Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
File: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft (raw, json)
Hash identifier: 0BfEJbHnCfVHeFBwgE83s/Gr18uBLSkJoMpZEyl3QOg=
Subject key identifier: DF:E6:E6:5B:F1:B3:2C:22:CE:2C:12:CE:BA:A9:A0:79:A5:8C:B6:B3
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Certificate issuer: /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial: 01A0C1E8BD19C073BE481F54C1C9F65C64D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
Manifest number: 1317
Signing time: Mon 21 Sep 2026 03:00:50 +0000
Manifest this update: Mon 21 Sep 2026 03:00:50 +0000
Manifest next update: Tue 22 Sep 2026 03:00:50 +0000
Files and hashes: 1: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl (hash: dvxgQWNLYEenlqgRrQcVwWY9+MgvABlJ76askAESPHU=)
2: 9gVKfPDu8oaxgCYhsIHGv4QIfWU.roa (hash: fllRN8SucuRDRWnVjdcisQzmvofCxZ5K6VMo5ZRY8Z0=)
3: YOp__Ry-NGpngn9AjDGoHEbjeCg.roa (hash: ON5r8fZJQGVj6wPi39Ya/7ATYu3d/0MWZ+FMIC4DzPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:bd:19:c0:73:be:48:1f:54:c1:c9:f6:5c:64:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Validity
Not Before: Sep 21 03:00:50 2026 GMT
Not After : Sep 22 03:00:50 2026 GMT
Subject: CN=dfe6e65bf1b32c22ce2c12cebaa9a079a58cb6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f2:99:95:00:3a:2f:b3:2f:eb:57:d7:26:0d:
b8:b5:3d:0a:bd:6e:60:51:44:e0:3a:0b:98:6d:ed:
9e:42:2a:02:c8:21:9c:a7:f7:d7:d5:d8:e5:74:94:
80:5f:32:f8:f7:86:5b:e4:0a:20:37:32:f8:ac:98:
6f:89:51:00:70:b2:30:06:88:8d:5b:5a:71:4a:7c:
f3:66:6c:1d:22:41:d4:ca:4b:0a:bb:02:d5:f4:6b:
66:89:28:6b:ec:e2:e6:fd:7b:63:bb:27:0a:18:bb:
39:36:de:c6:d8:5a:67:99:ba:46:8a:1d:21:54:9b:
4e:e9:0d:b3:92:2f:e3:fe:78:5b:ac:dd:d4:38:cb:
3d:e9:70:2f:c9:30:aa:21:54:52:cf:db:eb:b9:c3:
6f:d1:64:57:9d:1e:cc:62:6c:23:1a:e0:5e:eb:ba:
e7:d7:81:7f:71:4a:e7:d5:ff:f1:e5:50:27:99:47:
9d:3b:d9:70:57:37:d3:3c:80:81:fe:7b:bb:04:7b:
5b:ad:5f:eb:fd:3c:68:91:03:8e:d0:6a:35:d2:bc:
1a:c6:a0:eb:01:16:eb:72:3e:68:62:12:9c:0e:94:
25:b8:79:81:98:c0:43:9f:3e:f2:37:d2:67:d6:13:
fe:ad:80:da:35:b4:b0:fd:5d:ee:df:b8:22:30:16:
ca:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E6:E6:5B:F1:B3:2C:22:CE:2C:12:CE:BA:A9:A0:79:A5:8C:B6:B3
X509v3 Authority Key Identifier:
keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f6:8d:ea:e4:d8:05:ac:c0:f1:2e:88:73:e3:eb:8c:a2:7a:
ed:b3:d3:45:43:d7:d0:13:5c:46:fc:fd:a6:45:36:5d:fb:db:
61:2c:f4:7f:aa:3c:55:c5:e2:e6:ec:4c:d4:c0:07:32:ad:05:
77:8c:0d:eb:58:ea:c0:d7:b6:de:e0:f8:f8:0c:a7:26:d8:df:
55:cb:e5:4f:c9:57:a5:a8:d8:9f:56:c5:db:e4:a1:82:9f:34:
7b:d8:06:7d:91:7b:de:4e:0a:75:22:13:9c:f7:4b:16:4b:49:
3a:75:9c:64:db:e9:7e:7a:71:d4:a1:40:62:d1:93:54:a7:81:
b3:1b:50:d7:a8:86:f8:a4:10:99:72:be:65:1e:ad:cf:af:54:
12:b4:0f:25:d6:15:68:92:f2:b4:97:3e:d4:43:01:8e:89:2a:
9d:91:f8:14:75:91:2b:23:5d:d3:59:64:94:0c:87:b4:6b:73:
80:35:ac:70:c5:9c:3c:7c:ea:10:cc:7a:3e:e4:6d:71:50:f7:
1c:72:15:00:b4:47:3b:e6:1d:d9:7d:1b:f5:d5:c9:93:8e:bb:
ab:8f:37:20:d1:78:34:2f:09:80:ca:44:95:08:03:d1:91:af:
8e:c5:30:11:93:84:67:87:f8:e0:d2:ae:5e:78:03:01:0e:c4:
59:d6:6c:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDB6L0ZwHO+SB9Uwcn2XGTWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNDY4N2EzZWU2MzIyYjc1N2RlODFlN2Y1M2M1ZDMyZWVi
ZTMzYTYwHhcNMjYwOTIxMDMwMDUwWhcNMjYwOTIyMDMwMDUwWjAzMTEwLwYDVQQD
EyhkZmU2ZTY1YmYxYjMyYzIyY2UyYzEyY2ViYWE5YTA3OWE1OGNiNmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/KZlQA6L7Mv61fXJg24tT0KvW5g
UUTgOguYbe2eQioCyCGcp/fX1djldJSAXzL494Zb5AogNzL4rJhviVEAcLIwBoiN
W1pxSnzzZmwdIkHUyksKuwLV9GtmiShr7OLm/XtjuycKGLs5Nt7G2FpnmbpGih0h
VJtO6Q2zki/j/nhbrN3UOMs96XAvyTCqIVRSz9vrucNv0WRXnR7MYmwjGuBe67rn
14F/cUrn1f/x5VAnmUedO9lwVzfTPICB/nu7BHtbrV/r/TxokQOO0Go10rwaxqDr
ARbrcj5oYhKcDpQluHmBmMBDnz7yN9Jn1hP+rYDaNbSw/V3u37giMBbKwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/m5lvxsywiziwSzrqpoHmljLazMB8GA1UdIwQY
MBaAFNBGh6PuYyK3V96B5/U8XTLuvjOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEVhSG8tNWpJcmRYM29IbjlUeGRNdTYtTTZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iZmRkMTktNmJiYS00ZGM5LWFmYzYt
OTdiZTQyNmEyMzM0LzEvMEVhSG8tNWpJcmRYM29IbjlUeGRNdTYtTTZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9iZmRkMTktNmJiYS00ZGM5LWFmYzYtOTdiZTQyNmEyMzM0
LzEvMEVhSG8tNWpJcmRYM29IbjlUeGRNdTYtTTZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvaN6uTY
BazA8S6Ic+PrjKJ67bPTRUPX0BNcRvz9pkU2XfvbYSz0f6o8VcXi5uxM1MAHMq0F
d4wN61jqwNe23uD4+AynJtjfVcvlT8lXpajYn1bF2+Shgp80e9gGfZF73k4KdSIT
nPdLFktJOnWcZNvpfnpx1KFAYtGTVKeBsxtQ16iG+KQQmXK+ZR6tz69UErQPJdYV
aJLytJc+1EMBjokqnZH4FHWRKyNd01lklAyHtGtzgDWscMWcPHzqEMx6PuRtcVD3
HHIVALRHO+Yd2X0b9dXJk467q483INF4NC8JgMpElQgD0ZGvjsUwEZOEZ4f44NKu
XngDAQ7EWdZssg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:36:38 2026 by rpki-client