Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
File: MDeJJY5gnz5VjXezv9CKzzUV-pI.mft (raw, json)
Hash identifier: tGfgnlUJfRBG8X1vFzfTF00GseOnNnP6fmx2iKfmZY4=
Subject key identifier: 7A:C0:E7:CE:75:2E:8E:DC:04:85:15:8C:2E:05:8D:D0:FD:B1:E4:C8
Authority key identifier: 30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92
Certificate issuer: /CN=303789258e609f3e558d77b3bfd08acf3515fa92
Certificate serial: 019CACEBE6C062D009B4CE92C69F30F2F593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
Manifest number: 1221
Signing time: Mon 02 Mar 2026 05:01:06 +0000
Manifest this update: Mon 02 Mar 2026 05:01:06 +0000
Manifest next update: Tue 03 Mar 2026 05:01:06 +0000
Files and hashes: 1: MDeJJY5gnz5VjXezv9CKzzUV-pI.crl (hash: +qOVHKA5pCeEQmV6UOYOrSAwE3onzR72C/6ABYp8D3I=)
2: xKyGUowZMpxmP8SFriJZEYa04g8.roa (hash: Ogi3KmYI+AEeVKeJkZ4F8oVDdYgo/oQccgvjBxzVA8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:e6:c0:62:d0:09:b4:ce:92:c6:9f:30:f2:f5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303789258e609f3e558d77b3bfd08acf3515fa92
Validity
Not Before: Mar 2 05:01:06 2026 GMT
Not After : Mar 3 05:01:06 2026 GMT
Subject: CN=7ac0e7ce752e8edc0485158c2e058dd0fdb1e4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:33:e4:71:84:11:24:9b:28:a1:e4:26:10:
25:e2:f7:d0:a4:3d:11:bd:ac:cd:99:79:b0:93:18:
67:22:37:93:1e:b5:0f:21:c3:b5:88:2b:bf:76:a4:
1b:87:1f:ac:4f:c7:36:ed:b7:10:7d:21:e3:d6:c1:
6b:da:7b:21:71:1b:f0:fb:42:54:a1:0e:22:d0:e1:
62:77:20:8d:da:62:3d:52:f8:05:32:b5:84:f9:49:
05:45:f9:09:a9:7b:43:83:84:f2:4a:02:97:da:d5:
db:82:56:e3:06:6a:41:10:b4:69:71:a5:59:bc:00:
8e:55:c4:64:3f:d6:09:45:c0:4d:06:19:dd:83:e3:
bc:ba:cd:10:49:b2:6a:00:bf:4c:d2:c7:ee:04:65:
e5:38:5f:3c:ba:78:8a:94:4c:a0:c8:70:31:02:b2:
45:2e:19:0b:21:a4:ca:a1:e6:dd:c0:28:4a:7a:c5:
25:0e:47:12:a7:5e:b5:da:a5:26:78:2d:22:0e:37:
8a:d0:11:40:0d:67:40:c9:32:6d:1c:d2:b0:ab:f1:
2d:84:6a:5d:2c:d3:69:15:c1:63:e8:ed:d4:ae:b5:
80:bc:bd:3e:e7:cc:8a:7f:20:7e:35:96:f9:d5:6b:
62:fe:1a:ea:c0:42:8f:8d:17:9c:36:6d:5c:5f:a9:
08:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C0:E7:CE:75:2E:8E:DC:04:85:15:8C:2E:05:8D:D0:FD:B1:E4:C8
X509v3 Authority Key Identifier:
keyid:30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:9f:f4:aa:35:5a:59:9b:6c:76:20:70:64:1c:0d:de:09:33:
c5:fc:7c:0b:e5:fa:85:18:83:98:00:a7:4f:a4:72:e7:3d:71:
6f:ee:2b:fd:5b:5b:dd:8a:d4:25:91:a0:f3:07:49:44:17:50:
63:9a:35:5a:77:a9:ec:bb:21:ae:93:7a:93:06:0d:2e:56:f4:
f7:69:49:de:99:cd:c2:2f:fd:7c:25:eb:bf:2c:80:e2:1f:66:
b1:75:9a:19:5c:d5:d9:c2:99:f7:7c:a6:8a:16:ac:bb:42:ec:
93:77:ec:4d:d2:d1:84:06:32:53:c1:56:55:d9:92:a8:1f:f8:
c4:f5:6b:d5:46:00:04:ae:89:c3:0e:35:55:f6:b1:53:21:20:
84:88:50:28:44:6b:99:d3:a0:84:f3:44:7d:d2:08:c5:2a:92:
b1:b0:c1:68:05:c0:f9:9f:9f:c8:01:5d:3b:c0:32:41:82:7c:
5d:d1:da:e9:9e:39:fc:46:2c:fa:9e:c9:ce:35:ed:35:34:0d:
ac:b0:09:39:a0:42:bb:80:df:21:83:64:28:d3:a8:c6:57:01:
fd:54:c4:d7:61:38:44:6f:ac:6d:5f:9b:ef:bc:93:7c:3b:c5:
a4:07:08:22:a3:d1:b6:eb:4a:ba:90:88:56:6f:60:d5:f5:3a:
d2:a8:91:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:54 2026 by rpki-client