Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
File: 0elpYhQkgMux04QRdx60_z45g58.mft (raw, json)
Hash identifier: mwMBHJnQl4MZH9R3EBG6uX7UUPULM4n+DZWtGcj/Ryc=
Subject key identifier: EB:1E:F1:30:AB:D2:97:4E:61:13:A4:3A:A0:D2:C1:E8:A9:46:DC:73
Authority key identifier: D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
Certificate issuer: /CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Certificate serial: 019CAEA33734C9006A0EEA39902F3A32E8A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
Manifest number: 0CA8
Signing time: Mon 02 Mar 2026 13:00:57 +0000
Manifest this update: Mon 02 Mar 2026 13:00:57 +0000
Manifest next update: Tue 03 Mar 2026 13:00:57 +0000
Files and hashes: 1: 0elpYhQkgMux04QRdx60_z45g58.crl (hash: A1UAqFrs692q5isWr1faxvgwx33yWKApGJcCPcffaCM=)
2: cHvhPA5WiP2hlNkTCQAUdFz33aQ.roa (hash: kklG1LK9LOsPTVd1KnUPw3+fJn5429kCodQSEA85c8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:37:34:c9:00:6a:0e:ea:39:90:2f:3a:32:e8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Validity
Not Before: Mar 2 13:00:57 2026 GMT
Not After : Mar 3 13:00:57 2026 GMT
Subject: CN=eb1ef130abd2974e6113a43aa0d2c1e8a946dc73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:49:01:c6:f3:84:83:c4:d8:4c:7e:2d:9e:ef:
b0:bc:ea:a0:ea:77:e7:06:5c:e3:bf:48:41:f4:02:
c6:2c:be:0c:58:d7:22:68:81:47:fd:5d:36:ec:16:
5e:81:03:82:d7:38:60:fd:9e:a0:6d:e8:c1:1c:53:
8b:cd:82:34:fc:22:0a:9e:19:17:14:66:2d:0d:70:
b5:a5:47:a8:8e:20:fd:7d:85:4a:69:1f:a5:89:fb:
2d:c6:2a:f9:be:4e:35:c2:1f:ec:47:af:17:c4:94:
65:6c:0b:92:ce:5d:26:4a:83:aa:f9:0c:35:0c:0f:
d0:90:ca:a8:4d:bc:4d:82:95:a9:12:e8:1d:4a:6a:
cf:4a:e5:b7:87:8c:2d:ef:77:8f:66:8f:08:31:ad:
44:88:a0:5e:5c:55:1d:65:b5:b5:7b:85:c7:a3:6a:
c3:da:f7:f7:38:a4:e3:18:b7:26:32:aa:f4:03:7d:
76:58:fd:2a:42:a2:99:ad:fc:e6:35:80:b2:96:b3:
2d:d4:fc:d3:f4:83:94:57:33:32:49:64:ce:8b:f1:
f9:64:35:c4:83:fe:bc:96:f6:76:bc:72:f7:17:18:
7b:cb:77:cd:5f:db:91:ae:96:de:fa:71:e7:04:a8:
2e:5c:9f:3f:01:22:54:d6:52:cd:be:02:aa:dd:02:
2f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1E:F1:30:AB:D2:97:4E:61:13:A4:3A:A0:D2:C1:E8:A9:46:DC:73
X509v3 Authority Key Identifier:
keyid:D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1a:2f:7c:58:1d:60:2c:15:3f:ba:ee:6f:83:67:a4:09:cd:
66:f4:70:dd:35:20:3e:cf:03:08:57:5e:ff:c8:a4:c8:2c:ca:
fa:3c:d9:32:6f:1c:ae:8e:b6:c0:5c:fa:ca:52:dd:8f:30:0c:
ee:38:9a:d2:41:af:50:db:70:c1:8e:b2:be:2d:f7:9c:d2:a4:
fb:fc:98:cc:a6:4c:b4:a8:4d:79:1a:82:10:84:8b:91:4b:99:
80:f0:5b:64:14:3a:af:52:bc:0a:42:bc:63:9d:40:26:58:02:
e5:e7:bb:40:47:e5:fc:88:a9:3a:89:d9:45:93:ad:7b:25:34:
18:2e:e6:66:52:33:77:1a:d2:ef:b8:f1:3b:9d:ad:1d:a6:43:
79:6e:4c:8c:91:64:6f:2c:02:ac:a7:01:0b:06:fb:a4:70:39:
37:a6:92:b0:4c:9e:3a:76:ff:56:90:47:3f:77:05:bd:4e:cc:
d0:70:50:64:18:99:a1:2e:35:7d:8a:ba:ca:44:3d:44:81:ad:
a9:87:29:9a:dc:14:a0:0d:d4:4e:af:a8:4c:4a:0c:39:37:0c:
f5:22:a4:75:41:a5:f4:1e:a8:f1:1c:1d:7d:ec:0c:1a:82:00:
44:c6:42:76:cb:fc:63:7c:44:3c:af:df:bf:20:dc:09:c5:79:
02:62:eb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:14:03 2026 by rpki-client