Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft
File: rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft (raw, json)
Hash identifier: Vi8cEUFoqIHy0A0EeW5LMTYf7XnbFQEkPnt+A9llDU8=
Subject key identifier: B0:E5:6B:98:07:05:47:50:24:4C:22:45:20:C2:4E:AE:52:D2:2C:BF
Authority key identifier: AD:D3:EE:C3:31:B7:02:A2:06:B5:4D:FE:90:63:B8:C1:7A:42:B8:1C
Certificate issuer: /CN=add3eec331b702a206b54dfe9063b8c17a42b81c
Certificate serial: 019DDD9EF834AF65951B68031AC3C37008C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdPuwzG3AqIGtU3-kGO4wXpCuBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft
Manifest number: 2C
Signing time: Thu 30 Apr 2026 09:01:16 +0000
Manifest this update: Thu 30 Apr 2026 09:01:16 +0000
Manifest next update: Fri 01 May 2026 09:01:16 +0000
Files and hashes: 1: WgFjeIjodHf0tIFJwgd7qL6VzDY.roa (hash: SbLcaGFtR51gDtKvy7+lV/tvtr//sjAXrktSn3Oq23Q=)
2: rdPuwzG3AqIGtU3-kGO4wXpCuBw.crl (hash: YG4//tRQ6qsIAdxJrqekj7Qf8HJQubQp3dHl5ltQngg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdPuwzG3AqIGtU3-kGO4wXpCuBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 09:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:9e:f8:34:af:65:95:1b:68:03:1a:c3:c3:70:08:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add3eec331b702a206b54dfe9063b8c17a42b81c
Validity
Not Before: Apr 30 09:01:16 2026 GMT
Not After : May 1 09:01:16 2026 GMT
Subject: CN=b0e56b9807054750244c224520c24eae52d22cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:84:fb:4d:6a:b9:f6:7b:86:06:57:c4:11:91:
23:1e:3c:91:9e:10:42:97:a9:ae:74:28:46:67:48:
d7:da:ee:ae:2a:35:53:aa:d1:8c:65:b5:97:43:e5:
9e:0b:00:8b:f2:e4:32:cf:b0:15:f4:9b:5e:c3:d8:
bb:ec:c6:6e:56:8c:f9:15:58:6a:d6:98:e6:c4:c5:
52:77:47:34:87:55:90:2d:da:41:e5:a8:7d:97:77:
89:5e:9e:b8:72:da:0e:29:df:4a:23:65:7e:7d:8c:
1e:ad:5e:02:08:42:1e:50:cb:4d:25:bb:1e:5d:e5:
27:8a:15:1e:bd:09:6e:44:c8:fe:cb:8b:e3:82:50:
af:c6:85:53:5b:7d:ef:0e:97:b3:34:5b:26:da:5f:
d1:1a:77:02:c3:d5:bc:e4:ad:a1:c6:a8:b1:09:b5:
45:df:2f:8e:d1:a6:fa:5b:1e:74:71:a1:cb:f4:ab:
f8:18:82:27:46:96:7e:2c:15:06:25:05:c5:64:90:
b5:57:c7:92:4d:15:f9:7e:3b:65:85:45:e6:38:7d:
f3:c0:78:14:1c:aa:67:95:6c:df:b4:e7:a6:79:e4:
63:24:a7:87:94:dd:2f:2c:62:68:7a:71:a0:59:95:
8f:ae:ee:ae:b6:cd:fc:69:10:2a:9f:7d:ac:fb:43:
66:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E5:6B:98:07:05:47:50:24:4C:22:45:20:C2:4E:AE:52:D2:2C:BF
X509v3 Authority Key Identifier:
keyid:AD:D3:EE:C3:31:B7:02:A2:06:B5:4D:FE:90:63:B8:C1:7A:42:B8:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdPuwzG3AqIGtU3-kGO4wXpCuBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e2:6d:a0:d5:87:7d:ae:2b:d5:64:70:8f:5f:06:d6:5d:e6:
05:45:e9:66:cf:85:4a:0a:c3:36:45:ba:2a:3b:4f:e4:53:04:
48:27:44:ff:09:97:eb:35:b8:79:58:bb:c3:36:d4:4f:68:5c:
c6:3e:2b:e2:30:0c:55:50:b9:4b:27:05:4c:d1:b9:28:32:3e:
fd:b9:b1:f5:8f:9d:6e:30:50:c9:d2:3e:f0:08:0a:bc:a2:7a:
1d:e1:e1:2a:34:d3:c5:fb:2f:df:b6:86:86:fc:27:1f:51:36:
76:b8:a0:f3:44:6f:35:d6:8d:68:42:76:20:96:ef:d7:69:b1:
47:54:00:aa:0f:94:0d:39:9b:46:e4:ca:12:0f:f0:22:29:d0:
ed:86:16:c1:c0:09:fb:15:15:36:7c:ab:b0:5c:e6:ee:0d:30:
f9:2b:7c:73:7e:84:6e:f5:29:bd:a2:0a:94:e1:bf:a8:3d:36:
bd:61:ce:d3:f3:d9:a5:f2:d0:00:5a:76:c3:52:21:48:0b:46:
f1:f4:c9:34:27:4e:4a:64:78:dd:ce:b4:68:a1:82:d2:82:9d:
ca:7e:8a:0b:b0:31:6f:2e:d6:e3:d8:e6:7a:56:45:20:82:a0:
7a:0d:2d:83:3e:80:bc:d9:f2:91:ce:02:a8:32:b7:be:6c:1f:
4c:2f:85:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 16:27:27 2026 by rpki-client