Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
File: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft (raw, json)
Hash identifier: OX2f0tM0UgZjrzHFORqcaPWtX3qREiEP8u5WFqLodMA=
Subject key identifier: D6:15:72:E8:E3:F8:33:34:F5:91:80:14:17:0F:5F:A7:A6:F3:C1:78
Authority key identifier: D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
Certificate issuer: /CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Certificate serial: 01A0C557222BC4EC9F4D588D75C9BD3558BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
Manifest number: 06EB
Signing time: Mon 21 Sep 2026 19:00:16 +0000
Manifest this update: Mon 21 Sep 2026 19:00:16 +0000
Manifest next update: Tue 22 Sep 2026 19:00:16 +0000
Files and hashes: 1: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl (hash: gz/cpEwP79ndABmFvZ3/bBdsg0Ah8UcIFHXtb5DnJHg=)
2: v795sY2U8jhvRzL8MVmYlvFz9_s.roa (hash: Hn47sYXDYoB/4A+t0th2lMVq06CbmCPSmHDsJlsUcW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:22:2b:c4:ec:9f:4d:58:8d:75:c9:bd:35:58:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Validity
Not Before: Sep 21 19:00:16 2026 GMT
Not After : Sep 22 19:00:16 2026 GMT
Subject: CN=d61572e8e3f83334f5918014170f5fa7a6f3c178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4e:fa:26:10:3e:8e:42:83:a7:11:99:69:f5:
6a:3c:11:db:7c:e6:a1:af:cb:f9:b7:fc:3a:9b:78:
74:e1:9b:af:86:6f:2c:43:2c:47:bd:33:92:de:b7:
a4:5b:81:3e:90:c9:af:04:6b:59:be:bf:af:49:0c:
fe:64:a3:d5:10:08:92:2c:e6:9d:82:4b:89:e2:54:
68:16:c7:63:f7:f3:5f:e3:c2:94:27:2b:19:36:5d:
14:70:0d:cc:7e:28:71:03:c2:04:5c:03:99:0e:3d:
d9:76:1b:ab:a5:8c:72:6d:81:9a:0c:71:cb:72:5f:
d7:38:3d:87:57:01:9f:fd:c9:d1:46:39:10:c9:5a:
1b:31:5b:38:52:0d:52:4e:d1:5b:34:c4:e9:6d:37:
cf:e9:d4:3f:f9:13:a3:f9:6a:6c:7b:88:10:b1:80:
ee:6c:a6:8e:b6:0c:d9:f8:f6:b0:9e:a9:5e:78:3a:
94:99:54:a9:f5:1b:36:5a:40:03:da:da:87:2c:7d:
15:a8:c3:31:75:9e:fe:7c:f5:4d:29:37:dc:59:b4:
1f:02:d5:e5:de:b1:7f:29:62:ad:a8:1d:72:07:b9:
e8:21:7b:37:23:a1:33:7d:4e:29:7c:28:41:fd:d8:
36:9d:7f:66:7b:cf:f9:c6:86:74:f2:84:24:a3:7e:
9e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:15:72:E8:E3:F8:33:34:F5:91:80:14:17:0F:5F:A7:A6:F3:C1:78
X509v3 Authority Key Identifier:
keyid:D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f9:ca:7d:09:26:73:7f:83:7d:75:54:8c:92:52:7f:6a:db:
e7:40:e7:51:68:40:c9:20:c3:47:c1:36:2d:76:5f:b7:d3:ef:
43:10:bb:90:79:1f:b5:84:38:2f:3d:f0:8a:0b:25:3f:5a:68:
28:1b:e6:8e:e4:75:fc:34:34:de:44:eb:af:bc:23:73:82:0b:
49:28:44:3a:a2:e5:fc:09:86:9d:0b:8f:b8:92:fc:fe:a3:7e:
d1:9c:fb:e0:c3:36:22:85:22:f5:3c:d2:2a:a2:7a:01:47:e3:
33:f7:09:94:59:ee:24:d9:21:61:0a:3a:da:12:60:eb:a5:c2:
66:46:a1:c5:e6:84:5f:9f:ca:bd:7b:cc:c8:13:6a:ea:7a:67:
74:28:a7:35:59:02:28:a6:d2:18:f5:0f:7f:75:ca:ad:14:38:
5b:4f:4e:32:e5:43:1f:6f:df:a7:5d:46:34:6d:15:54:3f:23:
91:c6:b1:06:c7:d6:91:4e:05:f4:f4:9f:bc:c2:ae:31:fa:f8:
13:48:ea:c5:e9:22:bb:d4:16:34:34:27:21:a2:52:e4:2a:86:
55:31:1d:48:ae:ba:cb:d1:c2:3e:32:e3:38:b5:8d:9c:71:a3:
96:4a:a5:90:b5:e7:6c:30:04:e0:1c:f6:53:9e:fc:6e:57:bb:
27:d6:73:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:34:11 2026 by rpki-client