Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
File: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft (raw, json)
Hash identifier: eHeuCGf2sZcBK492ucgkRwFTO12PgNZrAicDHeMO/X8=
Subject key identifier: 09:B7:AE:5A:27:4E:A2:31:05:A2:96:C5:75:11:B1:21:64:5B:F7:4F
Authority key identifier: D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
Certificate issuer: /CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Certificate serial: 019CACB47DE7D15C5FE5726BD1C76DC50734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
Manifest number: 04CC
Signing time: Mon 02 Mar 2026 04:00:35 +0000
Manifest this update: Mon 02 Mar 2026 04:00:35 +0000
Manifest next update: Tue 03 Mar 2026 04:00:35 +0000
Files and hashes: 1: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl (hash: Or3nkpU66mx2WFw0X77NYHCrg+z+fzGZrCoXb2+aWos=)
2: v795sY2U8jhvRzL8MVmYlvFz9_s.roa (hash: Hn47sYXDYoB/4A+t0th2lMVq06CbmCPSmHDsJlsUcW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:7d:e7:d1:5c:5f:e5:72:6b:d1:c7:6d:c5:07:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Validity
Not Before: Mar 2 04:00:35 2026 GMT
Not After : Mar 3 04:00:35 2026 GMT
Subject: CN=09b7ae5a274ea23105a296c57511b121645bf74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b0:c4:b8:89:c2:1d:bf:f4:8f:2d:b6:17:e5:
88:66:8c:8a:5b:05:da:58:66:02:9e:ad:5e:9f:94:
ae:8d:64:ba:a9:69:1a:2e:dc:0e:6f:82:3e:64:40:
c1:7c:0d:31:cd:84:80:e4:ad:a4:08:c4:d4:b3:91:
2c:04:9e:10:c8:e5:28:1f:0b:b2:5d:ef:06:13:c9:
a3:cb:81:65:d8:f1:69:10:70:1e:75:cb:1d:d6:d6:
80:0c:f8:62:96:5b:46:2d:fc:fa:d9:aa:f3:5d:95:
8b:f5:a0:da:cb:02:dd:50:9d:6c:97:21:b1:b1:78:
af:e8:5c:1a:1d:7a:1e:c8:ae:20:03:ad:b3:f9:96:
59:a1:25:b5:19:e6:71:3a:33:5c:f4:52:f2:e0:3d:
24:f9:6f:32:b8:52:4f:38:74:31:e4:67:0b:3b:30:
32:65:2f:da:df:9a:0e:2b:aa:a0:8f:25:1a:b4:21:
9d:6e:62:59:03:75:0b:98:03:79:3b:9b:8f:88:1b:
7e:b2:01:98:9a:92:1f:7f:9a:9a:69:fb:f4:3d:8f:
95:c3:3f:f4:7a:95:4e:45:f2:c6:92:8b:3e:89:b7:
a6:9c:5f:f6:c7:22:94:04:c5:c2:c2:90:53:22:a6:
34:61:af:e5:8c:6c:9c:7f:87:32:e0:f8:40:f7:d8:
c6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B7:AE:5A:27:4E:A2:31:05:A2:96:C5:75:11:B1:21:64:5B:F7:4F
X509v3 Authority Key Identifier:
keyid:D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:42:4d:20:fa:88:58:02:1d:d3:a3:12:d5:16:8b:8f:51:62:
44:6a:7b:9f:6c:f8:3c:22:81:ea:9d:ec:02:cd:0d:60:69:3d:
09:d3:4b:05:42:a8:fb:f8:27:18:a7:c5:96:99:93:b4:21:70:
d4:db:3d:a4:8a:1a:48:13:17:89:3c:18:c2:48:3f:5e:b7:32:
37:25:d8:88:80:f9:3a:cc:11:74:d0:27:5d:57:57:b0:83:71:
ad:27:21:46:54:c8:ac:80:9a:90:ad:43:61:12:4c:a3:56:d1:
1f:1f:b5:0d:90:06:6a:7a:0e:0a:ca:4d:7e:aa:b1:d2:42:7d:
62:fc:84:b1:53:b1:32:f3:b0:6b:1f:0e:80:f3:0b:af:db:bf:
30:b0:74:00:89:39:24:ad:d1:df:1e:d8:d2:37:62:66:0c:cc:
cc:b2:e6:41:f1:19:8f:87:20:ae:0a:6e:38:16:af:20:2c:dc:
45:7a:a1:e5:62:d4:73:96:75:58:b2:36:a9:90:59:a2:5d:65:
0d:26:11:82:8c:45:8b:f9:3b:2a:95:ea:2a:53:5b:9d:47:e4:
17:84:31:b9:ed:a4:a6:59:2d:33:d8:65:ad:a2:9e:b3:b1:49:
e4:92:55:c2:49:da:aa:86:ca:ed:26:df:98:3d:0a:c2:a2:91:
bc:4f:be:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:52:44 2026 by rpki-client