Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
File: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft (raw, json)
Hash identifier: u35+YBZXRe54/Js4GGMiOSYXqluTbnd3wC7yac3+aho=
Subject key identifier: A0:0D:FC:B4:B7:56:25:E1:78:65:61:94:72:85:0C:FE:FE:1F:8B:EA
Authority key identifier: D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
Certificate issuer: /CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Certificate serial: 019D265FD9BC9AAAB36AB33EAB069910B76C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
Manifest number: 050B
Signing time: Wed 25 Mar 2026 19:01:48 +0000
Manifest this update: Wed 25 Mar 2026 19:01:48 +0000
Manifest next update: Thu 26 Mar 2026 19:01:48 +0000
Files and hashes: 1: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl (hash: FbnqCHmySTC4C6gtPv86vS5JbRhD81JoAwmwxVEepHM=)
2: v795sY2U8jhvRzL8MVmYlvFz9_s.roa (hash: Hn47sYXDYoB/4A+t0th2lMVq06CbmCPSmHDsJlsUcW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:d9:bc:9a:aa:b3:6a:b3:3e:ab:06:99:10:b7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Validity
Not Before: Mar 25 19:01:48 2026 GMT
Not After : Mar 26 19:01:48 2026 GMT
Subject: CN=a00dfcb4b75625e17865619472850cfefe1f8bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:23:47:b6:8a:71:9a:a9:ad:fb:b0:9b:2b:dd:
d2:9e:53:8d:49:7a:cd:89:3f:62:57:b6:8d:f8:e7:
65:01:11:c5:35:95:5b:9b:29:1e:9d:54:7d:42:ad:
5d:0a:c6:e6:59:76:08:89:cc:45:f3:47:9d:50:28:
4b:5c:df:9e:2c:89:c6:47:28:17:b0:90:e9:42:eb:
66:ec:88:d7:5e:54:d9:0f:ab:e4:db:ae:9f:85:47:
92:5b:6c:f1:89:27:af:3a:57:ac:8a:fe:77:11:ec:
47:01:93:08:22:06:b6:91:96:b1:c8:86:cd:9a:c7:
53:ab:44:54:3b:70:6a:be:a0:d1:3f:7c:ab:9e:56:
dc:07:94:63:6d:dd:ad:ab:21:e9:02:6d:a8:ef:0e:
6c:8d:d8:d5:ea:d1:59:7e:4a:46:e5:11:48:29:c8:
4f:7d:8c:84:30:bd:20:02:b6:f0:5b:85:9d:cc:ef:
d2:fd:9d:34:61:74:49:4d:87:b1:2e:c0:15:c0:04:
32:fb:53:55:87:2a:b6:09:9c:46:ae:7f:af:f9:91:
c4:72:5f:a4:6d:92:f6:37:a5:2b:44:54:a6:22:04:
83:12:31:57:34:0d:0b:c8:6e:ec:53:5b:47:5c:fc:
f2:47:77:01:06:68:14:fe:77:fe:2c:db:d4:fd:7e:
76:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0D:FC:B4:B7:56:25:E1:78:65:61:94:72:85:0C:FE:FE:1F:8B:EA
X509v3 Authority Key Identifier:
keyid:D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:82:24:dc:8c:15:3a:b6:09:27:8f:65:65:3d:46:3b:77:35:
4e:50:75:16:40:64:f0:d4:c0:2c:92:81:bc:5a:55:09:b4:75:
fe:f4:c4:2d:ef:c4:8d:45:c5:86:88:6c:21:5c:fa:5a:22:38:
12:fb:c1:90:f8:16:c5:5a:65:23:46:be:4e:2f:dd:39:e1:98:
73:05:95:e8:2f:e7:0b:0e:c0:39:1a:42:46:8f:24:08:77:dd:
08:07:17:fe:6f:62:89:a3:a6:0b:f7:c4:06:a4:a4:5e:2b:fa:
a9:f6:a5:a2:90:9d:59:ff:89:04:8a:22:00:84:24:f5:0f:02:
43:a8:c7:ba:68:2a:0b:94:23:e1:4d:46:01:67:f1:4a:ce:cd:
fe:2b:a7:de:77:90:3e:e7:2c:ae:da:d6:e1:95:ba:45:ae:9c:
c1:6d:f4:23:6f:a8:1b:ca:4f:a8:2b:09:f6:8f:13:bd:7f:1c:
c8:8e:2a:3a:cd:46:91:12:6c:a8:c5:80:74:6e:8d:55:9e:8e:
5d:3c:04:d1:62:09:43:5c:18:7d:7e:5e:88:ea:ed:65:2c:d5:
40:c7:10:eb:8e:b0:cf:e0:f5:98:e3:8f:e5:f8:31:f7:2e:6d:
12:09:0b:ef:b0:01:8f:b0:11:75:5b:ac:bc:2b:27:cf:fd:3b:
7d:04:f9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:01:02 2026 by rpki-client