Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
File: 250Zf7vuKh3MtPVXIqghDTEFsEI.mft (raw, json)
Hash identifier: HMJOR4mFiuvtL+W5oy6hxJzvNEuv3PE6eVpROcBys7s=
Subject key identifier: 4A:0C:7D:C0:B2:35:B9:34:6E:7A:FA:96:AA:4A:5A:CC:D3:56:64:C1
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 019D39AEE8D3B6963E8975530D3FFD8743A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
Manifest number: 145D
Signing time: Sun 29 Mar 2026 13:00:57 +0000
Manifest this update: Sun 29 Mar 2026 13:00:57 +0000
Manifest next update: Mon 30 Mar 2026 13:00:57 +0000
Files and hashes: 1: 250Zf7vuKh3MtPVXIqghDTEFsEI.crl (hash: ZazHHVHszSaImqrsrG4w0sKGE0dY3FnG4SNTTib/hBA=)
2: 6mzFB1254QH_scGmAESdwoJirew.roa (hash: ZqsDszUXMXErK5gprgiRcwaopoCcJJcjnl51ncaMD10=)
3: CHwEEgIG46KrfCZubP2sgaYyQKQ.roa (hash: 1VYNsORWI1Jnmpu8/KvoEN63QsZYW/dgbty42oD0bdY=)
4: NJD3vCg8LdZrgIhkarwqZcVQWlY.roa (hash: Eumr2+B2PPkKKeprpzIU6OMcVz3MM+ic7NoPgJaopMw=)
5: OIl66vV-_xpjBLdW_e37i3MHj7k.roa (hash: cSop5Hl7odCbvTkJ91gKwEE+cGwI/Owv1OQiaa9DbOI=)
6: V_9jRl4u_GQEezWDQos1yT-0bqE.roa (hash: F7HIunKap/oz5qtM7/jZgccS28Y+qRZ8R7fBgjRlXdI=)
7: iNKNZeSZcVKtwBDeM9cWD2QfKgw.roa (hash: Ufjl8hlKJynYjHQsITek/FLuhc46CrmvrHtUUc2zMOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:e8:d3:b6:96:3e:89:75:53:0d:3f:fd:87:43:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Mar 29 13:00:57 2026 GMT
Not After : Mar 30 13:00:57 2026 GMT
Subject: CN=4a0c7dc0b235b9346e7afa96aa4a5accd35664c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0d:19:25:50:fd:b2:00:55:36:42:bc:1d:69:
7b:b1:7b:50:13:2b:76:3e:3a:15:ef:f8:66:0c:1e:
24:44:9a:c3:67:f7:a4:15:3c:8a:dc:8c:c3:36:cc:
0f:21:e7:f0:11:18:81:2f:a5:5a:00:dc:8e:c7:6e:
7f:6d:c7:66:a4:79:56:11:85:6a:13:2a:44:f3:4a:
24:a4:4c:53:89:82:f7:fc:75:e5:6a:73:ef:85:87:
d0:5d:71:93:53:0d:d3:93:f1:1d:5f:c9:8c:c7:6b:
71:f3:d5:5c:22:78:a5:28:f3:21:d3:79:b2:19:e6:
44:de:10:bf:98:c1:3b:46:9e:79:d6:26:d8:30:25:
d8:bf:3c:a6:54:60:18:43:65:7e:e1:40:52:79:8c:
af:c6:28:d7:80:59:5e:77:1e:0e:ff:67:4b:cc:7b:
3e:52:f6:72:bf:5e:54:7d:19:58:1a:c9:63:f8:aa:
6d:da:18:9b:9a:ac:46:8b:55:03:04:dd:90:f4:04:
a3:39:78:9a:20:49:3d:b0:4c:40:a4:2b:85:cc:88:
e0:c2:c0:a5:29:b2:8e:df:50:da:ea:74:d1:3f:b2:
77:84:fd:7f:b3:64:6b:87:ca:c8:48:23:1a:70:d1:
cc:1b:49:09:88:40:36:87:46:ad:af:22:f0:9d:d6:
14:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0C:7D:C0:B2:35:B9:34:6E:7A:FA:96:AA:4A:5A:CC:D3:56:64:C1
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:bd:ca:6c:14:27:72:b0:9f:f5:df:de:5a:39:be:6b:f6:01:
af:0c:f4:f7:04:f9:be:6d:0d:52:c5:92:30:dd:3f:33:2f:b6:
7b:79:73:41:b5:87:a2:7b:97:1e:1e:af:2a:dc:f5:99:7c:00:
8c:f2:55:dd:48:52:92:9e:4e:72:7c:04:75:8c:ce:f5:aa:17:
66:99:8e:77:2d:f7:92:48:29:12:55:b9:43:ba:30:e3:45:92:
62:9b:11:46:b6:3f:13:c6:46:26:c3:f8:8e:e0:18:12:b5:cd:
5b:ef:01:c2:49:3e:95:25:68:c3:f2:1b:52:37:db:b8:99:8a:
0e:21:67:55:ae:0b:6b:7c:ef:79:0c:d7:c4:42:bd:00:8d:6e:
f2:85:65:a0:8b:62:9b:10:17:33:19:c5:b9:af:77:15:d9:bd:
57:2a:a0:57:f4:48:53:ad:a2:ea:84:c9:6e:b6:5c:95:c9:52:
83:e0:d2:59:f4:39:03:1a:29:d5:1e:a3:a1:58:a7:ac:01:47:
10:40:6f:16:5f:a4:76:d3:76:62:26:6f:90:cc:bc:79:d7:23:
d0:4b:91:a5:c3:a4:a9:6c:10:b2:cd:0a:ed:90:bf:f0:f8:3c:
eb:42:c5:e3:02:07:fc:13:b5:83:94:f0:da:d1:db:12:66:87:
34:e9:0b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:47 2026 by rpki-client