Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
File: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft (raw, json)
Hash identifier: YwmAHDKLqcAud19X07dZsFHAdZSzVshzy7gSX3Z248U=
Subject key identifier: D2:71:05:0E:57:31:69:B8:93:B2:21:EC:9B:9A:7C:B0:58:73:18:4E
Authority key identifier: D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
Certificate issuer: /CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Certificate serial: 019CAA2185A0909A5BEB9BF74FB2A176AE7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
Manifest number: 0500
Signing time: Sun 01 Mar 2026 16:00:49 +0000
Manifest this update: Sun 01 Mar 2026 16:00:49 +0000
Manifest next update: Mon 02 Mar 2026 16:00:49 +0000
Files and hashes: 1: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl (hash: xXGbM2CpcufwSo/SMgwTyyF4VJtULQuhblbZum0TGnQ=)
2: he8kJ9DCXibthyRw5bWWfdO-zeI.roa (hash: CB90W0F1vwsIT9jZbtFWr7qRy3OvwRqYaZVqidxtkOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:85:a0:90:9a:5b:eb:9b:f7:4f:b2:a1:76:ae:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Validity
Not Before: Mar 1 16:00:49 2026 GMT
Not After : Mar 2 16:00:49 2026 GMT
Subject: CN=d271050e573169b893b221ec9b9a7cb05873184e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2d:10:5c:57:5e:8f:ce:c8:75:18:15:fa:3d:
38:ac:b7:61:a2:fa:91:f0:5a:4f:c4:bc:ba:74:a0:
cd:b8:de:7c:97:1b:21:2b:9d:a3:fd:0f:bc:e3:63:
78:4e:7e:55:42:49:23:87:f1:93:00:44:24:04:3f:
29:6b:82:ee:13:3c:7c:43:f7:fa:7c:e6:21:2f:9c:
49:75:fa:e4:60:4c:25:0f:da:ac:a6:97:04:24:17:
1f:c3:7f:1a:7a:78:d0:b9:77:6f:aa:fc:be:32:ff:
6e:af:b0:f8:80:56:d2:2f:ee:97:2b:dd:02:b7:8e:
91:4d:e9:78:16:23:4b:b0:1b:f2:05:39:d5:c5:e6:
68:6c:ec:6c:b9:b5:0c:a3:9c:d9:57:21:2d:6e:7d:
1a:67:7e:23:9a:2c:89:72:0c:72:30:75:55:dd:e3:
ba:13:06:89:16:a8:c6:98:93:4a:10:14:3e:39:37:
41:61:0b:e7:b6:21:1a:82:84:5c:d0:fa:a8:6a:22:
c0:43:e1:90:fd:4d:5e:82:21:00:0d:c8:8f:27:8f:
0d:4d:49:99:d3:dc:af:9d:28:e8:bf:9e:9e:a6:63:
9b:11:a2:fc:0b:94:b5:fd:94:17:c1:37:a9:17:73:
54:8c:25:de:cc:4f:7f:48:a1:1e:44:b5:1b:88:96:
f0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:71:05:0E:57:31:69:B8:93:B2:21:EC:9B:9A:7C:B0:58:73:18:4E
X509v3 Authority Key Identifier:
keyid:D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:78:60:9a:7a:f8:69:ea:ff:ca:2f:cf:7b:e7:63:0f:17:02:
07:52:79:37:fe:c4:dd:53:d7:64:4b:f1:14:3a:1e:29:7f:57:
d9:2d:7d:67:66:be:ca:64:13:00:d3:17:ba:99:8c:c2:bd:4f:
f7:8d:b3:79:5a:4d:08:a2:bd:e9:8a:3a:0b:67:1f:30:45:31:
ea:28:dd:39:6d:21:ad:d9:ce:99:19:a7:ab:60:17:b6:e7:49:
bc:f5:38:8e:c2:34:e9:80:47:f8:27:4e:93:f6:63:9d:68:ea:
93:96:8c:ef:fe:75:9d:1a:2e:e7:56:25:7c:19:18:42:a3:3d:
c4:ba:80:30:19:2b:bd:fd:5b:c7:8e:e4:bc:a6:96:b1:f6:66:
cd:b6:3c:9b:20:b5:a8:12:a7:e8:ed:2b:26:d4:3e:9d:43:09:
ea:6d:f6:3e:01:cd:ff:75:b6:2e:c0:f2:4b:ed:c9:51:ac:6e:
a5:6b:8a:88:4f:b8:f3:25:d9:77:0a:66:64:1b:03:90:a1:df:
cb:25:82:df:52:27:0b:90:0f:7e:67:e6:09:0d:e3:4f:57:97:
15:25:3b:60:63:29:ec:7e:87:dc:e3:1a:94:fc:d0:a5:58:92:
a7:b0:c8:7e:1e:c4:40:f8:c3:4c:39:7e:e0:5d:26:72:99:08:
4c:2b:cf:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:51 2026 by rpki-client