Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
File: 0_-XSe4i8Akle4nYNAzGT7QL_JE.mft (raw, json)
Hash identifier: +GGijJjYH89AK+VRKHNRdrNxt4/mmh9CLOvsjl1O08E=
Subject key identifier: C1:88:D1:73:A4:47:D7:CC:4F:CA:BB:B7:EB:08:10:23:C3:E4:9A:9D
Authority key identifier: D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
Certificate issuer: /CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Certificate serial: 019D265EF4C74BE37B7DC248D0CD895C86BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
Manifest number: 045E
Signing time: Wed 25 Mar 2026 19:00:50 +0000
Manifest this update: Wed 25 Mar 2026 19:00:50 +0000
Manifest next update: Thu 26 Mar 2026 19:00:50 +0000
Files and hashes: 1: 0_-XSe4i8Akle4nYNAzGT7QL_JE.crl (hash: EjhzAJ6YWL+dKKZwSoXcoSCO2ok9e49EHy8G4u4DchY=)
2: DJdhUMC3KGFFZZ5lCKkYIdqzjBM.roa (hash: X7w8hr+E7n1YVto9nQ09eEPyzlLrAcr5q43Gop780I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:f4:c7:4b:e3:7b:7d:c2:48:d0:cd:89:5c:86:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Validity
Not Before: Mar 25 19:00:50 2026 GMT
Not After : Mar 26 19:00:50 2026 GMT
Subject: CN=c188d173a447d7cc4fcabbb7eb081023c3e49a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1d:ea:0b:9b:42:95:86:44:7e:65:da:95:da:
9f:78:5f:4e:30:9f:9e:b5:13:1e:ec:d3:cd:28:e8:
98:46:39:0f:30:09:cd:a7:8b:dc:9e:4e:c7:d6:c3:
fa:36:aa:6b:ba:17:4b:be:1d:1d:56:83:e9:2a:cc:
b4:2f:56:e6:a6:2f:7b:a3:38:47:3b:b6:15:c5:e8:
cf:a2:de:3a:6e:49:ce:4c:24:0a:72:c9:d0:7b:33:
1c:19:84:6a:bc:50:a6:e9:24:7c:50:91:c6:38:c1:
a0:73:54:95:d5:57:e8:2b:cb:48:ca:7e:63:45:da:
2c:00:72:b5:b5:45:4e:ce:f5:6d:e7:d5:db:eb:19:
b0:41:79:64:29:4f:9e:2d:ba:d6:74:74:0a:f1:e4:
35:78:54:87:ed:49:85:5e:3c:11:7f:58:b4:4d:db:
27:f3:ae:d3:8b:69:cf:60:5f:95:06:92:a7:7f:72:
e9:5f:af:a0:11:c5:b7:7b:68:30:3c:83:e6:75:d3:
06:37:f3:27:2d:48:fd:91:0b:f4:db:15:09:9a:c8:
cd:b0:a2:84:74:f0:fa:ca:f4:32:80:82:32:e4:5a:
34:ae:34:a3:42:fd:84:3e:db:93:ca:49:ef:97:72:
2f:45:c0:2e:07:71:71:70:0a:c7:a4:aa:a1:fa:58:
3a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:88:D1:73:A4:47:D7:CC:4F:CA:BB:B7:EB:08:10:23:C3:E4:9A:9D
X509v3 Authority Key Identifier:
keyid:D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a0:63:a5:0a:65:5b:a6:97:b3:38:61:22:70:66:2d:dc:fe:
5a:03:14:d0:60:b7:b9:f5:2c:a2:72:40:0f:6d:6b:03:b7:b0:
44:46:dd:f1:7e:2d:4a:90:7a:14:37:e2:0d:c8:04:74:88:7d:
3b:76:af:0b:fe:31:7f:55:0f:30:5a:72:af:2f:5a:18:e7:a2:
1b:17:e8:09:44:c2:95:30:23:de:76:52:1b:fe:09:62:91:7d:
dc:0c:d0:43:e8:bc:e5:f3:26:65:70:0b:78:bd:28:18:99:ab:
e2:a3:09:16:99:43:2d:7e:59:45:f1:6e:db:f1:81:a2:f2:17:
91:f5:29:b5:35:31:61:23:75:7e:ad:96:35:64:f5:bb:13:83:
0c:44:0c:d7:70:f4:b6:d9:e4:f6:be:88:00:0b:8f:8c:e2:e0:
34:46:ea:e9:10:3b:46:5a:e1:08:5e:95:92:45:f0:5e:32:cc:
ef:6c:9b:2c:79:d8:c7:8a:9e:18:63:90:0b:fe:01:a2:cc:c4:
cd:6a:dd:12:7b:40:7a:de:b7:bc:85:a0:c5:bf:22:df:a2:95:
65:94:9c:69:de:b4:79:2a:c5:37:0f:4f:0e:6b:de:33:6c:a0:
c3:17:ac:37:22:99:72:f4:ac:04:67:7f:32:a0:73:61:1a:cc:
7e:0f:04:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:17 2026 by rpki-client