Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
File: edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft (raw, json)
Hash identifier: DgNZq9MX6M8WxLsjUep4/+IQnkQXK8MVLu/5431cIoE=
Subject key identifier: D0:63:38:1C:B9:65:9F:55:60:57:8F:16:9E:1D:26:08:4B:EA:99:CB
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Certificate issuer: /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial: 019DD91D17F68548BDF834E8E5041DCE6700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
Manifest number: 1007
Signing time: Wed 29 Apr 2026 12:00:55 +0000
Manifest this update: Wed 29 Apr 2026 12:00:55 +0000
Manifest next update: Thu 30 Apr 2026 12:00:55 +0000
Files and hashes: 1: 8x6YocXhEAE4EUV764wUI2PKiKU.roa (hash: yeyp7+DYbQfuSd5MS8n2WSRAshm6pVInjHRluL8iOew=)
2: a_FCKCt6dnU7F2M3SMQI1J1wlrw.roa (hash: AtVF3QXcvO4VESZ6rn9J2bX+Ej+cAO1z0o2Qbw21J8E=)
3: edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl (hash: 3rZGBJ9ryCkC0HoC/R55Tqax/Ua25jA8GI3u9vu22IU=)
4: oG6E9ZToy7RTlQOkPq4zuV7XG0U.roa (hash: 2JYfuKBfp+nWk/czqBEKKIWfjScVuKeSQovGMXxQmwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:1d:17:f6:85:48:bd:f8:34:e8:e5:04:1d:ce:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Validity
Not Before: Apr 29 12:00:55 2026 GMT
Not After : Apr 30 12:00:55 2026 GMT
Subject: CN=d063381cb9659f5560578f169e1d26084bea99cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:17:80:c0:40:c3:12:9e:19:c6:21:e9:c1:
95:71:7e:bd:ae:67:73:25:24:21:57:2c:18:a8:b6:
ef:d6:6b:71:7b:16:a9:01:12:ae:0f:75:c6:f1:02:
f0:39:20:1b:10:a2:1c:c2:1e:55:8f:fe:11:ab:78:
f2:0b:f4:43:fe:04:bf:5f:a4:76:d2:09:bf:3e:bc:
e4:b6:55:cd:85:3a:bb:e9:ff:f7:23:c1:02:ca:3a:
a6:11:e3:d5:53:65:18:a6:aa:3c:48:d4:b4:0b:fa:
cd:b0:1a:00:aa:5c:26:c3:4a:15:c9:ac:8b:f1:f2:
e8:db:e5:30:95:44:24:d0:63:dc:59:c2:69:9a:c3:
15:f8:5c:bc:2a:51:13:a5:c9:da:b5:8f:bc:4c:b8:
3a:42:c7:da:7c:29:04:3c:04:c6:bc:ce:6b:dd:b4:
b1:2b:fd:ad:b0:5a:54:0e:0c:35:f4:9a:55:8b:4a:
5a:e8:22:47:77:90:b2:fc:52:88:3c:cb:ce:65:48:
41:60:d6:dc:eb:a0:f3:8e:c1:c7:77:f1:99:84:77:
bd:d8:6a:5e:b7:a8:d4:d0:7f:30:d0:81:f9:88:2f:
46:a1:5e:c6:0d:33:3b:08:cf:5d:9e:62:80:cd:a4:
f0:c5:89:3a:81:e3:53:91:2e:62:e8:81:bf:b9:72:
63:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:63:38:1C:B9:65:9F:55:60:57:8F:16:9E:1D:26:08:4B:EA:99:CB
X509v3 Authority Key Identifier:
keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d2:da:84:c5:c3:61:65:63:5f:45:09:11:56:7a:a2:bd:96:
d6:54:c3:61:32:4a:42:30:e7:70:4c:59:9a:04:fa:64:b1:da:
da:51:9a:00:d9:ba:68:43:6c:51:fb:69:0d:1d:d2:9e:f2:26:
62:ef:df:08:1b:05:96:2f:88:25:26:13:a9:36:b8:83:66:aa:
88:e6:0c:52:81:35:b0:da:f0:28:e1:41:6f:4c:1a:7f:87:c7:
89:fb:1a:5d:6e:ec:53:c7:5a:90:21:ff:92:4a:05:5b:3f:0e:
7b:3e:4b:9d:d5:e6:64:11:f2:0d:a1:89:aa:0d:43:f9:0f:9c:
92:92:17:9d:fe:5d:3c:20:2c:8c:01:71:70:d4:ca:87:20:58:
9a:cc:ec:1f:26:52:d6:f0:ad:c1:99:0a:78:5a:5c:a0:bf:c5:
aa:e4:71:1a:11:cf:01:59:6f:c6:3e:5d:17:43:3e:e7:bf:03:
b1:f6:21:6b:49:70:b3:fd:0a:33:32:d2:7b:2f:af:f3:92:b5:
0f:b0:dc:6b:f3:1f:3c:e4:08:ac:27:9e:fe:aa:f6:aa:52:ee:
a5:12:e4:2a:d0:48:e9:89:63:00:18:5a:4e:e7:3a:5a:cb:0f:
1d:07:e4:ae:b9:d0:a9:a9:a8:18:24:6a:6a:5f:56:47:84:e7:
5b:e1:60:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 21:16:44 2026 by rpki-client