Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
File: rrdjIcjUae47oCOSCzcszaXeng8.mft (raw, json)
Hash identifier: g91W3IAnxsOnnw2xwddlFZqlxKV4fsSyx3h7eyEVfsk=
Subject key identifier: CF:73:A9:E6:08:B8:03:8F:F9:44:F2:2A:43:8C:B9:83:54:69:C3:F3
Authority key identifier: AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
Certificate issuer: /CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Certificate serial: 019D38D3DAD3143D488D22BB0239AC397D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
Manifest number: 0A33
Signing time: Sun 29 Mar 2026 09:01:41 +0000
Manifest this update: Sun 29 Mar 2026 09:01:41 +0000
Manifest next update: Mon 30 Mar 2026 09:01:41 +0000
Files and hashes: 1: eodQO_QecDa9A4kfpjbm-rS0pPo.roa (hash: iUWofSRT9UHvNK/hkBEFkKulPRt3pBGPPSMNCjcW5Yw=)
2: rrdjIcjUae47oCOSCzcszaXeng8.crl (hash: qcOcaWLpTBh8K6fQKdxuEv8e+6ZX0lu3GKKZSRXn110=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:da:d3:14:3d:48:8d:22:bb:02:39:ac:39:7d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Validity
Not Before: Mar 29 09:01:41 2026 GMT
Not After : Mar 30 09:01:41 2026 GMT
Subject: CN=cf73a9e608b8038ff944f22a438cb9835469c3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a4:db:3b:70:b6:09:0e:bf:52:ae:9b:44:d7:
2e:dd:b0:2b:10:bd:5c:b4:a0:39:0a:96:1b:6d:19:
81:65:ee:1e:00:a8:c8:80:28:d3:c8:32:ae:63:82:
e8:99:c1:aa:56:7d:2d:bd:c2:3c:c4:b8:35:83:c2:
d0:5b:da:5a:58:fd:3f:89:28:43:b5:26:29:fe:36:
fd:bc:f5:96:bc:92:82:ad:e6:fa:9a:6d:17:df:8f:
8b:ce:33:af:d9:bb:33:d7:97:ce:41:b9:60:be:26:
f8:4e:9a:be:7e:94:cc:38:3e:1c:f6:db:2f:6b:da:
f9:6c:8f:26:4a:fa:c9:74:bf:2a:f9:46:3d:0c:cd:
3c:38:b6:ca:cb:1f:aa:93:7d:d5:22:7e:7c:ea:0a:
b9:81:e4:e8:4c:1d:b6:16:1f:5c:18:c3:5d:40:1d:
c9:e4:db:3c:f2:a7:fb:54:fc:a5:f1:33:93:a2:d2:
dc:c3:15:05:f2:d8:81:19:22:c0:ac:af:0c:bb:18:
ed:a6:1e:8f:11:e2:67:d0:fa:70:9a:16:13:74:85:
26:7c:7a:3f:8d:a0:28:ed:00:a2:d8:d4:f9:68:d4:
e1:5b:8a:a8:ad:91:33:07:31:80:17:15:b1:ab:6d:
5b:ba:b8:a9:bd:3b:f0:29:91:47:58:0c:52:93:36:
45:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:73:A9:E6:08:B8:03:8F:F9:44:F2:2A:43:8C:B9:83:54:69:C3:F3
X509v3 Authority Key Identifier:
keyid:AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1a:2f:66:78:28:28:85:9c:61:ab:01:80:c7:16:91:5c:7b:
54:03:49:8d:ff:d6:d0:79:0c:ba:8d:bf:5b:62:c3:4a:92:50:
ff:48:f6:48:61:00:43:3a:fd:a5:66:13:ad:9b:bf:79:ff:ff:
d6:fc:24:3e:fe:9d:f0:2d:5a:45:53:b3:62:be:11:bf:e9:85:
db:58:54:60:bb:06:9b:3c:9f:f3:f7:f1:ae:9b:5e:fc:02:50:
22:95:e7:7e:80:94:af:fc:74:73:13:fb:20:c3:42:0c:47:27:
99:45:56:3c:44:7e:73:a6:9d:8b:2a:c4:d7:39:9e:0a:63:a7:
8a:03:55:39:5c:af:40:07:ae:86:28:50:db:b9:d5:95:18:69:
1f:77:c6:e8:74:42:b7:65:76:a0:38:6f:b1:7f:f4:97:79:2a:
70:ad:ea:06:22:c3:ba:97:fb:01:6c:aa:c9:13:cc:bb:bd:af:
41:b2:a0:c7:8c:9e:96:c5:4d:e3:8b:dc:0e:fc:80:59:a4:9b:
dc:e2:70:35:b7:dd:54:23:06:5c:a2:72:26:b0:e1:80:af:0e:
3f:a0:20:67:01:d8:74:bb:e2:c8:f3:fa:a2:5e:07:97:60:80:
cb:29:54:ea:a7:31:5a:53:2d:13:c1:9f:e0:37:8f:33:b7:de:
39:36:ee:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:28 2026 by rpki-client