Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
File: INW4SDsXErcCNUEFbnMIU2bSk0Y.mft (raw, json)
Hash identifier: dQHFEyJ0nMDSfQKiK+G2RaifkpNDwS4Sn2bLhsu+hkk=
Subject key identifier: C5:8B:E7:B1:2D:A2:C3:08:42:EB:A7:09:9C:B7:90:D1:FE:31:C9:D7
Authority key identifier: 20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
Certificate issuer: /CN=20d5b8483b1712b7023541056e73085366d29346
Certificate serial: 019D3A1D2773723EA2D82FB255E7B96E1C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
Manifest number: 0DD7
Signing time: Sun 29 Mar 2026 15:01:22 +0000
Manifest this update: Sun 29 Mar 2026 15:01:22 +0000
Manifest next update: Mon 30 Mar 2026 15:01:22 +0000
Files and hashes: 1: INW4SDsXErcCNUEFbnMIU2bSk0Y.crl (hash: fFhUOkWwj3qwoY8Xqcw0LezdPagH3jgrzMJMy4kRltI=)
2: QFN1Pmp0QiKx5d3w_NYc2ZWKHEw.roa (hash: Xxu/WKTNsoIWst3QbQSPutJklBpFRyV1E6yTl52XKwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1d:27:73:72:3e:a2:d8:2f:b2:55:e7:b9:6e:1c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d5b8483b1712b7023541056e73085366d29346
Validity
Not Before: Mar 29 15:01:22 2026 GMT
Not After : Mar 30 15:01:22 2026 GMT
Subject: CN=c58be7b12da2c30842eba7099cb790d1fe31c9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:53:ec:4c:c8:94:7b:15:ab:59:7d:cd:21:ba:
0b:af:63:95:81:3b:ff:19:87:b2:0e:77:3f:df:e4:
0b:7e:c0:80:b3:0e:1e:0c:80:ac:64:94:fa:49:b2:
16:09:38:9b:8b:99:cb:4c:db:ea:cf:41:0e:71:80:
93:96:5b:01:8f:c8:c9:b5:04:ce:26:86:52:61:2a:
9d:57:6e:0a:09:34:3f:ab:34:aa:32:05:0c:fc:bf:
68:57:aa:24:8b:84:52:de:4f:95:28:48:5b:b2:fb:
a6:24:27:ad:c2:37:5c:98:c3:e0:a2:3a:a7:15:ce:
4c:41:3f:13:b8:e8:44:1e:a8:ca:70:f6:49:d2:5b:
22:28:d4:ca:ad:c8:bb:8b:5c:9e:d1:19:36:20:04:
77:6d:25:b2:a4:53:64:8b:87:08:04:b7:73:4d:2f:
e0:49:26:91:76:0b:58:be:dd:2f:d6:76:af:6a:4f:
c1:45:4d:84:44:4a:35:8b:a9:75:ae:be:f8:62:0e:
ab:bd:14:13:47:b8:4d:eb:69:d9:93:77:89:59:d6:
0d:36:38:76:16:e7:4d:99:11:7f:0f:1f:ca:19:7e:
80:4a:5e:8c:bb:3a:8a:d4:28:d6:30:87:09:be:ef:
87:b0:d5:a4:bb:c5:3c:65:67:2a:bb:c4:42:54:7e:
cc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8B:E7:B1:2D:A2:C3:08:42:EB:A7:09:9C:B7:90:D1:FE:31:C9:D7
X509v3 Authority Key Identifier:
keyid:20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:83:50:c3:74:90:bc:80:d1:71:e2:c5:d5:90:27:a1:65:79:
f0:bc:50:54:7a:13:06:d7:4c:c9:a9:cb:4b:5b:21:01:06:90:
a9:d8:52:4d:69:b8:3d:c4:ca:b9:2f:48:91:98:3a:fd:4f:9a:
4b:5d:ac:49:e6:4f:b6:d8:ca:f0:5b:0b:e7:c3:ad:1b:32:8c:
83:da:b0:5e:4b:9a:af:07:ec:53:24:57:d5:92:65:a4:b8:81:
f9:09:00:00:a3:2c:31:44:9b:46:76:f5:86:ad:a1:2b:72:1e:
1a:21:65:e2:3b:3a:a1:02:7e:6a:a1:df:d9:a1:b7:45:d3:19:
9e:8c:e4:90:d1:4d:0f:25:48:c3:0f:24:72:6b:fd:8a:06:be:
7e:a9:e7:0e:78:f3:23:b2:9d:95:d2:ee:9a:27:a2:c7:35:2c:
dd:bb:0b:df:9f:23:cc:cc:bd:00:a1:4d:47:e7:11:72:25:2b:
fb:fb:f9:ba:5d:5d:b7:3e:f2:83:80:3e:e8:b5:35:04:a0:b5:
74:c9:b4:e0:d7:4f:4c:b2:f8:5d:c9:3e:8b:bf:88:8b:ab:7a:
57:a3:0f:2a:c3:25:a5:ba:03:0e:ae:1e:8e:e8:71:b4:3e:15:
d7:35:eb:18:90:b3:67:e6:94:70:2f:26:1a:54:a8:bd:2a:e7:
32:24:cb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:33 2026 by rpki-client