Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
File: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft (raw, json)
Hash identifier: LdSp5KbLwYMVAyiKJtfMuiBoaDEZZ5nAIpcD4IASzTA=
Subject key identifier: 06:37:4B:5A:AE:6B:E9:83:14:7E:35:61:51:60:10:B5:ED:D7:C2:6C
Authority key identifier: FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
Certificate issuer: /CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Certificate serial: 019D39779FFE3E5028FD01C943F6312C880D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
Manifest number: 1435
Signing time: Sun 29 Mar 2026 12:00:34 +0000
Manifest this update: Sun 29 Mar 2026 12:00:34 +0000
Manifest next update: Mon 30 Mar 2026 12:00:34 +0000
Files and hashes: 1: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl (hash: r01cnHP6zzzVQPUC9QOrPQg0TsRcB1G4jDDlAdlS3Mg=)
2: 4h5jFmUAHogYMzFmPzLef51aEOo.roa (hash: +Vnh/sN48kb2A3UtpPAdLkn1qR/raYPxhCm9aIXa9vk=)
3: IejMQZqryCYEJhPt3g_AUlVHwbc.roa (hash: nNLRvEhZpJTRNsbKaW/XctbPiknRbtd4nqAjqgh3BSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:9f:fe:3e:50:28:fd:01:c9:43:f6:31:2c:88:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Validity
Not Before: Mar 29 12:00:34 2026 GMT
Not After : Mar 30 12:00:34 2026 GMT
Subject: CN=06374b5aae6be983147e3561516010b5edd7c26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:07:de:f8:2e:38:45:99:b8:04:13:fa:27:f3:
b7:f1:ca:ae:14:a7:16:37:64:cc:94:30:92:35:99:
e7:91:9a:17:6c:3a:64:73:a9:7b:60:98:d6:30:d1:
df:f1:4b:17:c6:a0:79:2f:da:09:81:ac:f2:a2:30:
4b:fe:99:fe:52:2b:cd:aa:ab:7c:a9:ba:9c:bb:ff:
37:00:56:5f:00:2d:c1:90:99:62:e3:47:69:71:ac:
42:13:4c:45:5a:11:c1:c1:a0:0c:c2:0a:3b:9e:97:
57:93:3f:66:21:82:5d:be:26:66:9b:09:85:88:3b:
c2:82:ee:ea:b6:e6:2c:66:68:33:2f:be:86:9f:db:
9c:89:6a:68:0c:a3:6d:30:bb:72:e8:2a:6a:05:fc:
87:1f:95:47:d0:f8:f6:a6:86:51:23:70:22:32:77:
be:f3:7c:54:bf:a6:de:e3:c3:63:a0:3d:96:c5:24:
c8:f4:b4:b8:b0:65:46:d0:34:2c:64:e2:cf:42:54:
1c:d4:04:b8:80:bc:90:b9:cd:18:6e:db:e8:2d:ad:
2b:02:56:3b:a0:b1:16:3e:46:76:66:12:bb:ff:3f:
61:9d:ea:6d:13:11:3d:e7:74:17:2c:b0:2a:98:06:
ad:06:d8:39:aa:fe:8e:0f:88:58:09:bb:ba:25:e8:
5b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:37:4B:5A:AE:6B:E9:83:14:7E:35:61:51:60:10:B5:ED:D7:C2:6C
X509v3 Authority Key Identifier:
keyid:FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:0d:b1:18:20:01:63:bb:29:9d:c4:ea:93:be:aa:46:3f:d3:
de:51:d6:c2:21:de:c7:3b:9a:21:76:d7:c8:c8:83:1c:ae:e0:
d8:5f:c6:75:28:fb:84:93:56:44:c2:85:59:82:fb:54:27:c4:
fb:5d:47:49:d4:a4:f2:5b:40:f7:59:31:a0:f4:5d:65:56:79:
7e:62:a8:15:6c:8b:22:5b:e8:68:c1:88:4f:03:61:cf:2d:85:
2e:b1:0f:b4:7a:88:0d:3f:2f:f1:5a:88:42:9c:45:70:e4:42:
6b:2d:ab:c1:31:7b:13:ff:20:06:80:7a:34:e0:51:cf:b1:d9:
9b:8d:83:dc:88:26:9f:d7:fe:a2:5a:32:5f:55:ca:cd:56:45:
0f:33:ac:e3:4c:3f:88:b8:9f:85:86:ee:30:5c:a1:ca:65:22:
3c:a8:03:de:36:2b:cb:34:36:75:47:8c:4a:e1:e2:1a:76:d0:
ce:cc:28:a7:87:76:7f:78:c3:40:29:0f:7a:07:5c:23:17:67:
0c:71:f2:9e:41:bb:ab:66:3e:c4:80:9c:9c:3b:22:95:30:7a:
51:d8:ce:78:d8:40:9e:0c:78:9e:9e:e2:3d:82:51:34:06:36:
d1:bc:40:50:9e:88:dd:86:64:4a:67:c1:6f:e4:30:9f:2e:64:
fb:76:ac:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:42 2026 by rpki-client