Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
File: dODVhfGshfVEks_JXh3OD8L3lw8.mft (raw, json)
Hash identifier: YJd5uMpglPdUc+oxrLIek9+75+c3cO1rSiKF2jxiFfQ=
Subject key identifier: B6:4E:EE:23:D7:C1:1B:81:C8:D4:32:E7:4B:E0:08:CA:73:6B:13:D0
Authority key identifier: 74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F
Certificate issuer: /CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f
Certificate serial: 019D2884253F25DEC648EF0A155C1021A18A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
Manifest number: 04CF
Signing time: Thu 26 Mar 2026 05:00:41 +0000
Manifest this update: Thu 26 Mar 2026 05:00:41 +0000
Manifest next update: Fri 27 Mar 2026 05:00:41 +0000
Files and hashes: 1: dODVhfGshfVEks_JXh3OD8L3lw8.crl (hash: Gu+zFED9iK0O5QLWk096dw6oahpthiwi3adNAZYHxSo=)
2: iw2hZNABaxf3BqGSoH50zlpBmZo.roa (hash: FEmu0jxWn7X0gK1R2H3JsdW7Vd44llV6L5PVfKQuGIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:25:3f:25:de:c6:48:ef:0a:15:5c:10:21:a1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f
Validity
Not Before: Mar 26 05:00:41 2026 GMT
Not After : Mar 27 05:00:41 2026 GMT
Subject: CN=b64eee23d7c11b81c8d432e74be008ca736b13d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:99:ea:1b:1c:9f:3e:df:7d:40:00:f1:54:cb:
96:09:eb:6b:a0:aa:7d:82:28:d2:ba:fa:73:f9:9f:
e8:06:34:cb:45:d5:25:8b:ad:d8:cc:9b:58:91:8b:
fa:cd:09:cb:93:f9:62:26:ab:fb:26:db:9d:43:f1:
7b:d8:bc:e6:33:2b:de:c6:71:a9:2a:46:e4:47:1c:
cb:3b:d9:35:b5:6d:0e:9b:6f:be:34:a9:aa:f2:ab:
a8:03:b3:aa:06:3f:15:b6:7d:0f:1d:46:9c:47:2e:
70:72:0e:e7:ea:eb:31:78:52:0b:85:2c:56:52:e7:
55:0d:5b:8a:f7:07:2c:49:b9:43:f3:4a:13:bf:00:
84:89:96:2e:92:58:ef:52:2f:11:28:23:46:97:3e:
89:14:88:fe:02:7c:64:6f:ad:aa:5e:f3:58:75:71:
ef:1f:41:bf:d2:c3:47:88:52:51:e9:d3:99:0f:bc:
10:ed:6d:cc:8b:25:66:62:ea:f4:d3:f5:f5:5a:c1:
62:90:e0:b9:65:f5:b8:02:e6:2c:a2:70:58:fa:62:
af:b5:9c:94:00:03:a4:a5:7e:a9:0b:21:91:b7:bd:
1e:07:23:48:7d:87:b0:6a:53:fb:cf:d3:c9:a4:d8:
e0:94:eb:4b:55:80:f5:b7:57:a2:08:5d:64:e6:3a:
40:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4E:EE:23:D7:C1:1B:81:C8:D4:32:E7:4B:E0:08:CA:73:6B:13:D0
X509v3 Authority Key Identifier:
keyid:74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:96:93:15:6f:2a:af:a4:67:b8:e7:0e:a6:42:b0:01:4c:5a:
ae:da:33:48:2b:1b:2b:94:97:b3:37:c1:db:87:5c:45:61:02:
84:cb:95:c0:98:7d:c3:c3:ad:ff:fc:d2:7c:78:29:25:74:eb:
b4:22:d4:2f:3b:26:94:8c:4a:fd:c7:3b:cb:73:de:d8:fc:ce:
01:57:84:02:6b:ad:47:2e:ec:aa:be:0f:28:a5:d9:5b:5e:08:
4d:84:36:70:3d:fe:6e:b1:96:07:ee:ea:cf:b3:70:46:c0:8e:
1c:f6:76:8f:d0:be:12:64:26:6d:a0:a7:30:cc:0a:c7:8e:88:
61:be:54:27:57:5a:89:de:a4:52:36:dd:46:01:84:14:7c:25:
35:53:27:9f:a1:a1:6b:b2:ac:a9:e7:ce:c0:33:59:b9:cd:43:
ea:a8:26:23:c9:50:5e:14:15:8c:aa:d3:63:18:41:bd:13:87:
05:01:9c:3f:6b:e8:91:0e:35:74:28:92:a7:33:82:58:df:3d:
22:a9:e9:98:1f:73:a4:4b:23:bc:d2:01:3d:e6:15:ef:1b:9e:
0e:54:dd:fb:cb:0d:d1:0c:0b:bb:31:38:fa:39:21:dc:20:f6:
df:b3:b3:e4:9a:f9:72:2f:10:80:af:94:a1:2c:92:56:34:04:
2b:56:06:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:12:07 2026 by rpki-client