Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
File: rSzfJ9neZesk5c_J0xDkyKAwFGA.mft (raw, json)
Hash identifier: 7gPgRY3NZ7YjYFLeXp95N3DjhyKLPw3ICAS9ol3tyj4=
Subject key identifier: A7:F1:09:AB:72:38:D3:6F:E0:12:40:6D:88:81:4E:88:97:32:51:3F
Authority key identifier: AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
Certificate issuer: /CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Certificate serial: 019D981911D7BE5743DB54298C79C4770BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
Manifest number: 0ECA
Signing time: Thu 16 Apr 2026 21:01:12 +0000
Manifest this update: Thu 16 Apr 2026 21:01:12 +0000
Manifest next update: Fri 17 Apr 2026 21:01:12 +0000
Files and hashes: 1: ecknfRAIvluVmZ7la5oiT_2luz4.roa (hash: HiuC3Vr01IHEO7h5/vdTPtdaVoDtm8DnoIetX64bo4k=)
2: rSzfJ9neZesk5c_J0xDkyKAwFGA.crl (hash: Da+pMJJo4KMn1NGNhqLgTyzEJzxF7Q0ovzYMv5RnjCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:19:11:d7:be:57:43:db:54:29:8c:79:c4:77:0b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Validity
Not Before: Apr 16 21:01:12 2026 GMT
Not After : Apr 17 21:01:12 2026 GMT
Subject: CN=a7f109ab7238d36fe012406d88814e889732513f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:1c:3d:b1:f5:07:3a:ff:e0:5e:10:d7:d3:
db:45:30:9a:e4:75:e1:6e:dd:9a:76:b7:9f:fd:05:
d5:04:b0:91:a9:14:2d:77:13:a7:f1:ad:ef:47:fd:
6e:ba:7d:94:9a:fb:dd:cb:de:a7:c6:0a:6a:7a:5a:
6e:20:28:a7:57:24:df:97:e4:dc:c4:4b:fa:61:f5:
5e:59:3e:34:ba:77:61:a7:7d:ad:1c:08:36:77:0c:
2f:53:ec:1c:a1:bb:9b:9d:7e:6c:31:28:43:ce:d1:
1c:9f:07:5b:9a:46:2f:b6:13:59:bf:b7:e5:d1:52:
ce:99:4f:cb:01:31:f4:9b:a7:65:23:45:47:c4:e5:
54:ca:de:61:33:5a:49:f9:a2:38:be:9f:4f:f3:5f:
77:a9:c7:c1:5a:3c:e6:ac:49:54:d1:e8:f6:c1:36:
3a:ca:0b:a3:c4:61:d8:eb:5c:0c:a4:7e:2e:b3:c5:
1e:4a:17:5a:ae:16:a0:a6:0d:ec:d6:71:19:fb:4e:
9c:26:09:45:86:58:90:0a:49:cc:91:6f:e4:44:cd:
e7:81:d6:fb:b7:51:c5:45:85:d6:13:a9:4f:e4:31:
21:05:e4:19:e6:d6:4f:11:b4:a8:42:c1:52:cc:4a:
de:9e:c4:4b:11:89:db:01:53:8a:81:dc:be:f1:cf:
c3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F1:09:AB:72:38:D3:6F:E0:12:40:6D:88:81:4E:88:97:32:51:3F
X509v3 Authority Key Identifier:
keyid:AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:05:93:88:c8:49:6e:39:53:ce:80:20:5e:c7:f7:0e:47:6e:
4f:3d:57:bd:57:fe:a3:44:e8:d9:06:c6:b6:9f:ba:1d:6a:73:
91:62:d4:c2:d6:a8:bb:5b:58:21:37:e0:12:55:e4:33:54:41:
02:1d:80:d2:5b:62:4e:02:78:60:24:03:ba:25:05:e8:46:40:
cf:90:1d:5b:1c:9a:24:58:42:7c:01:3b:9d:1f:f0:09:00:28:
09:3e:dd:68:9a:40:c8:b0:1d:15:11:ed:43:97:0c:4e:ff:a5:
28:5e:4a:65:6e:b3:58:c2:e0:ae:79:84:be:f8:a4:99:8b:00:
57:9c:cb:aa:f8:48:91:b6:11:d6:b6:42:58:95:6e:82:56:66:
f7:b8:b8:7a:77:e8:d0:3c:8c:06:35:1e:1b:12:a8:c8:93:42:
e2:35:6c:3a:ad:8b:dd:83:d7:99:04:97:37:c8:69:1d:5b:8f:
96:e9:21:5b:e1:dd:59:6a:77:91:f3:9b:0b:b4:89:4a:72:46:
b9:fd:8b:a9:5d:37:26:a9:c8:10:5c:0e:e0:35:63:77:75:0d:
77:dc:ca:e6:63:5f:27:02:1b:63:aa:a9:ee:38:d8:fe:fe:18:
86:f8:ac:d5:23:b9:bd:99:cc:f7:20:38:53:fd:fc:f3:67:c6:
92:34:a3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:15 2026 by rpki-client