30:9d:e3:5a:aa:d5:62:c2:bb:f2:58:0b:b0:21:
9c:65:86:f3:9e:eb:f1:50:3f:0c:32:37:9f:d0:df:18:cd:74:
7a:08:fb:bd:4d:18:0e:ab:85:58:79:1d:02:b2:ce:15:b5:35:
33:82:1e:24:04:4f:5a:9f:ac:41:02:0c:64:46:45:32:38:18:
45:98:17:0d:91:f9:a6:23:73:c4:ad:8d:37:9c:34:da:28:f6:
ad:d0:51:75:63:bd:c4:cf:22:83:8c:e8:e5:f1:a2:d5:c7:78:
dd:5a:06:0c:f1:2e:1c:ee:17:cd:09:17:75:91:80:f9:4c:30:
0d:c1:fd:a9:ed:f5:97:d3:bd:fe:20:4a:31:0c:97:9f:0a:8a:
50:bc:cd:13:0c:de:37:f6:f2:60:1b:31:60:5d:17:66:e6:cd:
8a:2d:4e:88:85:c4:b8:ae:99:3c:c8:9b:ad:a3:1a:5c:30:40:
30:5e:90:0f:58:95:75:03:b4:86:69:0e:80:ce:40:63:61:4c:
6b:aa:1c:67:93:34:ca:d8:84:a3:9b:85:d5:8d:b8:62:e4:b1:
6f:e2:f0:17:b6:8a:6b:70:42:69:8a:2b:54:ce:94:f9:98:6e:
76:a6:84:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:53 2026 by rpki-client