
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
File: 0e1mT0ry-OEZuHomjF1DA_uzYRY.mft (raw, json)
Hash identifier: Vg0pnlwxnzNeJZnPnGH9g5rLy4GKyFlmX1l0C0lUD08=
Subject key identifier: B6:C8:69:8D:2D:99:F4:A4:25:97:84:86:B9:D7:1F:6D:CC:0F:B0:94
Authority key identifier: D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16
Certificate issuer: /CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116
Certificate serial: 019CAD226484E500A1FE7C4ACE677A18A39F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
Manifest number: 0174
Signing time: Mon 02 Mar 2026 06:00:38 +0000
Manifest this update: Mon 02 Mar 2026 06:00:38 +0000
Manifest next update: Tue 03 Mar 2026 06:00:38 +0000
Files and hashes: 1: 0e1mT0ry-OEZuHomjF1DA_uzYRY.crl (hash: LiKpKV+ErDdS+zeczqOqE3e1jOofblXFZDWypMAfuk8=)
2: BMvBIwftHVjOq-ECziUj7FT9eNs.roa (hash: VyJ9dmhC8T/OTxMz+hnV4q4zH9/xxLGMFMd7o25VL7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:64:84:e5:00:a1:fe:7c:4a:ce:67:7a:18:a3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116
Validity
Not Before: Mar 2 06:00:38 2026 GMT
Not After : Mar 3 06:00:38 2026 GMT
Subject: CN=b6c8698d2d99f4a425978486b9d71f6dcc0fb094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:00:02:bd:aa:95:c8:cf:c7:19:56:e5:0d:78:
d5:bd:d5:72:ab:a7:f6:37:50:ac:e0:70:c3:3e:aa:
77:bc:ad:ee:87:ea:b7:2a:9c:c9:55:d9:ec:68:85:
2b:cb:fa:21:9b:cc:e0:37:05:18:90:6f:df:f7:ef:
ec:28:2c:06:01:eb:99:89:fb:4f:c5:28:ff:41:7b:
84:51:a6:9e:4b:dc:dd:1a:f3:de:3d:dd:2d:3b:c3:
e9:3b:3f:96:46:df:7f:48:ea:31:5d:71:0d:1e:db:
8c:6c:63:d3:04:3b:0a:68:a8:d2:20:05:70:d2:f1:
f5:57:9f:c3:58:95:3a:28:06:9e:23:3b:f6:c4:e2:
2a:a1:33:14:10:87:7c:75:0a:67:cb:86:71:3d:a7:
9a:1f:91:ec:ec:b0:27:04:72:ac:84:f6:c2:ad:da:
fb:b3:e5:a1:c6:4e:23:f1:c1:89:e0:b2:be:18:7c:
bd:7e:fe:19:01:fd:b7:66:eb:ff:4a:e8:bd:16:9f:
a2:dd:96:3a:02:0b:e2:61:75:2d:da:95:54:13:6c:
70:7a:01:fc:67:84:be:85:20:eb:90:75:0f:ea:2e:
18:15:27:83:84:65:68:91:e1:0d:1c:66:d3:ca:77:
6e:50:df:63:68:d1:5a:d2:b7:8b:1d:b2:76:9d:f1:
43:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C8:69:8D:2D:99:F4:A4:25:97:84:86:B9:D7:1F:6D:CC:0F:B0:94
X509v3 Authority Key Identifier:
keyid:D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:46:ff:66:36:d6:f7:37:24:fa:2c:fb:d3:86:c3:62:92:c2:
a1:3d:c1:ea:1d:23:82:70:2c:3f:9d:6d:91:51:27:c5:40:e8:
b0:2f:6c:41:be:62:80:91:ca:c3:ad:33:f1:ae:8a:f4:2e:f2:
d4:19:12:18:04:25:0c:17:20:6f:4d:71:2a:a2:fd:a4:91:f8:
86:b8:7f:25:c6:41:ec:e0:c6:8b:94:2e:a8:09:6c:13:9b:cc:
e6:94:ef:e8:e2:b4:2e:91:34:89:c3:06:3d:65:59:5b:65:56:
a2:f0:d2:ed:82:07:27:88:67:57:2a:35:b7:8a:f0:50:9c:5e:
76:a2:e1:7d:86:4c:de:3c:b3:ce:8e:d9:a1:52:6f:c7:83:de:
4d:d3:ff:53:04:aa:5a:58:5f:36:d7:16:7d:45:1c:5a:0d:f9:
f0:b7:6d:6a:8c:ab:ac:1b:be:97:11:67:eb:99:ef:8f:88:c2:
72:1a:6b:32:8e:17:6b:07:fd:92:69:d8:2e:ad:07:80:86:a2:
68:03:21:2f:44:62:c4:45:75:57:84:55:da:71:2b:16:82:01:
e1:e0:db:da:0c:4b:20:17:7e:11:79:58:cd:df:92:02:59:8b:
a9:cf:06:8f:e6:2e:7c:d1:af:fa:fb:e8:c1:07:8b:4d:09:b1:
03:c2:46:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:07:46 2026 by rpki-client