Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
File: ROzsULCd1G04TQgbUH0juv71HJw.mft (raw, json)
Hash identifier: DNYTex7q4y7vEV9Q2Oe4ugzEKGccICfPh9bxAyPsMps=
Subject key identifier: ED:54:C4:8E:0A:53:58:9C:18:EF:C2:76:D6:23:7C:B2:6C:70:5C:DB
Authority key identifier: 44:EC:EC:50:B0:9D:D4:6D:38:4D:08:1B:50:7D:23:BA:FE:F5:1C:9C
Certificate issuer: /CN=44ecec50b09dd46d384d081b507d23bafef51c9c
Certificate serial: 019D390A1FF8343F02C2BFB013AC897C3B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROzsULCd1G04TQgbUH0juv71HJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 10:00:57 +0000
Manifest this update: Sun 29 Mar 2026 10:00:57 +0000
Manifest next update: Mon 30 Mar 2026 10:00:57 +0000
Files and hashes: 1: ROzsULCd1G04TQgbUH0juv71HJw.crl (hash: 36OKDgQvo/BY/j03dlbd6FPvXE6nJNarb9+vshXPYTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROzsULCd1G04TQgbUH0juv71HJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:1f:f8:34:3f:02:c2:bf:b0:13:ac:89:7c:3b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ecec50b09dd46d384d081b507d23bafef51c9c
Validity
Not Before: Mar 29 10:00:57 2026 GMT
Not After : Mar 30 10:00:57 2026 GMT
Subject: CN=ed54c48e0a53589c18efc276d6237cb26c705cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:55:47:07:49:ab:ff:51:5b:e6:c8:09:b7:
36:90:b8:60:32:9e:a6:08:41:99:c7:f1:60:42:b4:
99:a4:2c:e8:95:d3:da:20:31:0d:8d:44:35:ae:02:
70:bd:8e:4a:94:c9:bd:91:fe:a8:19:0e:6b:c9:9a:
03:34:c4:65:1b:ae:37:30:ae:0e:aa:5a:22:e9:6c:
a9:03:cd:9a:ce:8c:08:9b:4c:bd:ba:b1:2c:a4:e2:
b5:7d:41:54:f3:3c:80:63:96:a4:f8:2a:31:fc:5c:
85:31:41:0a:26:6d:83:07:c7:be:af:28:77:5a:76:
81:d1:5b:96:bb:ef:85:07:d6:02:b7:ca:ce:fd:41:
d8:e2:be:30:12:4f:7d:12:d2:12:a1:e9:d6:86:e1:
12:4b:c3:34:81:f7:a5:1f:a0:d4:de:75:d9:68:c0:
ec:06:7b:20:31:12:cd:9f:63:49:35:66:51:2a:c0:
83:b9:bb:fb:ed:8b:8b:79:4e:f0:58:d3:6f:21:c3:
ef:fc:a7:e7:b3:78:ab:81:42:83:dd:13:84:c6:8a:
77:47:b2:3b:33:7e:89:34:50:6e:fc:04:cb:cb:f1:
b4:5d:b7:6b:fd:36:5c:3f:1c:63:df:1d:09:cc:1c:
77:7e:9c:ff:a4:f3:ef:b1:0d:26:1f:08:45:48:2f:
7b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:54:C4:8E:0A:53:58:9C:18:EF:C2:76:D6:23:7C:B2:6C:70:5C:DB
X509v3 Authority Key Identifier:
keyid:44:EC:EC:50:B0:9D:D4:6D:38:4D:08:1B:50:7D:23:BA:FE:F5:1C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROzsULCd1G04TQgbUH0juv71HJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1c:cb:82:eb:d5:53:e3:fe:a0:8a:28:74:9a:a4:e7:84:bf:
49:15:4a:b6:b0:96:11:21:74:4a:9d:a7:82:65:93:78:49:65:
de:20:7e:b1:fb:17:52:97:63:0a:8a:f6:9e:16:23:64:b2:73:
d1:81:70:5c:00:96:3d:63:40:81:5d:59:68:b1:11:ac:fb:4c:
c6:3e:70:0a:a4:fd:f7:0a:49:df:34:8d:25:67:83:8a:ac:1e:
8b:f6:e7:45:37:c1:a5:12:68:b1:d4:15:2a:14:10:6e:4f:a7:
a9:47:4f:7f:33:ce:b8:67:93:de:80:9c:4d:f4:6a:a1:ea:b7:
03:c1:6a:2b:c6:18:1d:6f:dc:b2:a8:d4:4e:46:0b:b1:96:a0:
8d:33:32:35:fe:27:f6:87:5b:13:f1:7a:1a:f2:b3:44:03:a2:
27:4e:7c:ea:71:4a:26:d7:27:7d:f2:2c:3e:51:f1:f3:0d:a6:
29:60:6f:13:04:3f:b7:29:af:c4:8b:da:58:70:bd:49:3a:56:
0c:f1:b7:d8:5c:64:10:ed:12:97:d9:24:e7:10:5a:95:af:b4:
e8:77:3c:81:45:14:f6:f8:61:ae:36:ad:ae:8b:af:f7:21:03:
2e:a6:55:a2:ad:bb:30:97:59:46:9a:2a:27:3a:b9:b4:f9:61:
2e:ad:87:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:31 2026 by rpki-client