Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
File: V0AEDht6Uy3SrsIuk6YisuGzve8.mft (raw, json)
Hash identifier: pUDWOO6iPRiugFteuWwD4nRBwHMaDuwj6If4FkyHf7Y=
Subject key identifier: DD:66:31:14:7E:2D:04:C4:65:A0:D9:37:66:20:CD:44:01:83:D3:C6
Authority key identifier: 57:40:04:0E:1B:7A:53:2D:D2:AE:C2:2E:93:A6:22:B2:E1:B3:BD:EF
Certificate issuer: /CN=5740040e1b7a532dd2aec22e93a622b2e1b3bdef
Certificate serial: 019D37F7114786464D8C112666D549A4C718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 05:00:31 +0000
Manifest this update: Sun 29 Mar 2026 05:00:31 +0000
Manifest next update: Mon 30 Mar 2026 05:00:31 +0000
Files and hashes: 1: 3Q0KlyVvFSo2Z_aPwEFvT37S6rE.roa (hash: dAIGOyn30sK6qZGwmIyy2qshNSNaRwmKNbigfQVfRhE=)
2: V0AEDht6Uy3SrsIuk6YisuGzve8.crl (hash: TOKKayEdT5fItaqgXjakeSmR6Hl9WE9Q1G28Az9SUI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:11:47:86:46:4d:8c:11:26:66:d5:49:a4:c7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5740040e1b7a532dd2aec22e93a622b2e1b3bdef
Validity
Not Before: Mar 29 05:00:31 2026 GMT
Not After : Mar 30 05:00:31 2026 GMT
Subject: CN=dd6631147e2d04c465a0d9376620cd440183d3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:38:3e:05:00:a4:40:ba:e7:f7:28:a3:d7:
76:a9:8a:26:3b:24:f0:1b:b5:e4:9c:63:31:22:fa:
e9:fb:a8:87:79:d3:d4:10:36:55:a3:1f:9c:11:b3:
5d:17:03:b4:4f:62:a7:86:ca:6c:99:3e:60:0a:c5:
68:ce:ea:dc:f5:ad:ba:4d:4c:af:ba:73:0d:f7:aa:
42:e4:c6:87:e6:6f:aa:b2:82:0a:30:a0:bf:ff:c1:
eb:6b:16:96:05:ff:34:5b:69:1b:79:49:94:bb:4a:
7a:6f:69:f8:59:62:77:4e:1b:d7:88:9c:14:57:4b:
0e:c1:25:df:ed:67:22:15:ac:1c:c5:71:d7:eb:a1:
3b:13:b8:c5:1a:ef:f1:e8:e5:e2:e3:b3:22:87:62:
c4:37:61:1c:a9:02:80:4d:53:f2:f1:2f:09:7a:34:
35:0a:af:37:19:b5:3c:0f:a5:f7:08:45:c3:50:6c:
42:70:04:1a:d6:79:22:4e:d8:05:31:99:98:35:ae:
aa:61:f4:7f:5c:25:03:ca:e8:7f:e2:b4:ea:f5:2b:
13:1b:a3:cb:a9:1b:19:33:58:a2:15:53:af:9e:91:
6f:60:cd:4e:c2:53:67:74:3c:2f:d2:ae:b4:9f:99:
56:67:48:c5:fe:56:15:13:13:dc:7a:ae:7d:2a:ef:
8f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:66:31:14:7E:2D:04:C4:65:A0:D9:37:66:20:CD:44:01:83:D3:C6
X509v3 Authority Key Identifier:
keyid:57:40:04:0E:1B:7A:53:2D:D2:AE:C2:2E:93:A6:22:B2:E1:B3:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:95:39:c9:93:d2:cf:aa:d0:0e:6f:9e:10:3f:08:ae:a2:2f:
16:f9:0b:29:ec:e2:57:e7:74:3f:7b:c7:61:8f:ec:1e:0e:e8:
c0:4c:59:e4:21:6e:94:ea:8d:c8:ff:77:df:48:24:48:40:31:
b1:22:a3:33:40:3a:b4:39:19:9a:e5:ce:db:e2:ae:aa:d7:e9:
7e:0b:95:db:66:9f:30:29:d1:47:12:62:04:44:99:fb:81:36:
c8:b9:1b:b0:f2:64:89:1d:fe:83:30:27:96:38:0f:e2:32:63:
7a:8d:9b:c2:ae:fa:bb:c8:62:fc:55:24:c1:00:3e:e9:8a:31:
7d:21:8e:ea:a9:6b:d4:a8:55:21:6f:bc:85:1a:49:86:b8:0b:
c3:be:47:db:7e:26:22:59:bc:65:d8:5e:03:b8:fc:96:32:24:
ba:8d:ae:9c:61:32:62:cc:68:bc:e5:59:21:4f:87:18:80:24:
ce:4f:8d:ff:fa:b3:86:c3:68:10:29:a9:f3:4b:d2:38:70:53:
8d:ca:0a:dc:2e:13:be:72:81:04:d1:b6:9a:8c:5d:ba:39:a5:
25:d1:ae:4c:0b:34:d6:ee:0c:8e:a9:a7:84:3d:b2:a5:a7:be:
d9:bb:83:1d:01:e0:ed:7d:15:3e:1b:0c:fe:ef:0e:66:f8:b7:
fc:27:2b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:15 2026 by rpki-client