Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
File: ekQ0Re8M2qdnJh9OCxILvj_OByc.mft (raw, json)
Hash identifier: VUwG1IzRJTrSmM2xBNhXGxA+jeos+iqdNZDpVBauq3s=
Subject key identifier: 28:9F:A2:A6:87:B6:34:3D:39:4D:D5:F3:20:E8:B5:47:6B:32:DB:EC
Authority key identifier: 7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
Certificate issuer: /CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Certificate serial: 019D27047222D7213ECE68F903EBEA3EA1CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:01:35 +0000
Manifest this update: Wed 25 Mar 2026 22:01:35 +0000
Manifest next update: Thu 26 Mar 2026 22:01:35 +0000
Files and hashes: 1: ekQ0Re8M2qdnJh9OCxILvj_OByc.crl (hash: TvwPb5qHbunN1c4HKlKYbBb7ot23Kb6Zj6vrUiYZj10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:72:22:d7:21:3e:ce:68:f9:03:eb:ea:3e:a1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Validity
Not Before: Mar 25 22:01:35 2026 GMT
Not After : Mar 26 22:01:35 2026 GMT
Subject: CN=289fa2a687b6343d394dd5f320e8b5476b32dbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:45:4c:9c:60:5b:3e:e4:f6:93:db:ce:a8:ca:
e8:7c:cb:2f:05:17:cd:4a:1f:d4:12:9e:97:3c:17:
dc:e3:c5:69:41:e3:8b:02:b5:61:7d:c9:4f:2d:c5:
2d:3f:f9:ea:4d:29:d1:39:50:fe:20:d6:97:77:60:
fe:c7:0b:a9:ff:94:ac:69:4d:f5:9f:c6:5e:7e:99:
54:6b:6f:58:d5:7f:fc:79:ea:da:1e:0b:18:af:cc:
06:f6:e0:fd:da:30:2d:1e:85:bf:18:20:49:8e:30:
7f:d5:62:38:f4:c8:73:b7:e6:6b:ae:44:b5:99:61:
85:dc:31:36:16:75:34:5e:a5:bf:67:9f:49:a4:5e:
33:d9:f7:b0:02:05:03:18:4b:db:a4:fa:5c:ff:6a:
3b:f4:36:b0:5d:2e:13:d6:ab:17:4a:45:01:ae:42:
c1:3e:88:04:8d:42:79:ef:3d:c9:cd:b9:8c:50:29:
be:18:76:6c:b1:fc:07:f0:b6:ff:57:2d:62:5c:7a:
28:7b:0b:eb:2e:fc:2a:fb:a4:f9:31:2d:e8:7b:56:
fc:21:0f:07:d8:91:14:e2:ca:19:62:bb:5e:1e:a5:
8a:6d:1b:49:87:a4:f3:70:d5:70:51:46:6d:dc:6a:
72:7e:28:4b:f6:8e:36:22:ba:98:51:c7:b8:d8:f2:
cb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9F:A2:A6:87:B6:34:3D:39:4D:D5:F3:20:E8:B5:47:6B:32:DB:EC
X509v3 Authority Key Identifier:
keyid:7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:06:0d:3b:84:6c:0c:9b:03:b2:db:59:ef:af:00:5a:25:53:
c5:3f:10:9a:14:85:d7:24:9b:19:e2:63:e1:99:d8:3e:c8:91:
9a:cd:60:b1:04:1e:93:10:cb:20:ec:41:bb:12:b3:74:e5:cf:
43:cf:44:ee:09:02:3d:10:6c:06:fe:d6:3f:db:8e:95:7e:6d:
39:6d:61:1d:f0:b3:69:35:c3:62:23:28:4d:60:40:63:d3:dd:
17:bd:c2:cd:d4:2e:24:1b:56:98:23:d1:a9:06:02:e0:d8:0f:
0d:0f:c3:85:81:33:0c:26:65:ca:a4:a2:4f:a8:67:8c:2d:9a:
4e:f6:79:21:af:e1:45:02:d0:1f:33:42:54:03:f2:aa:82:12:
bb:e8:01:f0:af:9b:66:24:d1:39:0e:51:33:c5:73:8f:9d:82:
24:a7:3b:64:c0:5d:6a:b8:41:74:2d:31:59:34:e2:d5:7f:88:
71:bd:b3:b5:ed:13:86:bd:b2:e5:42:a9:d9:35:57:f3:2f:a3:
7e:ee:09:c4:7d:59:61:54:8e:7f:4b:f5:5e:3f:3a:fb:7b:58:
37:1d:e2:8a:4d:69:01:30:93:be:01:ca:fb:b2:64:a8:da:83:
21:45:52:a5:f1:be:be:09:6b:06:9b:b7:18:a1:17:6c:d3:8a:
74:b2:e9:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBHIi1yE+zmj5A+vqPqHNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNDQzNDQ1ZWYwY2RhYTc2NzI2MWY0ZTBiMTIwYmJlM2Zj
ZTA3MjcwHhcNMjYwMzI1MjIwMTM1WhcNMjYwMzI2MjIwMTM1WjAzMTEwLwYDVQQD
EygyODlmYTJhNjg3YjYzNDNkMzk0ZGQ1ZjMyMGU4YjU0NzZiMzJkYmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUVMnGBbPuT2k9vOqMrofMsvBRfN
Sh/UEp6XPBfc48VpQeOLArVhfclPLcUtP/nqTSnROVD+INaXd2D+xwup/5SsaU31
n8ZefplUa29Y1X/8eeraHgsYr8wG9uD92jAtHoW/GCBJjjB/1WI49Mhzt+ZrrkS1
mWGF3DE2FnU0XqW/Z59JpF4z2fewAgUDGEvbpPpc/2o79DawXS4T1qsXSkUBrkLB
PogEjUJ57z3JzbmMUCm+GHZssfwH8Lb/Vy1iXHooewvrLvwq+6T5MS3oe1b8IQ8H
2JEU4soZYrteHqWKbRtJh6TzcNVwUUZt3GpyfihL9o42IrqYUce42PLL/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCifoqaHtjQ9OU3V8yDotUdrMtvsMB8GA1UdIwQY
MBaAFHpENEXvDNqnZyYfTgsSC74/zgcnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yN2M1ZWYtMWVhYy00MTVmLTlhYzAt
NWIzNWQ4ODE3NWQ1LzEvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8yN2M1ZWYtMWVhYy00MTVmLTlhYzAtNWIzNWQ4ODE3NWQ1
LzEvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQYNO4Rs
DJsDsttZ768AWiVTxT8QmhSF1ySbGeJj4ZnYPsiRms1gsQQekxDLIOxBuxKzdOXP
Q89E7gkCPRBsBv7WP9uOlX5tOW1hHfCzaTXDYiMoTWBAY9PdF73CzdQuJBtWmCPR
qQYC4NgPDQ/DhYEzDCZlyqSiT6hnjC2aTvZ5Ia/hRQLQHzNCVAPyqoISu+gB8K+b
ZiTROQ5RM8Vzj52CJKc7ZMBdarhBdC0xWTTi1X+Icb2zte0Thr2y5UKp2TVX8y+j
fu4JxH1ZYVSOf0v1Xj86+3tYNx3iik1pATCTvgHK+7JkqNqDIUVSpfG+vglrBpu3
GKEXbNOKdLLpCg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:42:06 2026 by rpki-client