Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
File: DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft (raw, json)
Hash identifier: n29UcuFYKspDnnbNx69iewU4SSeSt3HUXNQCUw21dOM=
Subject key identifier: EA:59:1C:85:D7:F1:AD:03:6A:AB:57:CE:50:D7:D0:95:11:9D:AB:FE
Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
Certificate issuer: /CN=0c4579a4028829d37acac65f66c056063251e57e
Certificate serial: 019D37894C5B3253946E16F73D1F0DC4E3DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
Manifest number: 0FBE
Signing time: Sun 29 Mar 2026 03:00:37 +0000
Manifest this update: Sun 29 Mar 2026 03:00:37 +0000
Manifest next update: Mon 30 Mar 2026 03:00:37 +0000
Files and hashes: 1: Bw0LYZeYa4YiK1Zwav9M2CIs7yc.roa (hash: Og9dej6zdeYfUEuKlPyDfibsivF+zi1xumhqKFbtAHA=)
2: DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl (hash: ZmCXdwaOWgHeravJsavK3uw6rbP9ZDYejbRKqo9LK2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:4c:5b:32:53:94:6e:16:f7:3d:1f:0d:c4:e3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e
Validity
Not Before: Mar 29 03:00:37 2026 GMT
Not After : Mar 30 03:00:37 2026 GMT
Subject: CN=ea591c85d7f1ad036aab57ce50d7d095119dabfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:51:0c:43:04:ea:7f:fe:01:b7:e4:92:1d:
2e:d3:e3:3f:b7:fb:0c:0c:b2:d9:ae:30:f7:fc:ae:
fb:86:19:43:b2:3b:ad:a6:cd:43:29:e1:f2:a7:42:
57:1d:47:e9:bc:8d:c3:9b:03:ba:74:57:d2:d7:0b:
f8:3d:2b:cf:56:7e:74:1d:f8:ec:c1:f9:6b:46:9e:
1c:9e:38:c8:b7:c4:50:cc:c0:11:9d:da:b0:2e:be:
9e:ab:68:c2:7a:77:be:c0:8b:11:f9:ed:f2:1e:b9:
5c:bc:52:cd:3f:e6:ca:9f:df:b7:75:2b:56:42:64:
ec:7e:44:87:d5:ce:b4:c1:e8:ed:6d:94:b5:d6:b5:
da:d2:38:5f:7a:d5:6a:cd:bb:00:62:52:3e:2b:17:
94:53:fc:5a:be:65:33:90:19:6f:4f:b9:0d:5c:cb:
b1:d7:e2:50:00:bf:f3:5a:44:8c:d8:87:89:5a:29:
3a:93:7b:01:fd:0f:51:2d:22:d5:ce:cf:1b:52:e7:
0c:06:a1:d5:d1:b3:f2:1c:62:4e:08:7a:0b:c4:d9:
c4:35:60:ee:15:da:f3:77:12:95:e4:be:01:03:40:
07:f6:da:3e:13:46:30:1e:46:15:f7:77:d7:b8:5a:
42:4e:18:10:ff:c1:61:45:96:19:97:60:56:03:87:
1a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:59:1C:85:D7:F1:AD:03:6A:AB:57:CE:50:D7:D0:95:11:9D:AB:FE
X509v3 Authority Key Identifier:
keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:88:3b:a0:7b:5b:2a:79:88:e1:77:03:91:46:b8:c9:a3:5a:
1b:b1:62:dd:da:6d:7f:0e:a1:c3:e1:01:a6:e2:5c:3b:86:2c:
49:cd:e5:94:eb:f8:0d:9a:ce:e2:ab:64:df:d7:17:a8:ea:a8:
46:09:3f:5b:94:74:0d:35:a1:71:bd:88:88:f1:82:53:ac:e5:
2d:92:a7:ec:8a:21:43:7e:d6:dc:e3:ca:ea:92:71:be:e8:4f:
37:a5:0c:17:2e:f7:93:25:93:96:4c:5b:6f:2c:17:f9:cb:d6:
65:b3:b2:55:e7:68:6a:24:37:fb:8e:58:f7:62:99:7a:25:4e:
60:c6:76:43:10:02:a5:41:b0:cf:d7:84:76:ad:46:78:dd:fe:
c0:ce:68:ff:84:7c:de:f3:ec:02:aa:c5:ee:7b:33:81:71:ef:
af:cf:8e:e6:9c:41:28:0a:ff:81:4d:aa:e0:96:17:35:0d:84:
50:a0:51:59:dc:35:c5:5a:77:3c:88:6d:64:1a:fc:18:b9:52:
35:be:7f:0e:b1:8e:b7:9b:c7:f9:cd:d4:3c:2e:bb:dd:11:42:
91:60:b1:7d:dd:7c:25:6b:e3:f8:17:dd:e7:29:0e:4c:89:aa:
6a:4c:a9:fc:e6:fc:71:30:c6:7e:dc:64:6d:c3:42:e6:6f:92:
ad:d6:81:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:37 2026 by rpki-client