Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
File: dODVhfGshfVEks_JXh3OD8L3lw8.mft (raw, json)
Hash identifier: E/rjNQRUcV9fZcO7ohYTswWo7C1PDli8P4fucWHb2XQ=
Subject key identifier: 6B:28:93:77:FD:E9:DC:F8:75:CC:82:DA:0E:98:F2:0A:C0:6F:22:85
Authority key identifier: 74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F
Certificate issuer: /CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f
Certificate serial: 019D37F783D329929D3031412234EF0B3C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
Manifest number: 04D7
Signing time: Sun 29 Mar 2026 05:01:01 +0000
Manifest this update: Sun 29 Mar 2026 05:01:01 +0000
Manifest next update: Mon 30 Mar 2026 05:01:01 +0000
Files and hashes: 1: dODVhfGshfVEks_JXh3OD8L3lw8.crl (hash: cH1apvdWI1Gu5j+OWdmOWZ429Zm7QkMXPz9I3FuoVSc=)
2: iw2hZNABaxf3BqGSoH50zlpBmZo.roa (hash: FEmu0jxWn7X0gK1R2H3JsdW7Vd44llV6L5PVfKQuGIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:83:d3:29:92:9d:30:31:41:22:34:ef:0b:3c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f
Validity
Not Before: Mar 29 05:01:01 2026 GMT
Not After : Mar 30 05:01:01 2026 GMT
Subject: CN=6b289377fde9dcf875cc82da0e98f20ac06f2285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:c5:35:f5:72:f8:44:5f:79:01:c4:fd:d6:
3d:2a:85:6a:41:ca:52:eb:d7:6b:c7:9c:66:82:a5:
f5:86:92:11:7e:85:20:13:75:fc:d1:01:90:25:80:
8e:76:50:c1:b4:18:11:84:c4:0b:e3:79:73:15:21:
40:ae:45:6e:3d:2e:06:13:cf:aa:ad:a8:4f:82:e8:
b7:7e:8f:12:1e:0a:9a:78:43:aa:f3:81:c3:62:a9:
08:40:6c:83:ec:18:23:6a:56:bc:70:b2:e2:d3:91:
c0:a0:e5:10:25:59:bf:e1:0f:3a:fe:00:40:62:82:
be:3c:e9:b7:02:ae:f2:0c:48:89:71:d3:8a:40:6e:
0b:4d:40:e4:80:ed:7c:5c:30:7b:3a:fe:23:f0:5d:
2d:c8:5b:ff:a5:0b:54:e1:07:74:94:58:bf:b5:fa:
bb:5c:23:74:15:c4:8f:cc:63:3c:68:a7:c2:8d:4f:
3a:1a:d3:ae:a2:20:dd:82:b2:cb:ec:27:50:65:da:
b5:e0:e4:b3:21:18:af:8b:a4:43:46:81:50:b5:83:
df:55:5f:93:be:a2:ec:a0:a2:62:1b:0f:ab:ce:07:
3f:8f:c1:26:ac:10:a1:dd:ae:88:28:92:3a:0e:e3:
20:6a:5b:a4:2a:50:23:ac:11:47:33:69:5f:e0:10:
12:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:28:93:77:FD:E9:DC:F8:75:CC:82:DA:0E:98:F2:0A:C0:6F:22:85
X509v3 Authority Key Identifier:
keyid:74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:98:aa:c9:0f:1b:9a:e2:ab:dc:1d:66:a6:2d:79:37:50:68:
37:9f:4c:73:c4:86:5c:be:6d:d6:5d:c5:3d:bc:87:08:5d:5c:
0d:a3:8d:fc:58:bd:aa:21:48:73:58:5c:fb:b8:67:34:b0:d8:
83:fe:d0:3a:82:80:0d:3a:f2:31:0c:8e:7e:84:c6:4d:09:45:
2c:f8:5b:22:6c:55:6f:c3:69:25:05:f8:19:07:95:e2:06:3a:
a1:4d:70:76:e3:c7:65:8b:1c:a9:ee:6c:16:1b:6f:fc:13:63:
1a:ca:be:b6:2c:4e:e5:30:9d:2d:e1:81:ec:b9:9e:21:78:da:
5d:7b:da:46:f4:72:f4:4b:05:1c:39:9d:32:25:70:2c:3e:86:
0a:b3:1e:d3:6c:6b:1c:9c:d9:ca:ca:85:ca:91:56:f1:3e:af:
d9:1f:f4:0d:ca:ae:ad:51:31:89:27:04:4c:6b:24:a8:dc:69:
9d:12:ce:3b:82:92:5a:e5:37:8a:ee:3b:c0:0e:8e:62:76:1b:
b9:dd:f3:43:d2:89:fe:82:a3:84:c8:84:eb:a6:55:08:a0:71:
cb:4d:bf:8f:99:95:0f:eb:68:e4:96:79:14:af:d8:ad:8e:18:
22:52:19:d1:bd:63:77:b3:fb:68:00:27:75:08:fe:3b:5f:57:
59:8a:76:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:08 2026 by rpki-client