Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
File: V3EfIIg6YrwGORunslgs5ys_6Rw.mft (raw, json)
Hash identifier: 2BbGnOZppwZ8l8NWOHQEGdr5OoEgEXDcEQDn8jatFDk=
Subject key identifier: A0:DD:9D:FE:CA:DF:27:D9:67:D9:3F:63:B7:34:4F:E1:CE:3C:77:60
Authority key identifier: 57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C
Certificate issuer: /CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
Certificate serial: 019D382EABE2BBE4AAFBA61A88D2300D10EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
Manifest number: 1476
Signing time: Sun 29 Mar 2026 06:01:15 +0000
Manifest this update: Sun 29 Mar 2026 06:01:15 +0000
Manifest next update: Mon 30 Mar 2026 06:01:15 +0000
Files and hashes: 1: FYrxidhhtPiG6AB9OzYcqk5p8Aw.roa (hash: mzI1U2535anRJzFg3sJ4dHBKcfZC4WY6B6B0DzwBsDM=)
2: V3EfIIg6YrwGORunslgs5ys_6Rw.crl (hash: rM3//XbNub4X9aKNCF1ZDDavt0NSd68Qbox4aDMld9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:ab:e2:bb:e4:aa:fb:a6:1a:88:d2:30:0d:10:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
Validity
Not Before: Mar 29 06:01:15 2026 GMT
Not After : Mar 30 06:01:15 2026 GMT
Subject: CN=a0dd9dfecadf27d967d93f63b7344fe1ce3c7760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c0:90:03:a6:72:1a:33:9e:7e:3e:3e:9f:34:
73:b3:1b:fa:21:0d:40:d0:09:3e:b5:b6:4b:03:62:
6b:37:5c:5c:d6:1a:35:ce:22:f2:69:cf:11:f6:69:
e3:6d:a2:eb:3c:40:2e:94:f1:1c:11:27:5d:77:aa:
4d:a4:d3:2d:99:d1:ac:9e:28:c7:52:c8:d2:87:6f:
5c:9c:b2:c0:d7:a6:1a:30:68:8d:74:c2:dd:f9:72:
50:df:f2:02:e5:f9:0b:8d:1d:0c:db:80:15:0c:42:
b6:64:80:a6:c2:f0:c4:75:ef:f2:99:50:f0:9a:30:
69:c9:b7:57:5a:36:a7:63:34:a2:9b:b8:61:5b:7d:
45:b6:4b:2d:52:f0:51:4e:a2:5e:57:a8:8c:18:a4:
19:7b:59:ea:3b:b5:03:08:95:da:e2:06:f6:d3:26:
f7:9f:a1:6c:c3:45:94:72:e9:ca:3e:41:88:97:49:
63:8a:b9:77:46:49:e8:aa:83:5a:9f:28:87:ec:84:
3d:88:6e:1c:f6:58:3b:e5:ea:45:83:16:39:69:cc:
4c:d2:85:08:8e:9e:c8:8f:47:56:5e:ba:e2:71:42:
06:86:b9:6b:cc:93:95:0b:7f:43:02:73:ba:99:a4:
41:02:a3:2e:c5:82:f0:b1:bc:cc:14:94:9c:20:64:
4b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DD:9D:FE:CA:DF:27:D9:67:D9:3F:63:B7:34:4F:E1:CE:3C:77:60
X509v3 Authority Key Identifier:
keyid:57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:01:54:b0:72:de:51:ab:c2:b2:7b:40:7e:1e:97:dd:22:89:
58:e8:34:a3:a3:31:7c:82:7b:ec:b1:bc:b4:d8:7b:89:e7:7b:
5f:f1:27:94:18:4a:92:5f:ca:92:9d:95:4d:a2:42:42:aa:ed:
12:5c:32:6f:90:7c:8d:93:53:79:53:ff:4d:55:7e:89:56:44:
30:d7:ea:71:0a:1c:57:6f:2f:66:98:a1:4c:d4:56:95:93:dd:
26:9f:ca:f9:9f:71:9b:79:f8:bd:5f:09:a3:f9:ff:1b:89:4f:
d0:64:04:40:75:83:55:4c:06:4b:15:49:81:2d:6d:45:b6:76:
53:d1:c2:11:02:f1:a3:4d:a5:3c:66:63:24:de:b4:00:3e:1c:
72:be:61:a2:7a:51:94:61:d5:0a:b7:da:02:83:fa:5c:c6:84:
3b:ca:7b:d6:ee:9b:25:b4:a7:09:6f:36:d6:0a:41:08:8e:da:
cb:5f:4d:23:99:2f:e1:4f:fb:53:1a:cd:c9:a5:d3:d1:91:e0:
ca:c0:3b:52:04:c1:1f:15:21:a4:d7:e3:3f:44:c1:39:99:5c:
ea:33:0b:ed:cb:20:ec:8d:05:ed:67:f2:85:69:b5:79:65:59:
5b:01:0b:8d:3f:46:7c:75:21:79:b8:f5:74:9c:0a:96:a3:c1:
43:20:47:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:10 2026 by rpki-client