Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
File: eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft (raw, json)
Hash identifier: 6e5kq8bmOJAFUGYKx+yR0NWrjwJrxAs6hC3q2ZSLjos=
Subject key identifier: 8D:AB:B6:11:A1:2A:4F:6C:57:68:A3:8F:70:D5:67:78:6F:F1:BA:B8
Authority key identifier: 78:34:A7:5D:F5:05:64:7C:7F:50:7D:84:C2:E2:40:E9:19:FE:CB:25
Certificate issuer: /CN=7834a75df505647c7f507d84c2e240e919fecb25
Certificate serial: 019D29608E5F2B4DB6512DF5AA81486D4FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
Manifest number: 034E
Signing time: Thu 26 Mar 2026 09:01:26 +0000
Manifest this update: Thu 26 Mar 2026 09:01:26 +0000
Manifest next update: Fri 27 Mar 2026 09:01:26 +0000
Files and hashes: 1: eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl (hash: 2NkIymRg55hJl0o2fMr5ydvKoy1ZROorWYvIdoh0Mks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:8e:5f:2b:4d:b6:51:2d:f5:aa:81:48:6d:4f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7834a75df505647c7f507d84c2e240e919fecb25
Validity
Not Before: Mar 26 09:01:26 2026 GMT
Not After : Mar 27 09:01:26 2026 GMT
Subject: CN=8dabb611a12a4f6c5768a38f70d567786ff1bab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:54:a4:0b:d9:70:06:4c:96:5f:f0:12:a2:ec:
ba:9f:90:ca:e8:1f:44:7e:d1:9b:0d:79:0d:c0:c8:
90:0a:08:01:0d:32:8c:95:b0:fd:44:bf:28:8b:74:
d8:52:70:4c:36:eb:71:7a:0f:69:b6:6e:05:f5:f1:
bf:c0:14:b2:0d:ef:cf:6b:c4:65:fa:af:1a:25:fd:
f4:8e:25:86:0b:38:65:9a:a6:17:16:e8:3f:cb:10:
21:a7:60:fa:33:16:b1:32:57:76:21:6e:cf:6d:11:
c8:1a:ff:8b:e7:7b:0c:e6:0c:fe:0e:af:b9:07:dd:
3d:f7:7e:1e:46:0e:9f:0a:de:57:f3:9c:41:b4:d7:
32:a0:0b:42:44:1b:f5:23:21:12:af:33:fb:69:a1:
b4:2e:ae:12:5f:15:70:e9:51:c1:61:e4:a7:83:a2:
3f:01:71:57:f4:73:33:9a:cf:63:7b:61:ce:fa:13:
fa:e5:45:7e:0f:a0:da:16:c8:4b:1e:62:62:10:d8:
d3:bd:3e:f8:91:eb:f1:40:78:9d:c3:29:08:df:7c:
c4:26:20:3b:ae:bd:ea:89:e3:77:ce:de:9e:49:37:
49:e3:2d:3d:c1:04:6c:89:1c:da:13:f9:33:a6:8d:
01:72:49:ea:b7:d0:b2:5b:13:fa:f4:56:ef:44:68:
a9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AB:B6:11:A1:2A:4F:6C:57:68:A3:8F:70:D5:67:78:6F:F1:BA:B8
X509v3 Authority Key Identifier:
keyid:78:34:A7:5D:F5:05:64:7C:7F:50:7D:84:C2:E2:40:E9:19:FE:CB:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:dc:46:6a:c0:4c:40:72:38:0f:7f:70:7b:bc:2d:96:48:db:
b0:4d:ea:71:23:2b:c5:d8:e4:57:1d:da:45:a5:9a:4b:bf:af:
a1:64:0e:35:d6:2d:66:cd:b4:25:99:25:41:d8:24:44:68:26:
9d:ac:5c:3b:e0:fc:72:5d:d4:9d:e0:59:3a:63:3b:76:57:9b:
c4:41:c5:b9:8c:fb:7b:f5:4d:8f:c4:55:d2:2c:d4:6b:fb:d8:
fc:bb:a5:06:01:e2:e8:c1:2b:ef:2f:49:ff:a8:a7:94:0d:d9:
e9:3c:ac:95:23:8b:f4:7a:55:ce:d6:19:81:61:1d:65:7e:d0:
ba:4f:c7:18:1e:c0:65:81:ce:d7:5a:86:9d:03:fc:84:e0:9c:
57:ac:c6:d2:2c:52:99:7a:28:ce:34:29:89:f8:8c:32:d1:5b:
bf:bc:f3:ee:a4:86:e6:e5:56:b2:69:27:fa:dc:27:33:f5:e5:
36:74:15:de:03:3f:b6:27:5d:23:f2:4a:3b:fc:85:9a:3b:b6:
c9:06:6e:3b:9b:0b:b1:83:19:1e:b1:00:22:2c:f7:b2:8f:31:
ed:9a:0f:de:4e:1c:9d:a2:63:57:1a:5d:57:af:9a:69:cc:91:
37:ce:e2:cf:45:e5:ff:7e:67:b3:24:77:b1:24:4a:4b:0d:61:
1d:76:e8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:53:42 2026 by rpki-client