Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
File: edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft (raw, json)
Hash identifier: rYm9/A/YRvdamGfI9f1K2WVIo99YWFMwF/KIoaaMjZ4=
Subject key identifier: B2:0F:30:F2:50:F3:AC:9F:D2:A1:CB:1E:73:44:46:15:94:99:CF:00
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Certificate issuer: /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial: 019CE9A58404462475B0D24359E81707C83D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
Manifest number: 0F8B
Signing time: Sat 14 Mar 2026 00:01:04 +0000
Manifest this update: Sat 14 Mar 2026 00:01:04 +0000
Manifest next update: Sun 15 Mar 2026 00:01:04 +0000
Files and hashes: 1: 8x6YocXhEAE4EUV764wUI2PKiKU.roa (hash: yeyp7+DYbQfuSd5MS8n2WSRAshm6pVInjHRluL8iOew=)
2: a_FCKCt6dnU7F2M3SMQI1J1wlrw.roa (hash: AtVF3QXcvO4VESZ6rn9J2bX+Ej+cAO1z0o2Qbw21J8E=)
3: edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl (hash: r1PcbWn4Q5ik6MkDrhFg1MBUw/8TiWkrIsGHnwXIzwQ=)
4: oG6E9ZToy7RTlQOkPq4zuV7XG0U.roa (hash: 2JYfuKBfp+nWk/czqBEKKIWfjScVuKeSQovGMXxQmwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e9:a5:84:04:46:24:75:b0:d2:43:59:e8:17:07:c8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Validity
Not Before: Mar 14 00:01:04 2026 GMT
Not After : Mar 15 00:01:04 2026 GMT
Subject: CN=b20f30f250f3ac9fd2a1cb1e734446159499cf00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:92:57:70:9b:1f:69:c8:79:f1:69:87:1d:
6c:ea:76:0a:d8:cb:58:bb:2f:9b:a9:86:df:51:b6:
e1:b0:38:04:82:a7:ce:ca:d9:11:10:df:10:94:8d:
2b:fe:16:9c:4d:e0:cf:21:83:6b:f0:88:02:ed:fb:
11:c2:0c:f6:1e:19:93:4b:38:12:10:2d:b1:35:c1:
b9:df:21:fc:f0:62:5f:04:79:44:a2:2d:15:9b:5e:
ab:40:4f:98:40:0f:f2:3a:82:c5:3a:f5:0f:db:62:
53:ef:8b:28:d5:fe:cc:76:8e:60:9d:ca:d4:d8:e9:
5d:43:b1:d7:3a:55:2a:c9:69:f8:e5:8a:48:a5:55:
b0:e1:4f:96:63:b5:c9:4b:ef:d2:06:ec:89:3c:84:
82:62:5b:66:d7:e9:a5:82:70:e5:d5:c0:2d:ce:4e:
c9:1d:89:28:0a:db:a0:40:77:fa:2c:03:c6:99:e9:
8a:b4:07:31:c9:db:d5:65:0f:1b:f2:10:ad:ee:a2:
d0:8d:a6:c2:ff:2b:4f:2e:40:10:1c:0d:f8:30:c1:
12:b9:76:44:eb:2f:61:db:76:48:ee:8c:ef:f8:a8:
40:9f:23:b1:39:41:6f:45:f2:27:3a:23:88:e1:e4:
09:31:06:0f:84:18:8f:6a:27:88:c0:18:fc:95:1c:
13:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0F:30:F2:50:F3:AC:9F:D2:A1:CB:1E:73:44:46:15:94:99:CF:00
X509v3 Authority Key Identifier:
keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:a6:5b:42:87:75:3d:82:64:07:9b:4c:b7:f5:eb:16:fb:f4:
eb:40:93:64:5d:c5:8d:1d:05:85:8e:aa:7d:65:27:cd:b2:71:
cc:9c:45:d7:98:58:20:52:de:56:ca:18:e1:8e:62:4a:01:cc:
a6:29:56:c4:5a:0e:30:fa:74:b1:5c:72:75:40:69:de:05:01:
d0:b2:14:1e:a9:f0:4c:48:7c:ed:58:fb:24:4d:83:26:60:cd:
fc:b7:8c:a1:34:4c:30:e7:c7:ef:84:48:85:f9:90:39:67:eb:
75:86:5a:50:bf:d4:99:9a:ac:1d:85:28:6f:e5:77:19:85:a3:
b3:47:25:0b:83:f7:46:4e:c2:a8:a2:8f:8d:f9:73:fc:2f:e9:
b6:1f:48:2c:11:e1:7e:21:25:90:5c:1a:7f:d6:99:95:c0:00:
8f:55:9f:02:15:62:d3:0f:36:b4:83:4c:f1:68:5e:9e:a0:b5:
90:0e:14:e0:26:36:af:ca:e7:ea:89:ad:a8:f6:30:01:97:b1:
dc:1e:3d:4e:55:68:0d:e7:d9:c6:20:83:dd:5e:27:d5:2d:35:
38:4f:c7:58:30:c8:42:c1:a9:85:3a:6c:b6:ed:21:ab:8d:13:
eb:4e:ea:be:07:fd:ff:53:8b:06:d9:45:8e:c6:c8:96:98:89:
9f:eb:d0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 05:19:16 2026 by rpki-client