Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
File: 53OduQwc6YQx3zSKE3blOsbgUjw.mft (raw, json)
Hash identifier: Iy6iie1cB5RdzXYxjNlR8uZIOt9XcjG4Dj9vLtksrNU=
Subject key identifier: 20:33:85:8F:FE:05:06:B5:B5:87:75:6E:07:BB:B2:77:17:FA:7A:88
Authority key identifier: E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
Certificate issuer: /CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Certificate serial: 019D37895FBF7CFBB289E18E84A0FA376CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
Manifest number: 0DAD
Signing time: Sun 29 Mar 2026 03:00:42 +0000
Manifest this update: Sun 29 Mar 2026 03:00:42 +0000
Manifest next update: Mon 30 Mar 2026 03:00:42 +0000
Files and hashes: 1: 53OduQwc6YQx3zSKE3blOsbgUjw.crl (hash: cXkKlm1CqJKsuoPS7tyVWSsfAYMK1fFn4SWQG732oS4=)
2: JzXhokSG82LcMCULytEUp0QwNC8.roa (hash: ZZxc+1Uxr56VyzAUJ4dBkyZ2Uo54y6GBc5OnUw8X6mg=)
3: q3KyzHaSe2kvbjeAyrJ6xilqOcs.roa (hash: HuGnxltcUOelJB4yz5mBBFw+8XNpy2937+oYWbglU3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:5f:bf:7c:fb:b2:89:e1:8e:84:a0:fa:37:6c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Validity
Not Before: Mar 29 03:00:42 2026 GMT
Not After : Mar 30 03:00:42 2026 GMT
Subject: CN=2033858ffe0506b5b587756e07bbb27717fa7a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a3:88:b5:d3:53:75:a5:6f:fa:89:58:b8:ea:
96:d6:ae:0e:3a:30:1a:b8:19:60:85:ec:b9:38:db:
a1:e8:ee:bd:b9:db:86:ad:f6:c9:e5:6c:b0:fd:ab:
d3:c9:5c:01:12:0b:f3:3f:c2:02:15:30:8c:2a:b3:
51:1e:fa:6d:ea:94:ab:e3:ae:d3:48:49:d3:a2:7b:
4d:1f:64:6d:e3:05:35:7a:12:03:a9:39:8d:e1:13:
30:0b:26:ce:2a:0e:94:e5:5c:ff:19:bc:28:92:85:
86:ae:6f:ab:1f:dc:92:fa:78:3a:4a:1e:9c:f2:70:
96:f3:76:31:29:f3:6d:95:dd:f9:6e:3a:08:8d:bd:
d4:a5:45:b5:6d:37:15:c3:b4:63:fb:f1:3b:bd:2e:
bb:0c:32:eb:03:47:f1:ee:97:45:94:1a:7f:4f:5f:
9c:e2:ea:08:3b:58:1a:0b:2b:4c:7e:b2:3c:08:94:
97:e6:5b:e6:a9:72:40:6c:bc:e2:db:6b:33:da:0c:
2e:40:95:89:e8:1b:ec:74:94:78:a6:4b:73:c8:18:
b8:cd:ae:94:84:89:2d:32:66:a9:7a:73:3d:41:06:
96:b6:2a:bd:30:6b:2a:94:eb:34:a3:25:ff:9a:08:
f7:6e:ff:7c:b6:36:0e:31:27:b5:ea:36:ba:86:86:
5a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:33:85:8F:FE:05:06:B5:B5:87:75:6E:07:BB:B2:77:17:FA:7A:88
X509v3 Authority Key Identifier:
keyid:E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ab:28:cd:ab:06:d1:0f:05:c2:92:ae:a3:b2:a1:eb:05:ce:
26:fa:09:cd:32:55:68:0d:f7:cc:e1:47:05:32:f9:1f:59:f5:
3c:3c:fc:25:e3:a2:79:bb:ba:b6:19:f1:15:4e:a8:36:c6:93:
ab:ff:8c:d2:b4:f3:d1:f7:e2:66:f5:89:a3:bf:4e:f8:5d:49:
38:0f:ec:4c:72:72:b0:25:f7:de:18:30:bd:11:ac:d0:c8:de:
36:82:21:75:60:f8:69:23:b5:d7:60:c5:1e:9b:98:da:33:b0:
9b:60:b8:22:12:a1:b7:ae:d4:03:0f:64:e4:e4:72:e7:f2:0a:
20:d4:c1:ce:14:31:51:33:02:5a:8f:1e:db:e9:5c:a6:88:ac:
1d:4c:57:e1:8c:34:76:a8:28:9e:17:45:ca:ed:73:b6:3d:f0:
4c:99:3f:5d:9a:a1:1f:bc:c4:f0:f2:8c:a0:64:87:26:97:53:
f0:2d:c4:ca:3b:a0:66:28:7e:12:0b:24:27:92:6f:78:e6:47:
ba:db:16:28:45:7d:8f:50:5d:56:fc:6e:a5:e3:c5:4c:ab:c4:
e1:3d:01:68:c8:5f:14:fc:50:ab:c5:c7:7e:72:d9:01:da:bc:
45:79:1e:3e:ec:b0:73:f3:dc:30:79:6f:09:90:89:2e:ca:89:
c9:ce:04:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iV+/fPuyieGOhKD6N2z8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NzM5ZGI5MGMxY2U5ODQzMWRmMzQ4YTEzNzZlNTNhYzZl
MDUyM2MwHhcNMjYwMzI5MDMwMDQyWhcNMjYwMzMwMDMwMDQyWjAzMTEwLwYDVQQD
EygyMDMzODU4ZmZlMDUwNmI1YjU4Nzc1NmUwN2JiYjI3NzE3ZmE3YTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqOItdNTdaVv+olYuOqW1q4OOjAa
uBlghey5ONuh6O69uduGrfbJ5Wyw/avTyVwBEgvzP8ICFTCMKrNRHvpt6pSr467T
SEnTontNH2Rt4wU1ehIDqTmN4RMwCybOKg6U5Vz/GbwokoWGrm+rH9yS+ng6Sh6c
8nCW83YxKfNtld35bjoIjb3UpUW1bTcVw7Rj+/E7vS67DDLrA0fx7pdFlBp/T1+c
4uoIO1gaCytMfrI8CJSX5lvmqXJAbLzi22sz2gwuQJWJ6BvsdJR4pktzyBi4za6U
hIktMmapenM9QQaWtiq9MGsqlOs0oyX/mgj3bv98tjYOMSe16ja6hoZahwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAzhY/+BQa1tYd1bge7sncX+nqIMB8GA1UdIwQY
MBaAFOdznbkMHOmEMd80ihN25TrG4FI8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTNPZHVRd2M2WVF4M3pTS0UzYmxPc2JnVWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC81NDcwMzQtMzk1Yy00M2YwLWEzNGMt
MTk0MjhmOTJjMWNjLzEvNTNPZHVRd2M2WVF4M3pTS0UzYmxPc2JnVWp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC81NDcwMzQtMzk1Yy00M2YwLWEzNGMtMTk0MjhmOTJjMWNj
LzEvNTNPZHVRd2M2WVF4M3pTS0UzYmxPc2JnVWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6sozasG
0Q8FwpKuo7Kh6wXOJvoJzTJVaA33zOFHBTL5H1n1PDz8JeOiebu6thnxFU6oNsaT
q/+M0rTz0ffiZvWJo79O+F1JOA/sTHJysCX33hgwvRGs0MjeNoIhdWD4aSO112DF
HpuY2jOwm2C4IhKht67UAw9k5ORy5/IKINTBzhQxUTMCWo8e2+lcpoisHUxX4Yw0
dqgonhdFyu1ztj3wTJk/XZqhH7zE8PKMoGSHJpdT8C3EyjugZih+EgskJ5JveOZH
utsWKEV9j1BdVvxupePFTKvE4T0BaMhfFPxQq8XHfnLZAdq8RXkePuywc/PcMHlv
CZCJLsqJyc4EOw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:58 2026 by rpki-client