Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
File: feY3584h1skbVKBojiD5JBYiIjc.mft (raw, json)
Hash identifier: jh3FDR39+2gl5AwpFn4hmpdKsyr5LegTOwKhqTLGn70=
Subject key identifier: 52:7D:DB:B5:DC:CB:C2:57:91:E5:61:EE:B3:31:22:37:D6:88:AE:E8
Authority key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
Certificate issuer: /CN=7de637e7ce21d6c91b54a0688e20f92416222237
Certificate serial: 019D3940D0E8AAAD2576EC4887F0E98AB2DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
Manifest number: 12F2
Signing time: Sun 29 Mar 2026 11:00:42 +0000
Manifest this update: Sun 29 Mar 2026 11:00:42 +0000
Manifest next update: Mon 30 Mar 2026 11:00:42 +0000
Files and hashes: 1: 1-PeFhmqOuGLWhYL6e4WamiqcSm8.roa (hash: D5OapCvUQLtel5Rjh+LrTfB4vqxFkS0kdGHkxYpTPSk=)
2: feY3584h1skbVKBojiD5JBYiIjc.crl (hash: 0qv0Ssl1nC5168olipxwvAWswSkfhiWf+i6S/TtnVZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:d0:e8:aa:ad:25:76:ec:48:87:f0:e9:8a:b2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de637e7ce21d6c91b54a0688e20f92416222237
Validity
Not Before: Mar 29 11:00:42 2026 GMT
Not After : Mar 30 11:00:42 2026 GMT
Subject: CN=527ddbb5dccbc25791e561eeb3312237d688aee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:d2:10:34:1d:40:d8:13:12:48:a7:33:ee:
81:db:c9:47:92:a1:59:a0:18:1a:e9:c4:ed:97:44:
9f:89:ba:17:81:b5:73:b2:28:a4:91:9d:62:74:31:
eb:9d:7c:55:77:d9:ce:dc:2f:ac:f6:6c:53:72:63:
c7:7a:8b:6f:1a:29:ac:70:ac:e7:eb:7d:49:e6:32:
d7:3a:43:f6:57:3c:d5:24:7a:ba:6d:0a:96:9e:af:
6e:ab:f1:56:70:ac:3a:2c:ea:7d:83:83:9e:9f:15:
53:ae:58:e0:55:22:bb:b1:c0:ce:45:80:b3:29:fc:
2c:e5:e7:bf:1f:42:1e:ed:7c:8f:6c:3e:bc:88:6d:
2c:a3:a3:86:12:67:9b:d1:f5:dc:dc:2f:3a:28:d4:
c6:89:71:52:b6:7a:33:bb:16:9e:26:a4:d9:ca:24:
40:ef:12:39:66:82:91:e4:41:1e:cc:3b:86:6a:c8:
97:26:d2:51:65:aa:66:46:b2:7b:5a:15:d8:60:fa:
d1:82:33:11:cb:28:42:b6:88:13:d3:f5:5f:3e:e8:
e6:8d:49:be:6f:a1:9f:20:a7:c3:75:01:50:32:e4:
c0:70:74:4c:11:7a:a4:2c:98:7b:86:9b:c8:e0:b2:
a4:b3:8e:64:0e:1c:af:6c:b7:8e:4e:7e:87:be:82:
8c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7D:DB:B5:DC:CB:C2:57:91:E5:61:EE:B3:31:22:37:D6:88:AE:E8
X509v3 Authority Key Identifier:
keyid:7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:63:c1:2c:85:7f:b6:8a:09:bb:b2:51:e5:5d:56:28:a9:21:
f6:40:cb:be:94:2d:71:fc:7a:94:98:b1:62:5d:f1:e8:a6:04:
60:29:b0:61:55:c7:6b:7a:2c:13:fa:3e:d7:fe:8e:d7:8e:d7:
0d:8e:41:fd:7d:7b:46:b7:6b:3d:29:ee:31:fc:84:f2:96:66:
0f:b9:65:88:e0:b0:8f:71:ef:f3:41:f7:b9:d8:02:d2:8a:11:
bb:c3:cd:77:b9:1d:1f:13:40:d1:87:77:d7:fe:84:9f:63:6e:
15:48:b7:7d:11:c3:9e:9c:32:29:7e:86:eb:0e:6f:0c:da:c5:
18:b4:ab:95:5e:60:74:58:06:e1:75:bc:1f:58:88:56:06:e3:
cd:79:b5:0d:67:ec:b0:fe:ec:ce:fa:f3:bf:44:57:57:c3:22:
02:9c:00:0a:db:41:a6:1b:af:44:d3:de:87:fa:cd:4d:99:85:
80:eb:b2:2c:e7:87:c2:70:7a:93:84:f1:55:4f:4b:34:97:59:
af:cf:6c:0d:eb:2a:fd:cd:9f:81:d2:81:4a:0c:69:c6:4c:04:
3d:08:23:b7:da:7b:c4:23:f4:d1:01:82:7f:11:ea:15:37:75:
8c:28:7d:54:6c:93:c7:ab:8c:04:c0:bd:1d:9b:d6:c5:98:a1:
15:07:70:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:56 2026 by rpki-client