Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
File: rdJhytDf8tm7L4x60Nsm7Vcw090.mft (raw, json)
Hash identifier: uFHaAZPfReiBtTUH8ZNB89pcevm6Be7xFsMlShwwSpA=
Subject key identifier: 70:F6:F9:6B:AD:AE:EC:75:83:F9:7B:F8:2D:56:06:CE:40:2B:E6:90
Authority key identifier: AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD
Certificate issuer: /CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
Certificate serial: 019D2AA9F6D79CAD9E8B90EF9F90185031E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
Manifest number: 0F5A
Signing time: Thu 26 Mar 2026 15:01:14 +0000
Manifest this update: Thu 26 Mar 2026 15:01:14 +0000
Manifest next update: Fri 27 Mar 2026 15:01:14 +0000
Files and hashes: 1: RGmbCKVggdFaEV2n5n5vWdFRCzM.roa (hash: SS7nRzfO0dBngHu3IsLgcGfjod0pNS0O7g/l/TaVaqk=)
2: rdJhytDf8tm7L4x60Nsm7Vcw090.crl (hash: ScElo7XEu6k9lmxDZniWLcyiS2EaiMDBET6Ny13c160=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:f6:d7:9c:ad:9e:8b:90:ef:9f:90:18:50:31:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
Validity
Not Before: Mar 26 15:01:14 2026 GMT
Not After : Mar 27 15:01:14 2026 GMT
Subject: CN=70f6f96badaeec7583f97bf82d5606ce402be690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:72:c6:5c:bb:86:02:05:62:e4:53:d0:b8:89:
a5:c2:87:85:ca:d5:e1:ec:70:0a:94:95:93:87:93:
99:9d:b8:1a:b7:b2:80:ce:be:c5:3d:fc:90:0c:04:
48:21:36:eb:73:c6:42:dd:1e:3b:9b:59:10:7f:34:
fa:0e:0d:f4:5c:76:49:75:b9:7e:d2:b6:eb:72:37:
57:b5:4e:4c:d8:8b:9b:43:9c:51:28:97:05:e4:8a:
c2:b4:cc:65:56:bc:31:b1:80:37:57:1e:38:50:67:
63:ea:71:cf:17:ba:93:fb:0e:ba:a7:bc:99:4d:a0:
3d:05:ff:03:5c:de:fe:75:64:1c:63:e4:9b:a1:84:
28:25:6b:b7:d6:c1:5b:17:10:b6:bb:57:a0:15:82:
78:b5:a1:43:ac:c8:ab:f1:69:94:ba:eb:c4:0e:b0:
94:ec:6b:93:6e:30:fe:e9:46:36:42:fd:2b:65:32:
28:73:36:3b:8c:2c:47:fb:3c:dc:0f:3e:73:ce:cb:
dc:06:1f:a4:b8:01:52:c7:2a:f5:4d:b9:5c:52:37:
b5:6e:8b:82:20:4a:09:50:51:26:d5:c8:2b:38:f1:
16:c1:63:db:b8:d4:1a:ab:3d:4d:41:de:1d:f5:44:
6b:7e:62:54:1a:ce:f0:ec:bd:ee:07:e0:6c:26:1f:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F6:F9:6B:AD:AE:EC:75:83:F9:7B:F8:2D:56:06:CE:40:2B:E6:90
X509v3 Authority Key Identifier:
keyid:AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0d:fe:b1:3d:68:b9:7b:a1:52:e2:08:49:61:8d:cb:47:af:
72:9c:9b:23:ea:de:08:68:b0:a9:bf:c9:b8:97:b1:20:36:8d:
35:ee:18:a8:dd:35:3e:af:63:91:55:0f:2c:f2:3c:ac:cd:c1:
9f:65:0a:33:92:a1:b4:c8:fb:41:e7:29:ab:98:42:75:ce:1d:
a7:de:c9:11:0e:68:a8:96:b9:92:d3:d7:f1:be:28:23:19:15:
bd:ec:8f:67:b9:ab:37:bf:33:d1:39:bf:8c:75:a7:90:f8:11:
54:cd:48:87:23:95:09:10:b3:b7:ff:e0:a5:1f:ee:77:7e:ce:
7d:2a:c3:81:5b:87:e4:00:24:56:a9:4d:5b:c3:86:3b:be:17:
30:d9:35:ad:d7:70:d3:7e:3a:24:a5:25:81:d5:3b:d6:e3:55:
6c:70:fe:d1:f6:22:24:8f:05:a7:81:4d:07:d7:92:84:07:24:
a6:81:92:04:f6:47:4b:aa:4a:13:56:3f:00:c2:64:ea:2f:9a:
ae:04:88:7a:05:03:92:c2:ec:97:71:6f:35:7a:c8:d4:03:d1:
1a:ca:e8:4c:77:98:0d:fb:ec:b0:bd:f4:2f:89:ae:77:dd:a1:
19:23:19:3f:cb:05:c1:d3:57:86:ff:de:06:33:07:dd:3d:e8:
4a:7c:9e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:47:35 2026 by rpki-client