Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
File: RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json)
Hash identifier: +FteG7+tRmj2Y2gr5bMnDSQZWaB9+qVC0Eq+p4aNSTw=
Subject key identifier: 98:14:F4:19:75:52:F2:82:20:5F:24:D7:CB:07:DC:19:E7:30:D3:40
Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
Certificate issuer: /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Certificate serial: 019D26282533B57C962261AD7715499F7A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
Manifest number: 0911
Signing time: Wed 25 Mar 2026 18:00:58 +0000
Manifest this update: Wed 25 Mar 2026 18:00:58 +0000
Manifest next update: Thu 26 Mar 2026 18:00:58 +0000
Files and hashes: 1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: pyjs8fNPTHyXd8pXgvK7EME4AIXEouqWlPqI/tOLU2w=)
2: nlcpl9ulhW9UJP1m-NfebbvM-08.roa (hash: IBQWkMt/VVWxVDIuSxk0QRhZsHES5xi9v/NlOWNnx9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:25:33:b5:7c:96:22:61:ad:77:15:49:9f:7a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Validity
Not Before: Mar 25 18:00:58 2026 GMT
Not After : Mar 26 18:00:58 2026 GMT
Subject: CN=9814f4197552f282205f24d7cb07dc19e730d340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:82:e5:8e:10:d2:29:e3:57:16:37:fb:fa:
7f:47:3e:52:97:dd:c7:fc:3e:d7:58:92:58:f8:e5:
b6:a3:fe:31:b8:e2:b5:11:61:56:6c:5e:6f:3d:80:
ce:10:6e:13:a8:d0:1a:1e:bb:06:16:b2:a7:8c:80:
ac:94:bf:4b:d8:b4:74:b2:34:8a:aa:ce:97:0f:26:
1e:c5:52:11:df:78:4a:4c:b6:aa:90:0b:d9:35:b8:
2c:0e:e1:a3:64:22:5e:19:23:64:2b:fa:0b:ec:c3:
c4:f6:86:9c:6a:b3:21:63:0a:ad:60:13:41:bd:ce:
aa:d0:d3:a3:78:f2:b7:ae:06:e5:4b:20:23:13:2e:
3c:2b:3a:7c:e9:66:6b:e6:7f:fe:2c:83:7a:aa:01:
ec:b1:5f:0f:57:33:8c:dc:d9:16:88:8e:51:af:20:
1f:74:de:e1:95:1c:d1:77:2b:e6:9c:83:a8:88:d7:
55:d7:76:b3:5f:09:b2:a1:24:5a:27:11:18:65:17:
1c:bd:f7:e2:a4:14:1f:f7:32:4c:82:42:a6:86:d8:
cb:10:ed:3c:e3:86:b7:b0:37:b0:9a:0a:84:29:35:
2f:9b:70:ad:07:54:7e:e1:60:05:90:0e:75:e7:25:
f9:ad:e4:3b:cf:73:0c:63:30:e2:0c:fd:1e:86:3b:
e3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:14:F4:19:75:52:F2:82:20:5F:24:D7:CB:07:DC:19:E7:30:D3:40
X509v3 Authority Key Identifier:
keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4c:b5:ae:ab:85:77:1a:f2:78:ca:a9:e0:11:ad:34:92:0e:
bd:b7:98:61:4b:49:78:f5:87:10:73:1d:de:47:ef:a3:94:c1:
f3:9b:88:d3:24:48:42:28:00:4e:56:53:97:c9:18:ee:57:b9:
34:16:36:88:db:92:6a:d2:06:07:21:c8:e9:41:3c:8c:1b:23:
3b:c6:6d:06:ef:10:93:ae:40:6a:95:a1:7c:53:98:6d:e5:f9:
b4:da:b7:7b:44:bf:63:e2:2d:6b:e4:bb:a4:24:15:2b:ba:c7:
fd:26:29:a4:70:25:8f:9b:66:02:81:ed:71:98:62:9f:d4:02:
56:93:b5:7f:58:6d:37:74:45:6c:e8:c7:b5:17:0d:f0:c9:cc:
1c:09:c4:87:d8:3b:89:a6:0b:54:3b:96:f5:e3:f6:00:a9:25:
17:da:ce:fa:35:73:83:71:f3:3c:a3:31:52:7f:5b:6d:0f:c3:
24:4e:d3:cb:33:b6:c2:dc:bf:37:b8:3a:c8:2d:d1:85:1c:56:
0f:d1:95:2d:b1:41:d5:2a:75:18:c0:a6:f4:07:8e:33:b6:f2:
fa:8d:f6:c2:01:0c:fb:7b:bc:18:cc:fc:e0:c3:25:d2:ad:67:
02:3a:f5:a3:98:3c:36:16:5f:79:85:de:8c:52:5b:7a:62:73:
a6:18:87:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:10:38 2026 by rpki-client