Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.mft
File: p75X8mosEHsadWuDFxXr0HqH-5M.mft (raw, json)
Hash identifier: 2T1F6N1MZ6pzNaK5OeW8qYuMmy1mgn6R0cfSacSBVXc=
Subject key identifier: DE:DD:34:CE:55:D6:C3:40:F8:5F:C2:90:90:E3:FC:61:A8:74:91:1D
Authority key identifier: A7:BE:57:F2:6A:2C:10:7B:1A:75:6B:83:17:15:EB:D0:7A:87:FB:93
Certificate issuer: /CN=a7be57f26a2c107b1a756b831715ebd07a87fb93
Certificate serial: 019D37F715E6D53807C11251EA8FEEF57C29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p75X8mosEHsadWuDFxXr0HqH-5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.mft
Manifest number: 0214
Signing time: Sun 29 Mar 2026 05:00:33 +0000
Manifest this update: Sun 29 Mar 2026 05:00:33 +0000
Manifest next update: Mon 30 Mar 2026 05:00:33 +0000
Files and hashes: 1: cgFSUs0wn8U8Vfrh2F7juQoPnIk.roa (hash: pTDb3C/Qv0/neOWoRbgx+9OJwfcjnYBTppMtnfhxnt8=)
2: p75X8mosEHsadWuDFxXr0HqH-5M.crl (hash: 722kSz8goJs6GHKO3oH3f0vP2JheV/gHVvKsqWGLs9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/p75X8mosEHsadWuDFxXr0HqH-5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:15:e6:d5:38:07:c1:12:51:ea:8f:ee:f5:7c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7be57f26a2c107b1a756b831715ebd07a87fb93
Validity
Not Before: Mar 29 05:00:33 2026 GMT
Not After : Mar 30 05:00:33 2026 GMT
Subject: CN=dedd34ce55d6c340f85fc29090e3fc61a874911d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cd:02:37:d2:a8:d0:91:ae:57:04:4e:4a:89:
15:8a:7c:af:7b:f4:df:10:c3:a4:5d:8b:63:96:a8:
e5:89:cb:63:79:85:5a:32:b6:90:4a:cb:31:e8:f4:
9a:71:ce:0f:f9:2f:a8:82:b3:51:4a:f9:32:5b:8c:
0f:ac:e8:38:8d:0e:5f:b3:c8:e8:ed:5e:5a:43:13:
f8:f3:20:84:41:a2:a9:0d:3f:87:46:9e:01:8c:80:
60:f7:13:37:53:5b:f0:69:7a:dd:1d:88:11:5c:57:
ae:8a:1b:a3:dc:f5:2c:4a:80:42:fc:30:6f:ea:ef:
e9:75:b2:f1:63:c7:d0:94:67:2d:6a:8e:98:ac:17:
aa:e1:b8:4a:d0:5e:68:58:78:20:ae:e3:71:f4:2d:
06:9d:0c:75:dd:e6:67:cb:5b:35:71:4c:41:b3:3e:
20:3c:60:a9:8f:cb:41:8d:d1:67:d0:07:9f:66:22:
b3:59:53:41:81:25:39:d8:fd:e4:24:a0:3a:09:aa:
f2:d6:4d:fb:58:e1:fc:77:18:d6:73:04:e5:0c:48:
8b:9f:c2:ca:9e:71:4f:c0:7a:e4:21:41:f8:62:ca:
e2:2c:3e:39:be:4a:c7:35:73:97:e6:2c:e7:84:e4:
32:a3:bb:2a:ba:01:ba:63:0c:09:38:dc:13:d1:f2:
74:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DD:34:CE:55:D6:C3:40:F8:5F:C2:90:90:E3:FC:61:A8:74:91:1D
X509v3 Authority Key Identifier:
keyid:A7:BE:57:F2:6A:2C:10:7B:1A:75:6B:83:17:15:EB:D0:7A:87:FB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p75X8mosEHsadWuDFxXr0HqH-5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/270d55-8fec-4d35-8282-d3fc91a2dc89/1/p75X8mosEHsadWuDFxXr0HqH-5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3e:95:e1:b0:5a:9c:f1:20:63:69:45:eb:cb:37:e5:36:13:
5a:ca:46:d5:6a:82:ee:fb:47:be:b1:0d:33:9b:80:01:ac:74:
bc:2e:e7:44:17:27:73:ee:35:ad:70:c0:e8:30:b8:be:e1:5f:
f9:2f:79:8b:58:0b:93:81:52:60:80:52:56:db:6d:d1:3c:41:
39:86:0f:86:67:e0:91:42:16:f1:70:18:20:3b:7f:70:18:b9:
6c:37:bf:a7:12:83:a0:a2:30:ae:c4:db:ae:38:15:72:11:38:
97:7b:5c:30:d6:d3:70:1c:73:85:ab:81:7a:50:58:e9:aa:ba:
80:8f:3e:94:77:02:1c:ed:16:5b:be:7b:ca:13:1a:66:2a:a6:
98:17:2b:d5:e4:d7:38:bc:00:e3:39:59:50:b9:bb:94:be:7e:
8e:fa:50:be:51:9f:67:1b:1c:39:1f:23:d5:4d:c0:10:92:c0:
dc:ef:c5:f1:33:0f:9c:9c:d2:4f:f1:b6:e4:38:15:cb:d5:03:
e7:c1:09:00:f2:5d:79:ab:40:95:64:c1:58:91:e2:9c:b6:cb:
29:fa:a6:35:c7:d7:2c:3f:f8:43:3a:80:9a:8b:67:ec:98:c2:
cf:7d:68:c6:de:b8:cc:80:48:64:70:c2:28:1d:e7:5b:03:cc:
89:b3:6f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:54 2026 by rpki-client