Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
File: MDeJJY5gnz5VjXezv9CKzzUV-pI.mft (raw, json)
Hash identifier: UWY/gfGQHwLPsyHhvapxNwXdvSXpaOHSQkvMjeC8f3c=
Subject key identifier: 14:D7:DD:D1:84:B9:77:5E:48:BF:22:D1:2D:FD:48:E6:30:EE:40:50
Authority key identifier: 30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92
Certificate issuer: /CN=303789258e609f3e558d77b3bfd08acf3515fa92
Certificate serial: 019D37F71142475FC8DEB6F505E2557EC5EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
Manifest number: 1269
Signing time: Sun 29 Mar 2026 05:00:31 +0000
Manifest this update: Sun 29 Mar 2026 05:00:31 +0000
Manifest next update: Mon 30 Mar 2026 05:00:31 +0000
Files and hashes: 1: MDeJJY5gnz5VjXezv9CKzzUV-pI.crl (hash: EwBkD1gG1LfOTMVZS2B4EXInKX2Q2U8iGCg0sj6LHpY=)
2: xKyGUowZMpxmP8SFriJZEYa04g8.roa (hash: Ogi3KmYI+AEeVKeJkZ4F8oVDdYgo/oQccgvjBxzVA8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:11:42:47:5f:c8:de:b6:f5:05:e2:55:7e:c5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303789258e609f3e558d77b3bfd08acf3515fa92
Validity
Not Before: Mar 29 05:00:31 2026 GMT
Not After : Mar 30 05:00:31 2026 GMT
Subject: CN=14d7ddd184b9775e48bf22d12dfd48e630ee4050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:37:b5:4e:09:38:79:f7:58:96:12:0f:b3:
70:1c:ea:ec:da:66:c3:be:ae:4c:65:26:3c:1f:ab:
17:df:d0:53:78:0c:eb:1d:31:62:51:bb:d0:8b:a7:
c3:fe:c7:90:08:4d:ba:6b:d2:85:bf:77:b4:51:52:
e1:26:a8:0a:99:d4:fd:de:58:2a:be:f3:c4:a7:8e:
a7:4e:fc:13:cf:9f:d7:64:3e:98:f3:6d:c8:a3:12:
cb:32:2f:f4:6e:67:e1:48:10:d7:ea:b6:76:e0:96:
ad:05:22:8b:ac:d7:5e:6c:0b:33:75:50:84:e2:a4:
0d:b2:85:32:7e:8b:ad:85:05:3d:18:2e:28:2a:46:
e7:fc:ce:52:16:cb:b9:23:80:1f:c3:09:22:65:4c:
e0:eb:37:40:b1:32:68:a5:7c:fc:e9:45:f0:02:44:
58:24:4e:be:67:3b:18:99:f3:2f:77:15:34:75:e0:
4a:4d:35:67:89:2d:fe:3b:98:e3:8f:c6:74:78:00:
7a:fb:63:16:8d:12:7e:96:dd:30:f3:63:ce:71:0f:
29:84:ba:c9:45:03:86:57:ac:db:af:dc:69:49:59:
d1:71:0b:56:14:f8:e8:86:ce:ae:69:b5:87:81:94:
54:c3:84:c0:95:72:15:1d:7f:bb:b9:de:ad:f3:be:
a2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D7:DD:D1:84:B9:77:5E:48:BF:22:D1:2D:FD:48:E6:30:EE:40:50
X509v3 Authority Key Identifier:
keyid:30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4c:d7:1e:d9:de:2e:aa:63:f1:ae:4d:ba:7c:07:1d:15:1d:
5e:ab:fc:f1:e2:b0:c9:42:d1:e8:54:ab:e6:79:7c:b6:76:46:
29:b3:c3:4e:31:4e:96:56:e8:c7:ad:84:e9:91:fd:d3:28:b6:
a2:ed:a1:8f:9e:01:14:85:02:34:d3:2e:f9:d3:c4:94:2e:64:
22:85:4f:aa:3c:a2:b6:97:9e:88:70:5a:9e:82:c3:7a:63:bc:
33:48:df:c2:69:6e:0d:94:ba:7e:09:71:17:61:92:9a:de:00:
ce:a1:2c:d8:b7:15:09:83:38:de:f8:ec:cd:3c:4b:01:f9:3e:
44:64:60:a2:e4:89:fe:1d:0e:08:93:7e:5f:3f:25:3f:4f:e9:
d1:a7:f5:b2:2a:ba:f7:62:46:db:b2:f2:8b:3f:06:c1:0c:85:
a7:9e:dd:01:54:dd:47:30:2c:21:0a:98:a0:eb:34:1f:6b:11:
02:9e:9d:1d:2d:44:9e:e6:23:90:57:15:62:17:60:0b:66:ba:
55:e9:6f:f6:e7:7f:47:41:1c:63:0a:05:7b:14:58:67:79:19:
f3:0f:7a:04:f9:28:73:91:9f:96:f4:b2:45:f8:ae:53:d8:07:
4e:18:b1:8f:2d:cf:83:be:ca:d8:70:a2:10:74:ed:de:47:d1:
4f:49:f8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:08 2026 by rpki-client