Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
File: rrdjIcjUae47oCOSCzcszaXeng8.mft (raw, json)
Hash identifier: fIUQWs05DqBvuuJ6IAQgXUNXxE9tY0NK9rM800EzvWw=
Subject key identifier: 0D:9C:73:CE:A9:47:2D:87:EF:5D:C6:93:64:30:4A:41:80:4F:8C:0D
Authority key identifier: AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
Certificate issuer: /CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Certificate serial: 019D277238A24F4E0731F1167B17E3DDD753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
Manifest number: 0A2A
Signing time: Thu 26 Mar 2026 00:01:30 +0000
Manifest this update: Thu 26 Mar 2026 00:01:30 +0000
Manifest next update: Fri 27 Mar 2026 00:01:30 +0000
Files and hashes: 1: eodQO_QecDa9A4kfpjbm-rS0pPo.roa (hash: iUWofSRT9UHvNK/hkBEFkKulPRt3pBGPPSMNCjcW5Yw=)
2: rrdjIcjUae47oCOSCzcszaXeng8.crl (hash: kkNqfVAgiJFQ4PIUj+hX8KkPfjwRm8nArmEOkPujMy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:38:a2:4f:4e:07:31:f1:16:7b:17:e3:dd:d7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Validity
Not Before: Mar 26 00:01:30 2026 GMT
Not After : Mar 27 00:01:30 2026 GMT
Subject: CN=0d9c73cea9472d87ef5dc69364304a41804f8c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:8f:37:98:56:1c:fc:b7:c3:d1:3d:42:94:
69:c5:aa:e9:9a:f6:0d:16:f4:1f:d2:8f:49:43:1c:
f6:59:40:8d:10:3d:b5:09:81:4e:2d:28:67:0e:71:
b4:f1:20:2f:59:a3:3a:fc:73:7a:c7:89:ad:a9:ec:
57:25:5f:de:f8:0d:b9:3e:31:a1:0f:7d:21:35:2d:
b7:72:36:ca:85:59:ca:85:57:c7:21:d0:5d:2c:41:
6a:28:d3:6f:50:06:af:5b:6e:2d:79:79:65:99:06:
75:3b:f3:92:4c:00:34:3d:44:e1:c9:10:02:3e:83:
9a:64:16:a3:51:be:9b:1a:eb:76:a8:c9:21:0b:26:
3e:b9:0c:13:a2:e8:29:85:35:3b:09:14:54:93:7a:
46:8e:bb:9e:1f:f2:cb:35:ee:46:4e:1f:41:08:b8:
0a:2b:5f:c9:de:69:3d:20:75:ce:cb:ed:09:1d:fd:
47:49:46:4c:8a:68:a3:ac:21:13:4e:59:b4:bb:c3:
38:b6:56:1b:29:9f:f7:4c:e7:85:d5:db:fe:d2:64:
5a:8b:90:ab:1c:87:2e:67:44:9e:89:40:4b:70:8f:
37:a5:d8:bc:c3:bc:b3:a9:19:40:fd:87:21:a9:0e:
86:07:7d:5b:01:fd:33:40:43:e6:e1:1b:32:92:b7:
b4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9C:73:CE:A9:47:2D:87:EF:5D:C6:93:64:30:4A:41:80:4F:8C:0D
X509v3 Authority Key Identifier:
keyid:AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a6:69:02:3f:70:cd:eb:86:cb:35:2c:b7:b2:0a:c4:18:11:
a1:29:98:7e:64:92:5c:57:6d:98:93:38:24:7b:f5:26:7e:cc:
e3:cd:84:da:91:96:83:09:5c:1e:54:a3:73:1d:31:30:83:f8:
1b:d3:30:99:2b:bc:1b:38:2f:86:20:30:77:4b:d5:78:4c:46:
1e:c8:02:03:ce:1a:61:c8:c7:95:ee:dc:a4:dd:c6:a7:38:76:
f1:5c:2d:df:59:96:78:83:23:cd:6d:6d:8f:af:05:b8:4a:f4:
1f:f4:33:e8:23:b9:0e:31:98:bf:3c:94:73:e6:4c:95:0b:90:
74:0c:6f:32:87:d8:d5:c9:18:d5:c2:b8:02:ac:70:cb:65:55:
4f:03:f0:0c:55:e5:9d:ea:5e:39:6a:dc:67:64:80:4b:b3:3d:
b5:7d:5d:b1:15:25:ea:36:3a:83:82:a0:34:f5:e0:24:37:95:
91:28:07:89:06:04:5a:f8:88:8a:36:96:5a:24:1c:c1:5a:71:
ec:55:6e:39:b2:2a:63:ab:84:bc:9d:39:2a:10:b8:90:ad:a3:
de:f7:3d:57:b8:56:0b:88:a2:7d:47:84:93:e2:0f:bd:bf:6a:
d7:7a:5b:b7:4d:17:10:70:37:29:14:ba:ed:3c:b3:b3:d0:54:
9f:43:99:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:52:40 2026 by rpki-client