Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
File: RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json)
Hash identifier: RzytCH8WU7eR/EdqtzYwc5wb2mLiy4c0fKJKGQOtsWE=
Subject key identifier: 63:BB:3E:98:02:C0:8F:CC:D6:BB:50:1B:64:C4:E3:0E:E8:DC:39:88
Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
Certificate issuer: /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Certificate serial: 019CEA4A83D6C9A69BACA8C240B2E9FBC07E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
Manifest number: 08F2
Signing time: Sat 14 Mar 2026 03:01:17 +0000
Manifest this update: Sat 14 Mar 2026 03:01:17 +0000
Manifest next update: Sun 15 Mar 2026 03:01:17 +0000
Files and hashes: 1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: tqiLf2rZVL/Y4eXP2dHKE7vULjH125RJCzEbyOhECo4=)
2: nlcpl9ulhW9UJP1m-NfebbvM-08.roa (hash: IBQWkMt/VVWxVDIuSxk0QRhZsHES5xi9v/NlOWNnx9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ea:4a:83:d6:c9:a6:9b:ac:a8:c2:40:b2:e9:fb:c0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Validity
Not Before: Mar 14 03:01:17 2026 GMT
Not After : Mar 15 03:01:17 2026 GMT
Subject: CN=63bb3e9802c08fccd6bb501b64c4e30ee8dc3988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:93:54:9a:99:4d:6e:e1:09:ce:43:5a:79:de:
9b:90:ed:ab:78:ef:d7:a4:e0:e6:05:ee:81:6a:e7:
6d:7d:c8:34:45:5f:2a:d5:62:e6:9d:20:a0:f0:b3:
66:26:1a:b3:fd:c0:25:02:2b:23:5e:e9:cf:54:ba:
c8:ee:5f:6c:6d:73:70:5a:d6:56:8b:91:1f:aa:30:
6d:80:01:d1:ec:a9:d4:01:01:fe:fc:b8:96:6b:b2:
4a:dd:08:3e:86:66:f5:53:b4:b5:6f:ae:80:76:68:
19:4b:94:e2:99:c7:3f:e8:13:56:4e:66:a2:60:a0:
47:d7:cf:c8:69:ed:40:50:2a:f9:69:b0:66:1c:26:
8b:6f:bc:28:14:3e:96:4a:06:b7:62:85:4b:5d:7a:
c2:14:63:28:7d:1b:6d:03:e7:0c:31:d0:a8:1b:d6:
fe:72:52:93:36:72:56:95:b5:7e:80:82:fe:c8:de:
cf:81:ef:21:e8:62:82:77:77:d9:13:83:5c:dc:ba:
f8:6c:3a:71:65:09:29:59:5c:f1:da:93:8e:fa:fa:
a1:b3:3f:53:9a:8d:c6:db:28:78:e3:8e:4e:73:cc:
1a:4f:15:6b:cf:2f:e7:fb:66:27:50:7f:73:ec:96:
1d:e5:97:32:3c:a7:20:51:a8:0b:91:68:9f:8d:2a:
37:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BB:3E:98:02:C0:8F:CC:D6:BB:50:1B:64:C4:E3:0E:E8:DC:39:88
X509v3 Authority Key Identifier:
keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:31:fc:4c:2e:6c:b1:d9:b5:23:7e:20:60:b7:5d:1c:d5:60:
1f:cf:1f:b6:74:25:26:68:ac:34:9d:ac:12:5e:53:cf:d3:41:
4a:c2:73:3d:5c:1e:f9:92:b9:66:3b:81:f4:8a:59:fc:e1:eb:
c2:b0:d4:7f:29:36:bb:02:4f:75:31:72:d3:59:f3:19:b0:c3:
ad:e5:d9:d7:e6:52:c9:55:56:59:94:97:32:56:c3:00:13:40:
a5:f7:fe:d5:81:cb:77:6b:4b:08:a0:a2:59:fd:b6:04:ab:9a:
21:96:8e:8c:39:a5:51:c1:e4:9f:ae:7c:62:62:c2:cb:ee:e9:
67:d1:91:f0:72:d5:f5:e1:3f:23:aa:2f:9e:74:28:38:b5:55:
1e:da:e3:ae:0c:02:bb:e2:bd:fb:ac:e6:7a:a4:15:c3:50:54:
14:c9:12:2a:39:4b:44:b2:d1:d0:98:5c:b9:f3:29:6b:12:cc:
59:fd:8c:75:d6:3c:68:95:b9:eb:84:e3:36:37:fa:d7:16:36:
40:d3:8f:96:5b:d9:8f:51:68:df:b1:52:2a:30:2d:f1:78:ea:
f0:ee:cc:64:aa:c3:a8:12:a9:68:06:74:fa:2b:d2:0b:3a:42:
59:a5:82:93:47:8e:93:4e:2c:68:d4:4e:a3:d6:b1:b1:74:56:
3d:f1:3a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 10:27:55 2026 by rpki-client