Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
File: rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft (raw, json)
Hash identifier: 9h7FpGzxVSKsKHjNs1j65LveVaf+2yAxpzwDNOBJcOU=
Subject key identifier: 04:97:D8:D1:01:04:B6:33:42:42:13:AC:84:CA:F7:06:53:0F:B4:E8
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial: 019D28BBAE8BF522AAE4D0779ADEFECA53C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
Manifest number: 18A9
Signing time: Thu 26 Mar 2026 06:01:21 +0000
Manifest this update: Thu 26 Mar 2026 06:01:21 +0000
Manifest next update: Fri 27 Mar 2026 06:01:21 +0000
Files and hashes: 1: 16oj0KN5oVRu5RHVQyd660OcQhs.roa (hash: TLQlSbdPdjZyztttOHY25ysKwRVnJ6KupToVN+WGfno=)
2: 3vf-Yp-2fomUCGxxsuFuZBkPGGQ.roa (hash: LZ4veM7bkOEXkp7bq57kS6QDZIvIWlhUv4Gp6OCzQzs=)
3: YbRyztzAYyU1EQ0U7vEJD7T7-GQ.roa (hash: lc8H8Or878nYqwgvLpQaR10DBBjaXOJCSgikSKNMpVE=)
4: rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl (hash: 2Z7hn+9a82DiubiT4TrmbgFz4FoWY/VdCiyTl14DZ30=)
5: z-6NzODp7V-uHJv_U1uqHFUWgdY.roa (hash: Wpr01XsM6HL09hxowv58BJM3hnt+sJz/9fzPyIg61hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:ae:8b:f5:22:aa:e4:d0:77:9a:de:fe:ca:53:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Validity
Not Before: Mar 26 06:01:21 2026 GMT
Not After : Mar 27 06:01:21 2026 GMT
Subject: CN=0497d8d10104b633424213ac84caf706530fb4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cf:29:de:5a:8d:60:83:54:13:a6:44:c6:df:
c6:3f:c3:86:94:a0:e6:c7:21:19:c6:41:55:b8:ce:
55:15:b3:6e:f0:2c:39:d0:b9:22:e1:bd:f7:fb:5e:
cb:d3:67:96:0e:ef:6c:f5:8d:66:14:a0:36:5b:18:
09:db:71:e7:f0:c7:9b:02:dd:9f:f1:ca:5c:b7:45:
d0:e0:3a:53:2a:d5:e0:36:61:bc:b4:52:d9:db:7e:
aa:7b:04:b4:9c:10:1e:fc:e6:08:2d:3e:73:30:e3:
95:57:d2:30:b0:1a:c6:97:79:4e:3b:5d:9c:f8:dc:
06:30:c4:5c:6c:ab:ca:48:2f:31:5d:2c:be:f9:bd:
d7:7a:a9:ff:c5:f2:08:c6:ba:9c:71:32:7a:1a:2c:
4a:76:67:8f:e7:b1:40:48:9a:89:90:82:b2:5d:4e:
b4:a8:6d:f0:c8:bd:4d:36:54:a4:04:3d:54:2b:aa:
9b:59:ca:53:8d:77:03:11:35:f3:63:17:7b:a7:54:
2f:41:57:2f:6a:56:1b:5e:a4:c1:13:f7:a8:59:64:
d8:fe:6f:60:1f:8a:62:8f:3b:f0:2c:d5:69:ad:74:
b5:a6:de:d6:46:ad:da:9e:18:a0:fc:01:f1:30:3a:
f7:44:be:f4:1a:24:7c:cf:17:8f:33:f2:3e:61:ab:
18:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:97:D8:D1:01:04:B6:33:42:42:13:AC:84:CA:F7:06:53:0F:B4:E8
X509v3 Authority Key Identifier:
keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d9:cb:51:47:8e:ea:f2:fe:a9:1a:0a:77:7a:8b:d4:1f:c6:
8c:cd:13:ea:b2:b1:e1:9c:1a:f6:4c:b7:81:6c:21:63:e4:e1:
a6:db:6a:f6:9c:bd:79:4f:ed:76:25:25:af:4b:3b:41:bd:0a:
6f:58:e8:58:0f:c5:e7:b6:33:83:23:23:6c:96:98:3e:5a:3c:
69:15:64:a5:33:78:33:49:1d:dc:9e:65:c5:53:97:a3:0d:99:
45:38:c5:bc:8b:19:8d:ac:39:ae:fe:1a:35:a4:10:11:0b:9e:
f8:cd:0b:11:55:5b:23:33:d8:25:b3:ba:4f:30:8f:bd:dc:b8:
8f:1c:02:09:16:75:d6:89:ce:5b:7e:3a:8d:21:9e:b7:93:9c:
88:e3:43:b0:31:a7:0d:b9:f7:12:e8:51:51:f6:19:88:bb:19:
30:bd:f0:fd:06:c8:66:e2:02:e9:bd:d0:7e:83:9b:a4:5e:bf:
7d:9f:00:fe:a9:b1:f7:47:19:a5:fe:39:9b:1b:2d:29:93:cf:
ee:9f:46:2f:b0:1b:ff:62:12:94:51:ed:71:45:ca:25:97:3f:
81:35:a3:e1:eb:60:8e:f9:df:be:45:f4:ec:d3:98:c2:b5:0e:
c6:40:45:83:83:61:8c:60:b5:f8:cf:8f:a9:34:78:7e:85:5e:
23:15:20:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:30:46 2026 by rpki-client