Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
File: edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft (raw, json)
Hash identifier: stB0ZdJXyQY/l5hvdtFbVIV2xAetOJkEfBUd2kgjd1Y=
Subject key identifier: 5E:BB:79:D9:95:42:46:25:50:4F:1D:D5:0D:EC:7B:43:76:D9:D7:0E
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Certificate issuer: /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial: 019D25843A2ECF4295C47217BDE443EE2B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
Manifest number: 0FAA
Signing time: Wed 25 Mar 2026 15:01:55 +0000
Manifest this update: Wed 25 Mar 2026 15:01:55 +0000
Manifest next update: Thu 26 Mar 2026 15:01:55 +0000
Files and hashes: 1: 8x6YocXhEAE4EUV764wUI2PKiKU.roa (hash: yeyp7+DYbQfuSd5MS8n2WSRAshm6pVInjHRluL8iOew=)
2: a_FCKCt6dnU7F2M3SMQI1J1wlrw.roa (hash: AtVF3QXcvO4VESZ6rn9J2bX+Ej+cAO1z0o2Qbw21J8E=)
3: edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl (hash: c6tX1TWpE5Rx78swQgvRBFARrozEdwP72KlPCHa1qB0=)
4: oG6E9ZToy7RTlQOkPq4zuV7XG0U.roa (hash: 2JYfuKBfp+nWk/czqBEKKIWfjScVuKeSQovGMXxQmwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:3a:2e:cf:42:95:c4:72:17:bd:e4:43:ee:2b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Validity
Not Before: Mar 25 15:01:55 2026 GMT
Not After : Mar 26 15:01:55 2026 GMT
Subject: CN=5ebb79d995424625504f1dd50dec7b4376d9d70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b3:fd:89:3c:92:b6:92:fc:45:c8:04:63:e1:
43:71:48:7f:05:e9:28:97:e7:b4:2b:05:65:b1:34:
a5:71:9c:08:87:1b:d3:ed:85:d8:9a:28:98:59:97:
81:7d:f1:0a:3b:e7:a9:9b:a1:6c:ce:aa:28:69:81:
4a:a2:bf:f6:1a:5e:8c:63:04:07:44:bf:ea:bf:b9:
43:6b:9d:9e:62:9e:06:e0:f0:4b:ab:76:97:d2:84:
ce:70:fa:0a:15:4a:5b:72:27:ab:47:63:f1:63:1c:
bb:aa:4a:23:9a:84:7a:fc:88:19:65:48:56:d3:3c:
9c:8d:a9:b5:37:de:7f:32:24:a3:6a:6f:db:cc:24:
92:06:a3:76:1a:a9:25:fd:b1:dd:df:9e:e1:13:64:
df:f0:a1:27:7f:b1:0e:f8:bf:19:f5:28:f4:db:77:
13:b7:43:28:c6:fc:d7:3c:98:aa:5e:34:32:1e:9a:
33:a1:79:88:4a:cd:41:c0:e1:70:e0:47:01:80:71:
07:4d:c0:64:a8:87:2e:39:5d:10:d9:33:d6:db:70:
60:1a:77:1b:8a:1a:55:20:88:d8:4b:29:7a:ca:3d:
f7:99:9a:13:d0:d4:70:15:9e:c0:60:3c:05:75:d6:
da:08:72:3a:1f:0f:68:ac:84:a3:94:5c:85:a6:a6:
51:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BB:79:D9:95:42:46:25:50:4F:1D:D5:0D:EC:7B:43:76:D9:D7:0E
X509v3 Authority Key Identifier:
keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:85:12:36:e0:12:5d:ec:ea:b6:2d:fe:7e:e9:5d:d8:66:29:
0b:31:e3:fc:e3:56:fe:c9:0a:bc:84:81:77:0c:63:7f:d2:16:
e3:ce:ac:c9:73:cb:4f:24:8c:2b:4b:4d:96:11:17:c0:2c:08:
0d:24:0c:6e:c5:6a:73:32:e7:bc:05:12:bd:42:0d:05:89:37:
6d:19:2c:ad:7f:5d:3a:f3:92:dd:96:d0:fa:75:18:2d:6b:67:
22:e2:71:85:c3:e1:c6:65:04:16:8b:3d:62:9e:ca:cc:5d:87:
b9:a3:b0:1d:cf:ec:3b:90:5b:2c:e2:ef:10:e6:27:ed:0d:e9:
32:76:a1:8a:fc:bb:a7:f2:58:22:fd:3f:81:48:92:c7:78:6d:
16:91:79:18:05:06:18:2a:2c:37:a1:bd:bc:8d:d2:04:92:cb:
48:65:01:0e:ca:03:9a:23:e3:50:c4:06:d5:96:99:c6:b0:84:
ce:bd:5b:5e:0c:e8:d3:b0:6c:e3:d6:1b:ee:35:6c:0b:2d:0c:
1e:3d:70:e7:69:19:93:26:6d:a3:44:9d:a8:9f:f6:ba:2c:9c:
90:d6:e0:67:fd:f5:b2:0d:ad:98:52:77:f5:51:27:00:35:75:
66:38:fb:18:d1:c4:e8:7b:d6:6b:b1:33:31:e4:ae:a8:d8:cb:
2a:4e:43:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:57 2026 by rpki-client