Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft
File: EIanwN6nPdD5Ti6f4ayatnAbIlM.mft (raw, json)
Hash identifier: iCcC+Yvf4i05/b/sz57i3TsDwjG/fH1uMf4ou1O8BSA=
Subject key identifier: 63:79:BC:EB:99:68:E6:44:76:85:01:7D:3E:29:B4:68:69:16:A4:F8
Authority key identifier: 10:86:A7:C0:DE:A7:3D:D0:F9:4E:2E:9F:E1:AC:9A:B6:70:1B:22:53
Certificate issuer: /CN=1086a7c0dea73dd0f94e2e9fe1ac9ab6701b2253
Certificate serial: 019D284D92785ED48DE68DAE1413289455FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 04:01:05 +0000
Manifest this update: Thu 26 Mar 2026 04:01:05 +0000
Manifest next update: Fri 27 Mar 2026 04:01:05 +0000
Files and hashes: 1: EIanwN6nPdD5Ti6f4ayatnAbIlM.crl (hash: dPCpOXE1IjF1AeFFbrHOBl+32pAoNGNoAtCRWCg5Dqw=)
2: gqQ4t9K7Woy1GxUGG1hexNLdt3Q.roa (hash: M/QSynOO9yMEtpC0jJjvRUrMUkRrfua7Bs0F5lyd2Z8=)
3: oxS76504E-QOeHkwlIpZj9zrXis.roa (hash: FkDF/lt7EB2+x6Go/eHE5SAyhxY1+M2DCQUU47W6MiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:92:78:5e:d4:8d:e6:8d:ae:14:13:28:94:55:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1086a7c0dea73dd0f94e2e9fe1ac9ab6701b2253
Validity
Not Before: Mar 26 04:01:05 2026 GMT
Not After : Mar 27 04:01:05 2026 GMT
Subject: CN=6379bceb9968e6447685017d3e29b4686916a4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:c2:7a:01:33:05:b7:33:8c:18:28:3f:a4:
6d:63:d4:fa:83:fc:90:c3:a3:21:a1:ce:75:21:f4:
87:4b:c1:81:72:c8:ff:7c:e8:b9:7f:ca:2e:8a:ec:
ce:75:2d:80:d2:f9:56:ce:92:90:c8:d3:b6:b9:fd:
32:4c:00:b8:03:81:c2:bc:2a:b9:65:33:7c:b2:d8:
37:91:cf:b5:80:6f:41:5e:c0:38:02:cb:d1:ce:d1:
b0:45:40:37:2e:d4:ab:3d:86:5a:76:a4:79:c0:8a:
05:4b:39:56:35:c3:61:57:77:fe:bb:ed:45:e0:87:
53:3b:29:23:58:ff:50:ee:01:88:e1:5d:af:f5:f0:
03:47:d2:09:57:92:e7:77:e8:91:52:db:01:cf:06:
ce:54:c6:89:e1:ef:42:05:68:31:67:87:42:11:7d:
8e:3a:1b:2f:df:75:ee:63:67:c6:a6:c1:35:1c:62:
5f:30:a8:14:92:d0:fa:7e:cd:1c:60:64:b3:e9:49:
76:65:f3:cf:15:bf:70:04:25:73:73:ea:96:71:4b:
1d:81:4d:0e:39:6a:56:7f:9c:be:87:da:e8:6d:c8:
bf:f3:02:a7:2e:81:19:82:d0:05:dc:e2:53:9b:43:
d4:d6:30:44:96:8b:66:21:77:98:f4:3a:6a:53:0f:
70:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:79:BC:EB:99:68:E6:44:76:85:01:7D:3E:29:B4:68:69:16:A4:F8
X509v3 Authority Key Identifier:
keyid:10:86:A7:C0:DE:A7:3D:D0:F9:4E:2E:9F:E1:AC:9A:B6:70:1B:22:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4e:79:3b:01:41:d6:7b:af:3e:6a:40:51:46:87:54:99:87:
57:8b:ef:21:c6:60:16:53:a8:84:8f:07:f5:13:9f:49:fe:ff:
74:5b:2b:dc:27:19:6a:4a:9b:49:32:ee:6d:a7:d3:9b:6c:64:
16:77:38:d9:48:96:d3:dc:83:69:f2:83:db:06:cd:db:aa:b9:
89:88:c2:a8:3c:b2:2c:77:4b:e2:2e:2f:a7:03:db:22:6d:eb:
7d:d3:42:c0:54:fa:40:29:75:48:29:21:33:59:38:ef:5f:d4:
04:09:ea:8d:6c:72:31:1d:a7:8a:2e:bb:dd:30:5d:0f:e8:a8:
4c:49:69:d4:36:2e:6d:c9:3a:02:68:00:ff:6f:07:c1:db:46:
3b:c1:11:66:af:25:8d:be:7c:9b:0d:6f:48:4c:bc:9f:69:0e:
23:57:28:12:1f:31:2d:8d:90:a7:e8:53:ef:8d:e1:6d:e4:72:
9d:92:dc:99:65:ed:83:1d:5d:ef:e5:2a:59:f0:24:f5:bd:4d:
ad:32:61:bc:a6:56:71:36:be:6b:40:fc:b2:f1:33:46:f0:71:
be:0f:54:1a:ab:8f:f5:1e:0a:91:91:5c:a9:49:51:e6:50:98:
21:0b:15:a5:df:79:c4:a4:e3:67:09:4b:a6:3d:3a:9b:2f:71:
32:c0:a3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:59 2026 by rpki-client