Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
File: 240I7cQ5OoZxKW-OrLvs-U12Vio.mft (raw, json)
Hash identifier: +BKunSLH7MPmQaOIabT/lcouG4JXyzkwiI3727xpYTk=
Subject key identifier: 98:87:DC:2D:32:0B:B9:F7:A8:B0:C9:F5:C2:A0:87:10:95:24:99:36
Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Certificate serial: 019D389C09FF6623B016943E7D1FA8D2A62E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
Manifest number: 1568
Signing time: Sun 29 Mar 2026 08:00:43 +0000
Manifest this update: Sun 29 Mar 2026 08:00:43 +0000
Manifest next update: Mon 30 Mar 2026 08:00:43 +0000
Files and hashes: 1: 1-r4Lv2Rmvz8PS3uEyqLHDg79e6o.roa (hash: Ynnh/ie5fd1c8AWIp3/nOFWKmHgGwnafc2HeQlk9EJ8=)
2: 240I7cQ5OoZxKW-OrLvs-U12Vio.crl (hash: a7Y60Gy4Sdjry2hd6SOwhk2jGXEvs+/L8oW8kP3KAd0=)
3: w3Lux0gfeLL5j0FE93SK7EkO-xA.roa (hash: /yS1rew79qv077Dug+2vMb4pmqIyVizWzCEA9rbz10o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:09:ff:66:23:b0:16:94:3e:7d:1f:a8:d2:a6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Validity
Not Before: Mar 29 08:00:43 2026 GMT
Not After : Mar 30 08:00:43 2026 GMT
Subject: CN=9887dc2d320bb9f7a8b0c9f5c2a0871095249936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:54:d9:14:a6:97:a6:3f:ea:b6:61:7d:3e:a7:
c7:4e:9f:9f:e9:75:e7:99:20:6c:c3:32:51:0e:b5:
1c:da:03:00:07:6b:8f:f7:ee:9a:d0:31:2a:74:bf:
77:a6:71:18:03:f6:71:6a:87:da:65:70:4a:b2:d8:
60:7d:56:ad:0c:81:1a:24:46:7c:86:a8:21:83:d4:
dd:4f:8c:44:14:59:5d:4c:8c:60:fc:b5:4a:d4:27:
e3:7c:c6:c6:86:cf:48:96:dc:32:f4:47:78:b3:69:
c6:8f:b1:fc:d4:05:15:20:6e:b8:40:df:b3:54:6c:
fc:10:3b:00:a5:50:37:86:a5:db:84:f3:6f:37:ac:
f4:99:30:d2:83:a2:23:27:e8:80:9e:47:3c:99:43:
f1:8c:d4:c3:b5:cd:f2:f2:a0:8a:19:19:69:e7:74:
b7:68:2d:21:15:6f:4e:89:ef:89:ef:d5:3d:6f:1d:
f1:cc:db:9a:53:e6:7d:04:84:62:6b:e8:8f:59:e7:
33:a8:63:8d:9b:e7:2c:35:2b:46:66:8e:60:ba:60:
cb:67:15:fd:8b:0f:b9:db:ee:4f:74:d1:39:25:1c:
58:8d:00:4e:81:76:e6:3e:01:ca:e9:7d:90:8d:dc:
e9:da:3a:ed:d2:dc:03:9d:90:15:23:2b:1b:8e:ae:
bc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:87:DC:2D:32:0B:B9:F7:A8:B0:C9:F5:C2:A0:87:10:95:24:99:36
X509v3 Authority Key Identifier:
keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:7d:de:25:c4:20:0d:49:f8:1b:0c:0c:b3:36:de:0e:6c:b2:
1a:cf:6a:5c:ce:96:92:3d:bb:30:71:b6:e1:f9:74:41:ac:ed:
67:9f:76:97:21:03:c9:24:b2:a5:6d:da:9f:55:6a:bd:04:2e:
8d:f2:0c:bf:c0:14:29:ee:a6:ab:ee:2c:20:79:b9:6c:b6:9d:
01:7e:70:03:2e:97:3f:3a:6b:2a:37:a8:51:ae:97:be:d1:9b:
54:7b:8e:96:d9:e3:a4:92:40:b5:4e:b1:da:1d:6a:32:36:21:
aa:49:2f:d5:91:0f:ac:68:08:50:27:28:a2:f6:eb:f5:fa:02:
a3:c1:be:cb:cc:46:25:1a:77:ac:20:3d:f4:b5:99:ff:a9:02:
7e:6d:c3:4f:55:9e:df:06:51:93:0c:34:b8:09:bd:c4:f0:8c:
18:49:b2:a7:b8:a2:57:b9:2d:48:03:73:ad:e5:76:7e:3b:31:
65:a1:51:db:e4:44:56:b9:3c:4a:a0:e7:c1:9e:b3:cf:70:68:
e3:48:37:80:1a:32:3b:ef:78:84:66:12:2a:e8:14:ab:a5:96:
98:69:9e:c3:b2:45:db:37:c8:c9:aa:db:89:58:db:66:9f:a1:
71:73:2c:a2:a9:07:16:91:6d:f0:0b:55:6a:e2:1a:bf:3c:1d:
dc:8a:30:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:06 2026 by rpki-client