Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
File: e00xqxjkH42VmgnVVmDdMqqcRfc.mft (raw, json)
Hash identifier: MjvfUhSMpXHa0ASDE5/ZepQlAV0esQyiIaYIJS3sLrI=
Subject key identifier: 58:B6:54:65:18:05:A7:E6:E0:90:FB:DE:9C:C5:2F:18:00:A3:B0:28
Authority key identifier: 7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
Certificate issuer: /CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Certificate serial: 019D2703EA37D3BD6CB23D7A7EA2067335AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
Manifest number: 05E0
Signing time: Wed 25 Mar 2026 22:01:01 +0000
Manifest this update: Wed 25 Mar 2026 22:01:01 +0000
Manifest next update: Thu 26 Mar 2026 22:01:01 +0000
Files and hashes: 1: 9eLIJ6RTK5BSD3tLbgAyaNclDYI.roa (hash: XSIKM2J7ehZpb0tQX1yj15wm/mofvKw8ffgNRz1IrEo=)
2: bMw_tMgEF3JjkWdlI_kbyhmiZB8.roa (hash: 9tpXPxjrcGnuiYj+mPBltbwiQGnnVBk/rVL0p+GtkMk=)
3: e00xqxjkH42VmgnVVmDdMqqcRfc.crl (hash: kBF2HbueOKTS9GuiV9t/WhmEwMp62dWFA6EOi/gwS1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ea:37:d3:bd:6c:b2:3d:7a:7e:a2:06:73:35:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Validity
Not Before: Mar 25 22:01:01 2026 GMT
Not After : Mar 26 22:01:01 2026 GMT
Subject: CN=58b654651805a7e6e090fbde9cc52f1800a3b028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:57:6e:31:15:3c:43:06:37:6b:34:65:12:c7:
7f:fa:82:a5:e8:83:6a:9a:5c:5c:21:c4:87:43:75:
3b:25:f4:b5:99:e6:6f:fe:20:18:1d:ac:cf:85:1b:
e8:7d:70:77:1a:4c:bc:e8:26:4a:9c:18:0a:0b:13:
c1:58:9f:9f:6b:ff:fc:1a:7a:8f:c6:b2:e3:86:1a:
86:ae:15:2f:de:3c:f7:08:15:04:0c:31:53:7c:80:
00:60:2c:cc:24:4a:90:de:93:6a:bc:36:95:71:60:
a9:75:f7:91:68:c4:d4:5b:bd:51:e7:0f:32:5d:4a:
1f:23:a7:46:c7:39:f3:00:19:42:0c:b9:7c:4f:89:
98:45:d9:49:fc:ae:2f:90:db:9d:da:be:60:fa:f9:
75:38:b5:3d:8d:b9:03:91:b9:22:f8:48:72:1a:63:
38:50:8e:01:8a:f6:95:e0:ba:25:73:3f:87:23:ac:
69:79:c8:93:7c:8f:31:05:a1:0e:bd:c2:cc:8f:78:
03:e5:7b:6b:98:61:10:8c:0a:b7:b6:c8:8c:9b:5b:
b6:a2:0a:56:30:00:38:ff:a4:63:b1:c6:14:aa:a0:
62:55:67:be:2b:77:85:90:91:ae:80:2b:15:15:1a:
8e:b7:bd:ff:62:67:d6:05:12:79:6f:1b:3e:2a:52:
06:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B6:54:65:18:05:A7:E6:E0:90:FB:DE:9C:C5:2F:18:00:A3:B0:28
X509v3 Authority Key Identifier:
keyid:7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:31:a0:9a:51:27:1f:1d:d0:ce:f8:bc:e2:05:c0:28:18:1c:
4b:fd:81:09:15:20:dd:97:d0:5b:2c:b5:28:e9:ec:fb:f9:6d:
25:a3:aa:7e:ea:db:c3:cd:c9:e2:71:a4:36:c8:07:85:41:40:
75:2c:fd:a3:68:92:81:43:7c:52:c3:bc:a9:93:6e:c4:c5:32:
6b:33:55:90:e4:69:29:b2:5b:6e:e7:f2:23:f4:33:ef:64:25:
ff:f8:24:4b:a9:79:01:6f:39:91:e0:0f:cc:b6:a6:0a:79:9b:
06:e2:87:1f:67:36:31:73:8a:b4:07:99:c9:d7:73:a8:56:b6:
f6:6a:80:9a:97:dc:c5:e4:ed:f0:14:e2:cb:a3:03:57:33:f0:
80:58:31:24:4e:64:ec:fd:6f:72:0a:c0:3e:b1:35:4c:85:9e:
0f:a3:32:7f:5c:9e:e8:ad:97:69:f6:18:02:07:a0:e4:cb:37:
0c:4e:e4:d7:9b:02:11:7b:89:34:a5:e3:05:78:5c:28:82:fc:
4f:b5:e9:47:b3:f7:d8:df:5c:f3:b6:ad:14:f4:4d:ee:87:2f:
9a:49:6a:b0:d1:4f:e4:0b:33:e6:87:3b:78:36:c5:e1:79:fe:
8e:9f:a9:4e:8d:28:4a:89:30:d0:e9:d1:e0:29:87:bd:48:f9:
d9:a0:44:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:08:20 2026 by rpki-client