Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
File: dODVhfGshfVEks_JXh3OD8L3lw8.mft (raw, json)
Hash identifier: j+cgzgzVh4oLyX/P/EyYaXNkA0JRjTSTEzJWAvGFSdo=
Subject key identifier: 5A:EE:27:62:65:08:50:9F:32:5E:BE:8D:F1:6E:16:0C:E0:0E:82:E7
Authority key identifier: 74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F
Certificate issuer: /CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f
Certificate serial: 019CACEB83A64028D2EC25A72B16A13B4B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
Manifest number: 048F
Signing time: Mon 02 Mar 2026 05:00:41 +0000
Manifest this update: Mon 02 Mar 2026 05:00:41 +0000
Manifest next update: Tue 03 Mar 2026 05:00:41 +0000
Files and hashes: 1: dODVhfGshfVEks_JXh3OD8L3lw8.crl (hash: 9hRg/rdgiAGuPV+xGX4b4KzYlHZWvHdfyuCxq94/MKE=)
2: iw2hZNABaxf3BqGSoH50zlpBmZo.roa (hash: FEmu0jxWn7X0gK1R2H3JsdW7Vd44llV6L5PVfKQuGIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:83:a6:40:28:d2:ec:25:a7:2b:16:a1:3b:4b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f
Validity
Not Before: Mar 2 05:00:41 2026 GMT
Not After : Mar 3 05:00:41 2026 GMT
Subject: CN=5aee27626508509f325ebe8df16e160ce00e82e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:c8:a6:34:1c:d4:c4:ca:9b:50:08:3f:7b:
21:62:37:5c:6c:98:69:97:d3:89:12:ce:1b:b3:37:
51:27:f1:ff:26:2e:9a:a5:2b:3d:02:1e:a8:24:8b:
67:ad:f6:46:4c:a1:fd:b0:cc:9a:0f:10:e1:08:fb:
5f:ea:d5:83:7a:5c:8e:82:18:88:14:41:e6:b6:3b:
38:9c:8f:3b:f8:5a:90:d1:2f:17:74:5f:1e:0c:2e:
5e:a2:d3:f2:21:22:19:45:51:f3:a7:a5:37:66:e3:
03:fb:d3:18:32:97:1b:51:f4:1a:c4:bd:6c:0c:71:
5c:04:b3:b3:7b:0e:24:b1:4d:e8:1e:b4:9b:42:a0:
30:10:a5:56:59:4f:0e:5e:92:3d:9f:76:23:cc:df:
9a:45:bf:ce:05:d9:92:93:e5:61:56:a6:16:d2:95:
bb:1c:f3:89:77:ac:2b:f4:46:d0:3f:25:ae:70:03:
4e:00:6f:6a:18:23:1b:0a:e4:f3:e0:8d:f7:74:75:
4f:26:6d:db:89:68:28:2e:f1:83:67:61:5d:10:75:
5d:df:74:79:0a:81:57:90:63:3a:34:20:5f:26:40:
91:6b:6a:32:d9:df:5f:28:9f:33:10:3f:33:f3:5c:
45:af:0b:e7:a4:ec:29:92:ec:bd:81:48:48:d8:e4:
fc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EE:27:62:65:08:50:9F:32:5E:BE:8D:F1:6E:16:0C:E0:0E:82:E7
X509v3 Authority Key Identifier:
keyid:74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:5e:f4:6b:64:9f:fc:73:51:66:9d:7e:a7:30:a6:d5:20:d5:
53:9b:7b:25:a6:90:1e:31:4b:2d:fb:00:81:4c:1e:5e:09:7c:
68:9d:a3:94:16:1f:3a:e7:fa:1b:05:03:91:01:7b:06:c7:1d:
26:28:a8:ec:d5:f3:fd:cd:17:3c:98:23:1d:61:59:4a:ca:ca:
f3:88:53:b9:f3:ac:a6:b1:73:2d:24:52:cf:e6:01:93:d4:7f:
f4:2f:ef:49:7b:f7:44:7e:20:bb:82:f8:c2:14:29:b7:89:7d:
f3:f5:23:b1:63:fe:a7:ef:43:4e:ac:1d:5d:f3:a6:9d:57:d8:
09:34:06:5a:4f:4e:d4:f6:11:a0:26:a6:e8:64:b5:3f:de:67:
17:4c:89:e8:33:9b:6d:23:30:91:6e:ff:24:4e:33:41:a9:5b:
97:4f:ce:09:b7:06:9e:0f:13:c4:37:28:dd:bf:b0:59:84:4d:
8e:08:72:95:0f:c8:da:c1:7c:7a:ee:c4:a1:59:90:3b:76:35:
64:25:cc:e6:ea:f5:08:6d:85:9c:a6:04:69:6e:ef:10:41:0e:
b8:1f:b3:ae:89:44:5f:1b:7f:0d:7d:ed:18:fa:ec:43:97:98:
9e:bc:59:96:be:8c:13:ce:27:6c:1c:02:5a:66:bd:c2:7c:eb:
2f:70:4e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:52:16 2026 by rpki-client