Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
File: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft (raw, json)
Hash identifier: 5tRyoBs1++U4bezY4eXGn2i4zfVMkEGRMBFnFmvp7gs=
Subject key identifier: 81:87:0B:AB:08:92:8C:A9:97:F9:CB:30:D2:E7:FB:BA:3B:2C:EC:DA
Authority key identifier: D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
Certificate issuer: /CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Certificate serial: 019EBF2366D5C944EBA6F48A4130665A1016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
Manifest number: 0614
Signing time: Sat 13 Jun 2026 04:00:28 +0000
Manifest this update: Sat 13 Jun 2026 04:00:28 +0000
Manifest next update: Sun 14 Jun 2026 04:00:28 +0000
Files and hashes: 1: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl (hash: dA0tc4ErmpKIC/iMbxddm3FjfhUeE9fysK1jM+ncNEE=)
2: he8kJ9DCXibthyRw5bWWfdO-zeI.roa (hash: CB90W0F1vwsIT9jZbtFWr7qRy3OvwRqYaZVqidxtkOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:66:d5:c9:44:eb:a6:f4:8a:41:30:66:5a:10:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Validity
Not Before: Jun 13 04:00:28 2026 GMT
Not After : Jun 14 04:00:28 2026 GMT
Subject: CN=81870bab08928ca997f9cb30d2e7fbba3b2cecda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:13:ba:3c:52:bf:a6:87:7f:2c:e3:9b:a1:
0b:ad:09:78:bc:6f:9d:5a:08:0f:b6:17:03:b2:3a:
31:71:57:ad:f7:0a:dd:78:f3:56:8d:4c:de:3c:81:
77:76:f6:40:74:6d:68:bd:1b:27:a7:d9:72:f0:57:
d7:a4:b8:e7:b7:25:4a:bb:1e:b1:18:b5:a3:0f:e0:
6d:e2:32:d6:b1:4e:74:b2:d8:f7:5b:dc:85:44:6c:
2b:62:c1:57:bc:88:b3:31:7b:4a:0c:81:b5:a9:c3:
e8:ff:58:5d:3c:f9:de:4c:b7:89:d8:b3:cf:77:d7:
79:76:39:e8:fa:b5:4d:05:69:b4:32:e9:0f:6e:e6:
78:7e:d1:88:e3:fa:60:19:4a:80:8a:8d:22:bb:2b:
e9:44:43:4d:82:0a:55:c6:51:89:04:6d:0a:fd:f3:
e1:85:56:0c:0c:f9:16:cf:9b:50:d5:30:2d:d3:d8:
17:55:ac:ce:f1:9c:55:e7:88:67:67:7f:42:f1:8c:
82:ff:af:91:02:d1:bb:4a:a7:11:81:d5:7a:ab:29:
cf:2a:d3:43:50:88:b9:13:d1:d3:19:76:5d:e9:6b:
1b:e9:7e:be:48:6f:25:05:34:2b:6b:ad:a2:15:bd:
b3:ae:89:c3:c9:3b:f6:6f:39:8f:bb:31:22:ae:b5:
51:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:87:0B:AB:08:92:8C:A9:97:F9:CB:30:D2:E7:FB:BA:3B:2C:EC:DA
X509v3 Authority Key Identifier:
keyid:D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:33:83:5d:24:45:50:4e:ba:3f:7d:ed:09:44:32:04:ea:1f:
0c:85:82:62:56:5e:d1:8d:5e:e9:0b:da:8b:4b:a7:99:e2:94:
3c:0c:6e:a2:e7:f7:e6:5c:1d:76:8d:6c:90:ed:44:09:7c:8a:
1e:0a:78:d8:ab:6b:4f:cd:a2:14:99:67:48:17:65:d0:44:f4:
e8:88:d1:35:dd:b0:96:5c:3f:30:f9:50:14:1a:2b:c4:02:ad:
f2:1c:da:64:f3:55:d7:b1:ab:5a:e2:b2:a0:0c:f0:29:6e:4d:
d1:cb:21:8b:6e:4f:49:f1:d4:9e:83:42:1e:5b:5c:f6:a5:f2:
b7:95:ee:af:e3:39:b8:05:4d:5f:18:a5:f2:09:37:71:ac:b5:
2b:bf:ed:74:35:b9:71:71:f3:be:fc:00:6b:94:bd:56:a7:c7:
65:da:80:7c:1a:88:b2:0b:fb:e5:3f:2a:24:cb:65:24:77:36:
cc:7a:e8:94:b2:11:c5:e1:55:d9:cf:4c:3e:e1:88:4b:39:f1:
00:e3:9f:68:0c:c4:a0:64:f2:47:5b:4c:6b:4b:23:be:60:3a:
0e:6a:f0:ff:b7:20:77:0a:43:78:37:3f:c0:d6:98:a2:d3:d4:
a5:ef:5b:dc:25:4b:9f:7f:7e:f5:e3:37:49:ae:7d:6d:fc:1f:
20:1e:1d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:29:55 2026 by rpki-client