Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
File: 53OduQwc6YQx3zSKE3blOsbgUjw.mft (raw, json)
Hash identifier: 3UrfZvaw7fqmzbPxd87HCepAG5QmHGhGrbaSgHhf7fk=
Subject key identifier: 08:F4:BE:93:06:7D:97:87:B6:24:F8:76:06:2B:90:E8:0C:FA:FD:A8
Authority key identifier: E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
Certificate issuer: /CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Certificate serial: 019D26285A215EDEDA3A61EC2F08A17ED4F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
Manifest number: 0DA4
Signing time: Wed 25 Mar 2026 18:01:11 +0000
Manifest this update: Wed 25 Mar 2026 18:01:11 +0000
Manifest next update: Thu 26 Mar 2026 18:01:11 +0000
Files and hashes: 1: 53OduQwc6YQx3zSKE3blOsbgUjw.crl (hash: vQ+9mV0mSpRBbYOhlGeS7DLKeB/0BiH0Wqao5tbTdUo=)
2: JzXhokSG82LcMCULytEUp0QwNC8.roa (hash: ZZxc+1Uxr56VyzAUJ4dBkyZ2Uo54y6GBc5OnUw8X6mg=)
3: q3KyzHaSe2kvbjeAyrJ6xilqOcs.roa (hash: HuGnxltcUOelJB4yz5mBBFw+8XNpy2937+oYWbglU3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:5a:21:5e:de:da:3a:61:ec:2f:08:a1:7e:d4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Validity
Not Before: Mar 25 18:01:11 2026 GMT
Not After : Mar 26 18:01:11 2026 GMT
Subject: CN=08f4be93067d9787b624f876062b90e80cfafda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:d7:00:25:e5:d9:08:69:47:1c:c7:87:65:
c1:aa:2a:52:db:4a:e1:19:51:4e:1d:a2:47:a7:2c:
ca:2b:ff:3f:b2:49:2a:dd:1a:c7:ce:d9:fc:3b:8d:
0e:4b:49:dc:ef:06:ee:70:b8:3c:ef:21:89:af:66:
d2:bc:07:85:af:a3:10:7c:d4:2c:50:d3:2f:80:dd:
6b:96:df:3c:f5:eb:1b:8d:14:a1:f2:ba:57:86:cb:
e1:4b:94:74:03:b9:65:03:4a:c2:5e:0f:f8:34:70:
a0:71:af:62:c8:b6:42:18:72:95:8d:49:4d:c0:c9:
9c:c9:38:ec:4a:4c:5b:d8:ce:e0:c4:71:6b:52:e5:
14:29:ab:3b:cd:a5:90:8a:61:08:4e:06:91:cb:4d:
da:7a:f0:3d:ef:f0:e2:54:e6:d4:6c:b0:92:ed:8a:
f9:3a:b3:49:b3:88:8e:34:0a:a7:26:ae:e5:13:d1:
0b:43:e9:88:04:8b:3f:65:a7:95:d7:ed:88:12:f7:
c2:4e:ee:01:b9:8c:4e:f0:bd:e2:d2:92:59:d7:f9:
d6:f1:6b:d2:a1:b1:f1:a8:7a:1a:e8:e1:47:41:ca:
9c:4f:3e:cc:26:42:c4:91:2d:20:af:ab:58:9b:9d:
2a:e3:22:c5:6c:09:eb:0c:85:c8:c8:5a:a5:f6:70:
a0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F4:BE:93:06:7D:97:87:B6:24:F8:76:06:2B:90:E8:0C:FA:FD:A8
X509v3 Authority Key Identifier:
keyid:E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f3:cb:c8:f1:b2:0a:14:85:ee:64:2e:d9:a4:fb:86:d1:08:
4c:19:25:81:4e:9a:74:f4:88:b5:27:4c:35:13:0b:a8:83:6c:
23:58:34:a2:1a:86:9e:2b:15:97:4c:8b:98:7f:1a:78:dd:29:
7e:45:de:1d:d1:f5:15:da:75:49:e9:0e:e5:8c:0b:73:25:00:
89:5c:c0:84:b6:ef:60:c1:43:e6:eb:dc:af:96:b8:fe:57:8d:
79:67:7e:5e:8c:9b:50:40:b4:99:ad:8a:78:1d:82:7c:5b:95:
55:31:6c:2b:1a:d5:f1:2b:7a:c4:d7:54:3d:19:5c:4e:d3:2f:
9b:73:fe:b3:a3:6c:d5:a6:21:d5:f0:45:55:70:46:3d:01:66:
4d:be:4a:e9:84:98:46:29:0b:ba:b4:96:44:bf:78:78:81:11:
db:29:70:2a:2a:18:d9:b1:a7:da:0d:1f:20:c2:e0:67:7a:2c:
4a:bb:0c:8d:88:68:6f:f6:19:fd:9e:84:6c:cc:85:2a:bb:5c:
27:6f:bc:68:95:03:d0:49:11:4f:06:3c:18:01:19:28:75:ae:
a0:8b:fb:7f:01:8e:da:95:4b:d2:2e:6d:90:3c:c8:49:fe:39:
36:ca:1c:49:49:a0:55:bf:a4:ee:ee:f8:ac:15:de:5f:72:0f:
20:a9:77:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:22 2026 by rpki-client