Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft
File: V4DOZAV5R263qnPBnLdOvt_daCs.mft (raw, json)
Hash identifier: ESt+lor+5tKjBEDqL3lgfdZOjF9kKbgZCMnnOsDqqbs=
Subject key identifier: 09:EC:A4:5A:3D:69:79:6D:93:45:AD:02:42:3E:5C:74:AF:E5:67:7C
Authority key identifier: 57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B
Certificate issuer: /CN=5780ce640579476eb7aa73c19cb74ebedfdd682b
Certificate serial: 019D3977AEA6256BEBDAE4DC0B7C21B64D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft
Manifest number: 0FC3
Signing time: Sun 29 Mar 2026 12:00:37 +0000
Manifest this update: Sun 29 Mar 2026 12:00:37 +0000
Manifest next update: Mon 30 Mar 2026 12:00:37 +0000
Files and hashes: 1: RDCVzu3arsvwfYZ10d3OBxjdU-Q.roa (hash: BRLaihFLCVYFLpw45+cqT3ozkSzNaiRjjdbnkvsoEfo=)
2: V4DOZAV5R263qnPBnLdOvt_daCs.crl (hash: McZRkqJqciA1hFY/JmkhWXRaNQEhO0s5N+37gAIJRzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:ae:a6:25:6b:eb:da:e4:dc:0b:7c:21:b6:4d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5780ce640579476eb7aa73c19cb74ebedfdd682b
Validity
Not Before: Mar 29 12:00:37 2026 GMT
Not After : Mar 30 12:00:37 2026 GMT
Subject: CN=09eca45a3d69796d9345ad02423e5c74afe5677c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5f:56:07:fd:1f:3b:f4:96:ab:5b:bd:7a:38:
a3:09:f3:ec:4d:36:93:07:94:1a:53:c6:21:36:b2:
f7:9d:00:6f:36:b0:ce:09:83:fd:99:ca:0e:a3:ed:
76:d6:40:89:64:00:88:d4:05:e2:58:03:fc:f1:62:
00:41:f6:02:36:64:09:ec:01:9d:20:f3:88:ce:53:
07:c8:3e:c7:a5:ae:15:32:9b:a1:c4:85:43:4c:67:
88:dc:87:50:aa:21:ce:d9:88:74:28:51:6c:90:36:
98:27:50:10:66:9b:46:cd:07:bf:f8:4e:f1:36:42:
b3:e5:79:11:0e:d3:dd:13:fe:7c:a5:f4:18:f1:92:
3a:c7:c0:92:e8:b5:e0:2f:02:b2:86:c6:33:4c:97:
11:78:b6:a3:e5:84:9f:82:69:a5:03:53:30:3e:76:
00:9d:d2:ef:ef:fd:dd:3f:ca:9e:14:d2:7d:f9:65:
fb:98:d6:68:02:b2:41:a5:61:e4:8b:38:87:f3:5e:
b5:f4:ca:0e:38:37:f6:5b:c7:f6:cd:9e:8a:d6:28:
bf:85:d2:5c:3f:72:f9:43:ed:b1:27:46:02:97:ed:
43:69:ea:d7:e5:dd:be:15:2e:f4:57:da:7d:3f:b6:
15:dc:5c:f0:47:8c:57:91:4f:a2:02:37:f6:ad:ec:
eb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EC:A4:5A:3D:69:79:6D:93:45:AD:02:42:3E:5C:74:AF:E5:67:7C
X509v3 Authority Key Identifier:
keyid:57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1f:9e:45:c4:69:76:d9:d0:ef:89:38:70:dd:9b:53:f7:b6:
38:01:75:ff:de:d8:e8:6b:3e:6b:5f:98:39:0a:9b:8d:f7:d1:
2b:cb:f0:12:b4:08:75:a3:c9:e6:d7:05:7b:c6:c1:19:ed:bb:
93:92:fc:a8:5d:91:3e:f5:52:3f:75:85:eb:86:00:77:c6:b8:
78:b0:5a:57:aa:55:0f:9c:64:0d:dc:9d:9f:51:af:f9:d4:ed:
99:cc:7a:ef:9d:1a:ce:e5:bd:1d:e2:94:60:f6:8e:ef:55:c3:
06:31:68:cd:18:54:65:ae:b1:05:e8:c7:47:79:f5:6d:a0:a6:
2a:dc:59:21:ff:48:9d:34:6a:4a:b2:d2:0b:2a:33:b0:10:c8:
ad:80:13:98:80:30:c3:39:3e:5a:d6:7e:be:01:cf:bd:4a:9d:
04:0c:d6:6c:68:82:7c:9d:d1:d0:6a:0a:8f:71:34:2f:90:2c:
d4:d2:99:06:0c:b2:bc:71:5e:a3:18:39:ee:32:d3:e9:93:7d:
84:c2:72:6c:73:a9:9b:4d:23:37:72:b5:7d:ae:1d:61:9a:20:
b1:c4:64:52:25:e0:f2:54:93:1c:e7:21:1c:4e:b9:c0:e7:32:
2e:21:05:fa:17:d6:4b:30:01:9e:17:ca:9c:97:3a:80:17:71:
dc:ed:e5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:06 2026 by rpki-client