Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.mft
File: EDjazpcIXLC3fQOb0N_-VsJoolw.mft (raw, json)
Hash identifier: VTo0X8atRKE9yNg8bjywS+NuCpxOBDcT/AHkpgfwOBw=
Subject key identifier: 6B:8D:FE:14:E0:82:E1:9F:46:A7:AC:4C:5E:AB:3F:3A:99:F9:54:D8
Authority key identifier: 10:38:DA:CE:97:08:5C:B0:B7:7D:03:9B:D0:DF:FE:56:C2:68:A2:5C
Certificate issuer: /CN=1038dace97085cb0b77d039bd0dffe56c268a25c
Certificate serial: 019D2703A46CA9150E32E31D9BA2C92865E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDjazpcIXLC3fQOb0N_-VsJoolw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.mft
Manifest number: 033A
Signing time: Wed 25 Mar 2026 22:00:43 +0000
Manifest this update: Wed 25 Mar 2026 22:00:43 +0000
Manifest next update: Thu 26 Mar 2026 22:00:43 +0000
Files and hashes: 1: EDjazpcIXLC3fQOb0N_-VsJoolw.crl (hash: 0k3UzecNtOY9yHjFfq+0VYFHdHF2fCfigKisxSACzxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDjazpcIXLC3fQOb0N_-VsJoolw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:a4:6c:a9:15:0e:32:e3:1d:9b:a2:c9:28:65:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1038dace97085cb0b77d039bd0dffe56c268a25c
Validity
Not Before: Mar 25 22:00:43 2026 GMT
Not After : Mar 26 22:00:43 2026 GMT
Subject: CN=6b8dfe14e082e19f46a7ac4c5eab3f3a99f954d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c4:ee:22:ae:d9:0c:73:2b:f9:36:97:a0:19:
65:d0:83:c7:8a:70:3d:dd:48:03:54:b3:6e:c0:68:
c9:96:f2:ff:91:8e:a4:7b:59:24:93:bb:b5:cb:94:
8a:a9:7f:07:4f:97:29:4b:fa:95:0d:78:f4:4e:96:
d3:1d:0f:4a:4d:78:78:31:c5:14:51:96:73:6c:bd:
28:94:40:3b:26:48:94:21:12:d6:ce:1a:2a:c0:3b:
69:b0:65:cb:3d:e3:3d:d5:72:0a:ec:cc:70:7a:b2:
e0:17:28:af:8f:18:ca:5c:53:6c:b8:a9:96:d6:0e:
0c:7f:71:98:d5:ac:c8:22:0b:26:88:3c:19:d5:44:
81:d1:7f:ba:73:b1:84:fa:a6:6b:55:0e:a3:9a:32:
88:a8:46:05:d3:29:66:e1:2d:cb:e9:2e:ce:1b:9c:
40:e7:d9:63:3b:38:04:dd:65:f5:65:15:05:d0:b3:
7a:56:06:25:78:83:42:4f:b8:f9:0f:8a:51:c6:46:
dd:35:2b:bb:7d:64:e0:61:27:2d:ca:16:00:e8:19:
8f:95:68:9e:69:e0:5f:f7:14:d6:da:02:52:72:b9:
65:58:10:60:95:c2:c6:33:b6:2e:14:55:39:a3:d1:
9e:99:1d:a3:73:dc:6a:54:da:b7:2f:15:d7:33:0e:
bf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8D:FE:14:E0:82:E1:9F:46:A7:AC:4C:5E:AB:3F:3A:99:F9:54:D8
X509v3 Authority Key Identifier:
keyid:10:38:DA:CE:97:08:5C:B0:B7:7D:03:9B:D0:DF:FE:56:C2:68:A2:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDjazpcIXLC3fQOb0N_-VsJoolw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/fd6f33-115c-495f-8eac-9a9bc1ea6e3f/1/EDjazpcIXLC3fQOb0N_-VsJoolw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c6:5a:47:ff:8d:0d:04:7b:71:05:cd:9d:a5:ce:b7:ab:bf:
95:12:de:4c:1a:75:e0:e6:4a:16:68:54:e2:1b:d3:6b:17:f4:
8a:a5:2e:ec:2a:77:46:83:b9:2d:f0:42:2f:57:ce:14:b5:de:
9c:2e:26:4d:53:2c:77:f2:cf:8c:89:47:95:f8:70:35:f0:f6:
ac:32:ea:80:50:ed:62:a8:8c:5c:b0:6b:b1:1c:17:57:e7:7e:
39:2d:eb:6e:15:2c:6f:dc:e2:33:53:74:82:15:b3:72:4f:e6:
eb:02:63:7f:a1:3c:75:f0:89:32:ab:65:18:f9:d8:68:1b:a1:
bf:da:a6:4b:30:b0:55:9f:5f:4a:18:3f:88:a3:9e:04:5b:bf:
64:07:e2:04:0e:bf:76:d7:a4:3f:73:b3:e3:e8:f2:dc:0e:77:
ae:c3:25:20:0a:07:cb:fd:ff:8b:e8:7f:6a:ba:14:30:4d:38:
f0:5a:b8:41:1d:5b:ce:0a:0f:7c:93:55:9c:dc:af:a9:3c:eb:
89:97:cf:1c:2b:4d:86:23:fc:7e:30:52:b7:d9:6e:fb:03:f3:
b5:bc:ba:7d:ba:48:2d:67:68:2d:4d:d7:89:d7:86:b8:cf:b5:
eb:53:6d:fa:05:48:5f:8a:e1:ea:94:f2:f5:be:af:ae:02:34:
0e:17:37:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:17 2026 by rpki-client