Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
File: rd0qgVBgqn5iGiCUNJdYsgNolvA.mft (raw, json)
Hash identifier: cdYetnM56ilZKdSQ/ATWemAF00uqRPs5G5tKu4HggtU=
Subject key identifier: 05:84:98:D6:2F:EC:4B:7C:F9:CC:9D:40:14:6E:19:0E:CE:34:AC:05
Authority key identifier: AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
Certificate issuer: /CN=addd2a815060aa7e621a2094349758b2036896f0
Certificate serial: 019D258321422C9D68C3423EC3CBCAA04E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
Manifest number: 04E1
Signing time: Wed 25 Mar 2026 15:00:43 +0000
Manifest this update: Wed 25 Mar 2026 15:00:43 +0000
Manifest next update: Thu 26 Mar 2026 15:00:43 +0000
Files and hashes: 1: Mw3ACAhcMDXBuRq_X19P75n7CqI.roa (hash: 0uTqpS4C1XoKrdQcU5VVh2z78vf6LmyT+JyUmMpcNqg=)
2: dw0pzmkTaZts4fybHtDLSMI8pwU.roa (hash: POq13Xf4ByDXuaJoDtQFN2IdIJQyKKVS8tZJvFhZ98Q=)
3: pgBIs-3GoZthMmbw9U-r3itRgXQ.roa (hash: +p2wOZUmpgnrYwvX+umOGcelDbIr/AvBcaa1sjakkaA=)
4: rd0qgVBgqn5iGiCUNJdYsgNolvA.crl (hash: FaLhTARGOnQXdjM+ys1r7FjQLJO7eQQe/SPXHeiNxC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:21:42:2c:9d:68:c3:42:3e:c3:cb:ca:a0:4e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=addd2a815060aa7e621a2094349758b2036896f0
Validity
Not Before: Mar 25 15:00:43 2026 GMT
Not After : Mar 26 15:00:43 2026 GMT
Subject: CN=058498d62fec4b7cf9cc9d40146e190ece34ac05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:36:cd:e2:19:82:4a:74:15:55:9b:e4:27:
ee:2e:b4:90:76:20:5e:01:fa:ca:c7:21:9f:9f:60:
ee:83:60:2c:16:c2:99:b9:7d:6f:c2:94:c7:53:2e:
6b:29:63:f8:38:00:23:2f:cb:ee:19:2f:ca:66:84:
4f:12:cd:36:43:86:22:40:37:79:4c:4d:a0:3a:5f:
e6:3c:ef:06:75:0a:4e:f7:48:ba:b1:b7:96:d3:2b:
1c:bd:31:fa:8a:1d:8b:33:c8:3b:e4:ea:e9:d9:12:
e1:9c:e6:c5:d7:94:1f:f4:f9:61:d3:a9:61:4a:bd:
c5:19:07:3f:1e:0f:ff:6b:cb:b6:fd:1e:21:cd:24:
7c:7b:5b:b4:af:12:fb:5f:2a:38:3f:00:1e:60:0d:
ce:cc:2e:d6:b3:f0:0a:a7:e1:1b:99:e6:64:57:8b:
21:29:7c:52:26:8b:db:2c:7d:6a:4c:2e:2a:43:0c:
f7:9e:5a:58:31:de:0e:27:30:04:65:6f:28:63:43:
47:32:eb:0d:e8:ef:2f:28:63:4f:59:e1:47:a6:ca:
ec:fc:8f:e4:85:2a:40:5a:29:7a:10:a8:24:bb:bd:
0e:34:5d:e4:e9:34:66:29:c6:e4:43:d5:21:4a:0a:
7b:19:86:16:fb:2e:66:83:39:ba:b1:38:14:a7:0a:
9a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:84:98:D6:2F:EC:4B:7C:F9:CC:9D:40:14:6E:19:0E:CE:34:AC:05
X509v3 Authority Key Identifier:
keyid:AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9a:39:07:b8:b3:36:00:be:54:55:65:7d:dd:ae:60:b0:cc:
bd:4b:0c:66:75:05:ac:86:59:7b:35:25:e9:0d:b6:56:98:cc:
8b:8a:b8:2d:45:da:01:b6:93:da:25:8d:86:9f:e7:ac:b6:28:
34:40:91:fe:98:1f:77:03:25:05:f0:02:a3:70:42:8b:fa:10:
ad:b1:4f:6c:a1:cd:73:c1:6a:c7:f9:04:cd:76:f9:75:ca:a1:
cf:ff:47:9a:f7:82:bb:b6:aa:09:d4:f0:4b:1d:af:aa:2d:5e:
97:97:36:7c:16:bf:30:b2:d4:99:66:23:2a:a1:b4:b4:79:6a:
c7:87:55:7a:fa:b5:f2:9b:79:fd:17:a9:30:14:b6:37:7d:e1:
f4:f0:57:40:a2:23:ee:2d:4b:20:01:79:2a:3e:a1:02:a1:43:
c6:d3:d2:e0:a9:8f:00:aa:2d:1e:e2:0d:79:d4:0c:60:b3:37:
6d:fe:bf:b3:c3:ee:bd:71:37:6e:64:39:a3:f9:3d:43:b6:5a:
18:38:a2:37:07:00:b2:03:98:72:50:63:2e:80:fa:cd:32:ea:
3d:6a:a6:9a:d1:bd:e3:51:cc:c0:2c:f2:a0:e0:f8:86:c6:0e:
06:79:c6:28:8b:4d:59:97:91:96:65:74:48:f1:6b:76:1a:46:
4c:46:ea:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:03 2026 by rpki-client