Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
File: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft (raw, json)
Hash identifier: 5xN+F3Ac3tpKWDFTDHDTPVGoosIYIkaICPbEh6bwkX4=
Subject key identifier: 67:55:70:35:9E:EA:94:9B:42:AC:4B:D3:9E:6F:20:9D:07:9B:4F:99
Authority key identifier: FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
Certificate issuer: /CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Certificate serial: 019D26280A449A268489E8EE4695A79D0477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
Manifest number: 142B
Signing time: Wed 25 Mar 2026 18:00:51 +0000
Manifest this update: Wed 25 Mar 2026 18:00:51 +0000
Manifest next update: Thu 26 Mar 2026 18:00:51 +0000
Files and hashes: 1: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl (hash: 65fLZjautlKol/32UJmBGnPC8womSoG/Bhb9EzGI/zA=)
2: 4h5jFmUAHogYMzFmPzLef51aEOo.roa (hash: +Vnh/sN48kb2A3UtpPAdLkn1qR/raYPxhCm9aIXa9vk=)
3: IejMQZqryCYEJhPt3g_AUlVHwbc.roa (hash: nNLRvEhZpJTRNsbKaW/XctbPiknRbtd4nqAjqgh3BSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:0a:44:9a:26:84:89:e8:ee:46:95:a7:9d:04:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Validity
Not Before: Mar 25 18:00:51 2026 GMT
Not After : Mar 26 18:00:51 2026 GMT
Subject: CN=675570359eea949b42ac4bd39e6f209d079b4f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:57:b9:10:bd:79:4a:34:a3:7f:e9:55:b5:5d:
39:92:a3:55:24:6c:e7:d3:b2:64:53:0e:3e:da:1a:
fc:7a:45:49:12:11:39:83:c4:03:4e:fe:5a:be:84:
52:35:56:ed:d4:05:13:c9:4f:91:08:8c:da:1f:f3:
08:26:e0:56:de:e7:45:66:cf:39:d2:7d:48:a7:55:
3d:36:4c:be:1d:0e:86:9c:22:04:46:6d:e1:a5:b9:
7b:f1:36:be:af:84:29:a0:f1:ec:f9:36:86:a6:a7:
28:a1:52:86:c2:7a:f1:37:10:7a:17:07:10:46:ab:
bb:ac:1c:cb:2e:c6:39:06:be:88:28:7f:72:de:56:
8d:e5:60:94:dc:c8:71:fc:e3:f0:17:3f:04:ca:ec:
22:d9:b9:8b:d8:02:5a:d1:d2:b9:25:6f:63:21:34:
16:be:58:31:7d:d6:63:0e:0a:b6:d3:d6:5e:b1:36:
36:bb:49:7a:ca:13:a0:65:eb:76:24:4b:eb:76:9c:
47:85:0b:5a:4b:8c:d1:01:7f:c4:6c:0b:02:3a:38:
4c:14:30:ce:34:90:87:32:49:7d:9b:01:72:9f:30:
91:d5:78:1b:0a:8c:95:03:ec:41:11:0d:ee:46:d6:
06:2d:c4:2a:19:d0:9f:69:81:24:43:40:f0:a3:a4:
2f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:55:70:35:9E:EA:94:9B:42:AC:4B:D3:9E:6F:20:9D:07:9B:4F:99
X509v3 Authority Key Identifier:
keyid:FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8b:c2:1a:10:60:e7:aa:c3:f2:89:73:de:ac:3a:7c:fc:d0:
9b:8a:4b:9d:06:23:14:de:8a:a4:c7:48:f2:04:3d:43:75:ce:
5f:12:01:14:49:c6:36:b9:19:30:82:9e:10:07:39:59:3a:9d:
49:ab:01:84:fa:70:84:c5:49:2d:3b:34:5c:18:da:86:fb:6f:
a3:77:a7:73:63:d9:99:ca:a0:45:11:f4:6f:bb:d7:22:9e:36:
88:1c:cf:13:b7:55:6f:94:a6:91:4c:68:4e:91:c2:35:7b:39:
00:f4:c9:24:20:2c:38:2f:ec:b2:9f:ce:8e:8b:fa:5d:56:42:
0b:e5:8d:cb:65:ba:3f:b3:10:f7:f5:54:38:37:2d:93:96:46:
08:25:ae:93:bd:ff:59:f4:bb:49:a2:bc:19:6a:cb:ee:1e:b6:
3a:83:9d:ad:92:cc:2a:a2:2c:08:1a:fb:4c:ea:4c:9a:2a:60:
aa:99:6e:39:e9:bf:97:8b:c0:7b:2e:4e:ea:af:97:2d:09:35:
f7:83:44:8d:f5:6c:b1:88:f6:ec:9b:ef:36:29:91:0c:3d:8a:
13:e6:b7:3b:58:f4:e8:1f:42:97:b2:fa:12:3e:3b:83:6c:fa:
56:73:7d:88:60:eb:cf:9a:ad:8b:bf:88:16:c0:fa:e8:91:94:
9d:73:d3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:38 2026 by rpki-client