Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
File: MDeJJY5gnz5VjXezv9CKzzUV-pI.mft (raw, json)
Hash identifier: uRNnRdjKsy4NIEI+QODAnhRwX/r6Q173vN7iSbZVO10=
Subject key identifier: 92:5E:08:CA:7F:2C:28:E7:CE:4C:C1:C1:3E:ED:88:63:20:24:AA:0C
Authority key identifier: 30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92
Certificate issuer: /CN=303789258e609f3e558d77b3bfd08acf3515fa92
Certificate serial: 019D9A7495D127D9EE0E2036D18BF53FF150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
Manifest number: 129C
Signing time: Fri 17 Apr 2026 08:00:24 +0000
Manifest this update: Fri 17 Apr 2026 08:00:24 +0000
Manifest next update: Sat 18 Apr 2026 08:00:24 +0000
Files and hashes: 1: MDeJJY5gnz5VjXezv9CKzzUV-pI.crl (hash: iQ/1bP1U2UCV0rSnSnwkN/1pNGKQH+hWFZwp3jNCmqk=)
2: xKyGUowZMpxmP8SFriJZEYa04g8.roa (hash: Ogi3KmYI+AEeVKeJkZ4F8oVDdYgo/oQccgvjBxzVA8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:95:d1:27:d9:ee:0e:20:36:d1:8b:f5:3f:f1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303789258e609f3e558d77b3bfd08acf3515fa92
Validity
Not Before: Apr 17 08:00:24 2026 GMT
Not After : Apr 18 08:00:24 2026 GMT
Subject: CN=925e08ca7f2c28e7ce4cc1c13eed88632024aa0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:23:6e:f1:ca:a0:22:08:35:95:51:9b:ce:d2:
3d:8f:9d:db:12:32:21:a7:d2:1c:41:1f:34:5a:b6:
25:ae:d3:24:9f:e7:8c:7c:9e:f8:3f:6b:ee:55:cb:
9d:1f:20:94:47:0e:38:f2:99:54:25:61:65:79:d3:
4d:a3:10:49:bf:a9:61:58:6d:5f:6f:64:98:7f:78:
fa:68:c4:9c:2e:32:30:32:56:a0:b5:49:67:88:6b:
23:a0:17:ea:72:26:02:f4:77:60:5d:19:f3:9d:45:
7d:11:d9:a1:da:17:16:e0:6d:ec:cf:da:92:b9:f6:
6d:67:51:eb:a8:be:9d:c6:21:f4:0d:37:31:e7:ed:
8a:5b:28:79:b8:a5:47:39:09:00:95:10:a1:3f:5c:
8b:dd:88:f4:27:95:89:af:2c:0c:94:4f:3c:e3:d4:
7e:be:72:b4:1b:9f:3e:be:aa:2f:08:90:5f:0b:ae:
2a:9b:19:40:3d:77:06:0f:71:69:e3:b2:2f:51:8f:
0a:97:be:d4:5d:55:e3:d2:cd:f6:e4:ae:74:46:d1:
03:c0:53:43:b7:7c:62:b1:05:08:9a:58:af:de:d2:
ee:ad:e2:61:f8:8b:89:97:af:57:f5:15:8c:0b:e4:
5f:7b:16:f6:9a:c6:0c:99:d7:4a:16:46:67:39:98:
28:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5E:08:CA:7F:2C:28:E7:CE:4C:C1:C1:3E:ED:88:63:20:24:AA:0C
X509v3 Authority Key Identifier:
keyid:30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:9a:5c:f3:82:ee:f3:73:b5:02:ba:8c:d7:5c:e2:cc:64:45:
c8:2c:fc:83:76:18:89:7f:8d:15:52:60:d9:07:6b:10:cb:65:
de:88:aa:ac:fa:69:ec:be:af:3f:8d:fd:6a:61:4e:a2:ce:1b:
db:54:99:a7:2b:73:d2:53:48:b7:f5:83:81:c3:d4:3f:75:77:
76:3f:cf:39:b9:ef:ce:86:e4:fe:ad:31:39:b6:84:13:38:a4:
0d:01:f7:c7:ac:6f:95:0a:6f:a1:f7:ed:b7:b2:c6:4b:9c:cb:
4b:6d:d1:69:76:00:f1:e6:7b:f7:d7:44:47:85:e8:5f:ef:70:
46:6d:01:3c:47:c0:d4:57:73:ff:68:c7:0e:9d:fe:5b:3a:71:
ef:a6:f9:94:32:a1:1b:7d:d4:aa:96:cb:7f:6b:94:9b:6b:b3:
b5:6a:b2:d3:d9:be:77:4a:e4:10:8f:9c:84:6c:b4:05:bd:8a:
24:c9:bd:ff:e6:db:68:8a:0c:d1:66:b3:4b:16:3c:32:c9:38:
dd:10:66:d7:0b:c7:56:3a:a4:f7:42:e6:a8:59:9b:85:93:35:
ec:de:43:9c:45:8c:67:5d:b9:12:74:57:68:d7:63:ee:a3:82:
16:9b:2b:34:2a:11:78:31:88:99:f4:dc:6d:fc:43:10:42:77:
72:f7:c6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:39:24 2026 by rpki-client