Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
File: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft (raw, json)
Hash identifier: DRV98Xgwtwd8zsJkdqhg+WTNke7J2a5w/I7ATW3l4ZQ=
Subject key identifier: 4A:EC:9A:02:DC:C9:DE:4A:50:AF:EF:99:7D:19:91:AD:AD:BF:1E:69
Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
Certificate issuer: /CN=0f784ebe35e41b610be154473bc219d0ad25278f
Certificate serial: 019D382DF20AB4FF28F825E5785E15D488D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
Manifest number: 07A7
Signing time: Sun 29 Mar 2026 06:00:28 +0000
Manifest this update: Sun 29 Mar 2026 06:00:28 +0000
Manifest next update: Mon 30 Mar 2026 06:00:28 +0000
Files and hashes: 1: 8SAch57AMOQRbiAz1pknxEq8_AE.roa (hash: dOCl4oMRadim0zorBGeK3Z3XhSzd3Cim0jIw4uxvw28=)
2: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl (hash: WHCAcOrZaPSOKBhNzL8UKJbEsKHYq4Oc6SdC4rm8y88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f2:0a:b4:ff:28:f8:25:e5:78:5e:15:d4:88:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f
Validity
Not Before: Mar 29 06:00:28 2026 GMT
Not After : Mar 30 06:00:28 2026 GMT
Subject: CN=4aec9a02dcc9de4a50afef997d1991adadbf1e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:23:02:6e:98:1a:a3:91:6a:8b:cf:5e:fd:fd:
fd:2e:94:59:3b:9c:05:d3:b9:ab:f8:85:a9:e1:77:
6a:20:c9:ee:ac:a9:6d:72:10:65:4b:30:0a:ae:60:
aa:a1:13:e2:2d:59:a1:76:4d:29:81:e5:77:ba:cd:
e3:51:3e:95:51:6e:a6:bf:c2:3e:48:3b:74:cb:f2:
12:e7:af:ec:52:48:9f:ce:d8:6e:7c:65:3b:0a:e5:
a6:ac:b4:1d:68:db:38:31:7a:15:ee:89:80:d9:8e:
cf:10:7d:ec:57:40:35:e2:3d:ee:3a:ba:8a:65:14:
c0:3b:d4:4a:12:d3:bb:61:bd:0b:15:8c:77:73:27:
03:95:2f:94:eb:f6:a2:d5:ec:43:b4:1a:a5:be:d8:
96:22:a3:c3:f1:30:be:ae:87:49:ae:ce:a8:ef:e0:
0e:15:dc:c5:b1:26:bb:48:b3:ec:63:d5:78:7a:90:
d0:b4:b8:74:e5:43:5b:a5:57:77:29:5a:33:57:0f:
04:43:f3:c7:ad:2d:b7:7e:78:64:da:da:12:ab:b6:
a6:2c:61:9b:f0:09:ee:65:dd:85:27:80:a0:29:fe:
46:ba:a2:3f:46:fa:e2:ae:09:3d:58:4b:18:f3:86:
6c:38:ea:4b:d8:e8:74:62:f9:dd:59:01:75:ff:e2:
a0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EC:9A:02:DC:C9:DE:4A:50:AF:EF:99:7D:19:91:AD:AD:BF:1E:69
X509v3 Authority Key Identifier:
keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:48:84:97:02:ca:8b:39:6f:3c:67:a2:86:2e:19:e5:3f:9e:
3c:af:3d:9b:16:07:08:06:08:4c:e2:29:b3:95:3a:c8:b8:77:
1a:e0:f9:e7:ad:2e:72:01:fa:83:46:69:16:8a:82:da:c8:77:
62:e8:92:16:e6:99:69:b5:c2:c0:76:3c:dc:4f:ff:e4:6d:ee:
8f:2c:5a:83:46:69:59:65:ab:07:a9:25:4c:bb:ab:2f:0b:d5:
34:8e:96:c4:d7:ca:da:2e:0a:af:89:7d:86:ff:2a:97:0b:ed:
3a:33:8c:0a:34:dd:c2:02:52:61:ba:e0:58:0f:ba:9a:73:d1:
9f:94:db:ab:6d:80:0a:28:1d:3f:a2:aa:c8:9e:d9:a2:c2:e2:
55:03:8a:86:b3:44:a1:9f:26:bd:d7:43:0b:d4:56:50:e1:cf:
31:79:85:c7:b7:85:cd:25:9e:48:e4:58:2d:09:6b:94:be:44:
e9:85:d0:52:8e:1a:d8:31:02:9b:cc:ea:9a:8f:5b:bd:85:c2:
55:24:39:3f:07:bf:66:b1:27:d0:d7:fe:de:42:d9:0a:da:08:
dc:e7:74:c0:15:55:49:c4:02:f3:0b:0f:a7:6c:17:f6:84:43:
72:1c:63:8f:46:c3:6c:91:c0:0c:89:d8:fb:ad:46:24:dd:8e:
93:f4:35:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:08 2026 by rpki-client