Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
File: feY3584h1skbVKBojiD5JBYiIjc.mft (raw, json)
Hash identifier: ga7GUadLuLaj7wgfhhfvG33G/1RrVhb3nM9YwtbL/zA=
Subject key identifier: 35:A5:6D:4E:D4:5A:F9:80:AD:85:99:84:89:3B:0F:20:50:77:11:0B
Authority key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
Certificate issuer: /CN=7de637e7ce21d6c91b54a0688e20f92416222237
Certificate serial: 019D99D05E44C9E5FEE7D29F043F17A74D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
Manifest number: 1324
Signing time: Fri 17 Apr 2026 05:01:02 +0000
Manifest this update: Fri 17 Apr 2026 05:01:02 +0000
Manifest next update: Sat 18 Apr 2026 05:01:02 +0000
Files and hashes: 1: 1-PeFhmqOuGLWhYL6e4WamiqcSm8.roa (hash: D5OapCvUQLtel5Rjh+LrTfB4vqxFkS0kdGHkxYpTPSk=)
2: feY3584h1skbVKBojiD5JBYiIjc.crl (hash: 7QCj7u6bdLGiQtUCiq7md4viu9Mm+f7H5hg3XyH3bHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:5e:44:c9:e5:fe:e7:d2:9f:04:3f:17:a7:4d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de637e7ce21d6c91b54a0688e20f92416222237
Validity
Not Before: Apr 17 05:01:02 2026 GMT
Not After : Apr 18 05:01:02 2026 GMT
Subject: CN=35a56d4ed45af980ad859984893b0f205077110b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b3:02:2d:bc:4b:42:7c:65:d6:27:d0:6a:f2:
6b:e6:35:98:19:0c:98:9f:d3:70:4f:0c:81:0f:1d:
cd:ac:b5:f1:d7:38:c5:69:b4:36:1a:08:2e:30:81:
a6:11:e7:70:e6:a6:c3:51:ff:15:5a:ec:3a:71:e7:
76:24:9c:75:31:1d:d7:97:28:25:a2:42:df:c8:ab:
cb:18:9a:4a:a7:cd:bf:e9:48:c0:af:ac:85:da:a7:
94:e9:22:76:65:d4:09:cb:94:ac:a7:e5:56:5e:1d:
c2:b3:f2:37:2b:6b:5f:5c:12:e4:ba:9f:6f:ad:3f:
cf:30:c6:a6:51:90:22:08:cf:04:63:98:04:62:5f:
b7:c6:0c:0e:16:ea:32:c0:1a:23:57:ba:9a:17:c9:
85:e3:c0:ec:3f:34:8c:c1:df:e2:09:f2:c1:15:54:
95:1e:bb:d0:61:ef:98:f6:b8:51:a2:45:4c:4d:89:
0d:8f:84:95:91:14:7a:29:e6:da:e7:06:9b:a9:9c:
d0:e4:db:b6:8e:cc:2f:37:3a:8d:c2:ef:b8:4c:ca:
57:f1:cb:fa:5a:c9:3b:1f:00:be:ae:89:7b:82:86:
ea:6b:29:9f:b5:1c:39:5c:8a:6d:06:15:26:56:1a:
36:30:8c:74:eb:da:92:6b:89:a8:6f:3c:4b:2f:00:
a4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A5:6D:4E:D4:5A:F9:80:AD:85:99:84:89:3B:0F:20:50:77:11:0B
X509v3 Authority Key Identifier:
keyid:7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:17:29:52:c9:f7:39:5c:21:bc:b9:c4:e2:27:66:28:ad:82:
c6:fa:6e:2c:c9:68:61:34:70:d6:af:7c:41:c9:b5:22:05:33:
c0:a6:4c:1f:e4:c1:b9:71:36:fe:13:81:97:a7:68:98:93:f2:
77:83:3d:a6:9e:b8:95:0a:da:c6:ed:65:73:ac:40:ea:95:15:
14:a6:11:eb:64:b7:a0:c8:13:a9:a3:f4:7d:93:1e:6d:2d:92:
ff:db:d6:9a:dd:b2:9f:77:2a:b7:2b:96:9d:1f:d5:fb:32:80:
8b:fc:6d:28:6e:1f:a8:65:1b:e7:75:80:31:0d:24:81:e0:53:
c6:3d:2e:e2:9e:92:77:b6:94:80:2b:5b:83:49:da:dd:0a:9c:
ce:78:42:85:9d:17:de:9d:22:da:ec:1f:08:6c:f4:5b:09:5d:
88:4b:86:24:61:3b:81:ee:63:b8:df:5f:a6:14:2c:08:b8:da:
29:3d:f6:2a:d5:f7:4c:79:7a:d7:9a:52:6d:48:bb:0d:5c:07:
27:30:0d:9f:90:d3:7f:c6:3e:f9:3b:76:eb:41:64:95:2d:aa:
f4:fe:b6:ab:dc:c5:22:29:7f:21:0c:b8:1e:0f:15:f1:d0:c3:
82:88:3a:a2:56:d3:20:f1:0a:80:72:44:0e:65:80:6a:15:42:
bf:5b:47:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:46:59 2026 by rpki-client