Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
File: rSzfJ9neZesk5c_J0xDkyKAwFGA.mft (raw, json)
Hash identifier: oCerP30gKDthZQh4/1z7KlPX6f+I7Ek2myjx0bWcWzQ=
Subject key identifier: B0:04:7C:14:BA:BA:64:C7:EB:F9:60:D1:4C:0E:1B:F7:37:6C:39:8B
Authority key identifier: AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
Certificate issuer: /CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Certificate serial: 019D281650AC3BA8050361DF60490D99BBBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
Manifest number: 0E90
Signing time: Thu 26 Mar 2026 03:00:44 +0000
Manifest this update: Thu 26 Mar 2026 03:00:44 +0000
Manifest next update: Fri 27 Mar 2026 03:00:44 +0000
Files and hashes: 1: ecknfRAIvluVmZ7la5oiT_2luz4.roa (hash: HiuC3Vr01IHEO7h5/vdTPtdaVoDtm8DnoIetX64bo4k=)
2: rSzfJ9neZesk5c_J0xDkyKAwFGA.crl (hash: /nrWa71kDOzvp6Sd/QQ9oZRlhHif3zB/KqnuyVqyrXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:50:ac:3b:a8:05:03:61:df:60:49:0d:99:bb:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Validity
Not Before: Mar 26 03:00:44 2026 GMT
Not After : Mar 27 03:00:44 2026 GMT
Subject: CN=b0047c14baba64c7ebf960d14c0e1bf7376c398b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:c1:fe:77:49:1d:8e:46:52:52:c6:c0:c2:
38:ba:2f:6a:6a:02:21:83:e1:76:85:c5:80:44:56:
eb:4a:00:e5:37:81:48:7c:6b:5e:5a:66:b7:e1:e4:
59:7d:64:14:35:5b:50:d2:f5:b4:cc:6a:7a:a3:c0:
b2:29:be:2e:61:e8:2e:9b:af:58:54:d3:08:64:21:
88:ab:9e:a1:50:33:73:33:0d:b4:c1:d7:24:18:4b:
2d:a2:19:20:90:ac:7d:3f:f4:b8:54:45:05:83:88:
f2:54:f6:1d:8e:f1:3f:3f:7a:ea:0a:91:95:b8:73:
47:b3:72:19:e5:c2:e3:41:e6:dd:75:6b:8f:5e:c9:
e1:71:9e:e2:81:f8:9f:40:24:d0:c3:32:8f:0c:6e:
4e:f9:fc:d5:bb:5d:bb:cf:af:b4:7a:a8:1a:30:1b:
2d:a2:8a:32:fd:9c:04:a4:bb:63:65:ae:b2:e7:ea:
34:3f:b4:b2:b2:08:6a:a4:36:ce:36:af:d4:75:f0:
79:4a:e6:56:f6:1b:d1:ce:c6:1f:1d:d3:1f:04:24:
98:83:a6:65:de:be:99:06:fc:1e:32:fb:22:f2:a3:
bc:94:f3:28:fc:f8:d8:98:dd:e8:8d:35:cb:dd:67:
c2:1f:78:8d:90:4e:23:7e:0f:0e:68:af:70:9d:4c:
06:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:04:7C:14:BA:BA:64:C7:EB:F9:60:D1:4C:0E:1B:F7:37:6C:39:8B
X509v3 Authority Key Identifier:
keyid:AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d1:50:45:f0:b4:4f:72:cd:f1:d7:62:11:4c:d4:76:2b:a8:
7a:df:1e:15:10:25:92:28:5b:c2:4c:e1:64:f2:03:8b:3c:a5:
da:3e:2b:a1:57:e5:63:4e:e9:59:ef:1f:24:bd:2c:a8:3d:c8:
3a:16:15:6e:48:12:dd:b6:f4:a1:bf:f3:a6:40:a1:d5:01:d5:
85:df:e1:e2:e7:4b:8d:64:58:38:f2:c5:08:25:dc:a0:49:18:
db:93:3e:39:41:6d:7b:f3:64:43:7e:f1:f5:ac:ce:cc:8b:82:
de:dd:c5:43:30:02:ee:f3:e8:dd:f2:9a:70:a6:3e:7e:dc:16:
91:cf:d1:8a:43:a4:ab:07:e5:6c:45:4a:1f:17:ec:3d:fc:53:
04:97:d1:fa:d3:9b:64:26:31:f5:ec:80:39:2c:f9:a6:0c:76:
c2:e5:a0:6a:0e:9c:d0:ca:c1:04:4c:4d:72:3c:fb:e5:58:c2:
82:2b:f0:80:9d:ec:b9:10:18:a8:c6:5d:27:28:23:68:29:c4:
e7:b9:4c:c9:47:58:5d:71:90:e3:a8:6b:7b:33:8d:52:62:5a:
99:2a:0e:1d:3a:85:0b:42:05:f2:5e:27:3f:31:81:d4:4f:5f:
65:f1:0e:5b:d1:61:e8:5e:56:45:d7:5e:47:7c:f2:7e:c6:76:
c6:ad:ad:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:45 2026 by rpki-client