Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
File: dODVhfGshfVEks_JXh3OD8L3lw8.mft (raw, json)
Hash identifier: pwafLlDd7qs79KbKm8CrdgfmSXFUcUu/AGZTQkjvLco=
Subject key identifier: 74:11:BD:09:1A:0F:8D:B4:A6:A7:1A:48:B3:68:B8:5F:28:A5:3D:4D
Authority key identifier: 74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F
Certificate issuer: /CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f
Certificate serial: 019D9A74B89E2BCE30F4F04185E0F968180E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
Manifest number: 050A
Signing time: Fri 17 Apr 2026 08:00:33 +0000
Manifest this update: Fri 17 Apr 2026 08:00:33 +0000
Manifest next update: Sat 18 Apr 2026 08:00:33 +0000
Files and hashes: 1: dODVhfGshfVEks_JXh3OD8L3lw8.crl (hash: Bve/0gtkVLo4jdcnZG6LW3AcuuAk5OZESA66g0urEVw=)
2: iw2hZNABaxf3BqGSoH50zlpBmZo.roa (hash: FEmu0jxWn7X0gK1R2H3JsdW7Vd44llV6L5PVfKQuGIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:b8:9e:2b:ce:30:f4:f0:41:85:e0:f9:68:18:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f
Validity
Not Before: Apr 17 08:00:33 2026 GMT
Not After : Apr 18 08:00:33 2026 GMT
Subject: CN=7411bd091a0f8db4a6a71a48b368b85f28a53d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bf:32:e3:e0:5a:0a:5b:91:89:49:8e:de:61:
0f:69:38:2b:cf:06:45:2c:fd:b8:74:89:26:5d:20:
d1:a2:35:06:b4:d8:11:78:87:ed:41:67:4a:07:eb:
3f:97:88:84:39:8f:b5:d5:ad:c9:9a:b1:71:80:e3:
61:88:09:ce:a6:01:e1:9d:27:6b:e3:99:cf:40:e7:
e6:be:2c:6b:08:8a:55:0c:4b:74:68:dd:b0:b9:c8:
68:31:23:6b:31:70:e3:f6:28:3d:4a:af:9b:26:3f:
21:38:31:f8:31:17:71:65:79:73:00:32:a9:5e:06:
e2:c8:31:31:86:a9:aa:0e:a7:73:a5:1f:70:90:e2:
ae:3f:99:4e:5d:84:e7:9f:ca:f9:52:74:d0:0d:5c:
0c:9f:8e:ec:b8:33:d4:95:87:82:8a:3c:2a:f7:fc:
b2:74:1e:b3:0b:95:9d:d2:28:3f:08:bd:4d:9b:42:
e9:e6:f2:41:df:74:2c:93:f6:22:5c:28:cc:29:0b:
86:60:59:86:4d:26:98:7e:37:de:b3:aa:a4:8c:ed:
8b:9c:21:00:df:6e:e8:c8:eb:0a:d2:66:f2:ec:6b:
2a:85:5b:df:00:82:2b:9f:56:ef:0c:ab:89:ab:d6:
d1:83:d3:e9:7b:04:48:c6:a6:f1:c3:0e:7c:0a:60:
ed:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:11:BD:09:1A:0F:8D:B4:A6:A7:1A:48:B3:68:B8:5F:28:A5:3D:4D
X509v3 Authority Key Identifier:
keyid:74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a5:67:91:27:10:27:49:22:9c:05:e8:14:80:33:64:ad:15:
1e:f5:16:6e:c3:7a:01:06:c9:25:e7:eb:ce:da:e3:29:1e:db:
39:b9:94:79:39:e3:ee:bf:90:52:2b:b3:4e:11:09:1b:ee:ed:
7d:b2:8a:61:ec:19:fd:15:37:70:05:42:68:3d:69:5b:0e:2f:
f7:60:ca:2f:bd:ff:91:cd:ed:0d:ff:fb:9b:2a:b0:50:96:ce:
42:d1:a2:57:5c:79:31:78:8a:9f:ff:c1:4e:e8:35:d8:09:f6:
25:e4:a4:5a:7d:e7:a0:41:6b:ae:d8:07:b5:9b:57:b7:ea:e3:
c3:f2:8c:88:25:01:43:de:d6:af:14:b3:9d:74:f2:ee:f0:25:
4c:b8:ae:61:91:0f:32:e1:58:50:5a:6e:4f:85:42:41:bb:e4:
fa:ff:8c:53:e5:b9:44:cf:84:d9:cd:82:18:57:99:7d:1b:d1:
a5:7d:84:63:1b:f2:6e:9b:8d:f6:ea:b2:c6:16:6a:78:2e:8e:
16:fe:cc:ee:ed:71:93:63:02:98:b2:94:d9:27:91:7e:e4:76:
31:ea:ac:8f:03:98:fa:f6:50:e9:70:0f:c3:4b:c7:9d:86:bd:
8c:b1:73:87:4e:f6:c7:d2:65:de:ae:6b:21:f6:8d:82:57:d1:
a0:ae:5b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:45:10 2026 by rpki-client