Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
File: EUPdhfoB6-wB7jMaExeeijPZAi8.mft (raw, json)
Hash identifier: s75CA1vh9ZOtBFb3AFafQQqLD8HCOevBPkS7HqjFJ1Q=
Subject key identifier: FE:CA:9E:F2:82:2B:C2:86:3A:81:68:FD:71:2D:38:33:11:66:2C:40
Authority key identifier: 11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
Certificate issuer: /CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Certificate serial: 019D2771C833ADEB5FFF676A81D352CE3C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 00:01:01 +0000
Manifest this update: Thu 26 Mar 2026 00:01:01 +0000
Manifest next update: Fri 27 Mar 2026 00:01:01 +0000
Files and hashes: 1: EUPdhfoB6-wB7jMaExeeijPZAi8.crl (hash: FZ9Wxew8jWxU2+up1XPKQRepHNKvzFls+NRbykFPiMY=)
2: JiVKV04Q5Yi0YVXZPhzPrQnrdaE.roa (hash: Je/rPrN5iQLTZAw+1b3i8YRBUtHfjaLY04H9s+UkqOw=)
3: WNCvUST9GFQgH9lNnrBxz7wn1MA.roa (hash: Y8xEIX8tbfw6KstlTGIt4As/gEkptm/Cc262V8KE5HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:c8:33:ad:eb:5f:ff:67:6a:81:d3:52:ce:3c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Validity
Not Before: Mar 26 00:01:01 2026 GMT
Not After : Mar 27 00:01:01 2026 GMT
Subject: CN=feca9ef2822bc2863a8168fd712d383311662c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:03:df:95:12:12:95:ca:19:ae:d7:c6:69:63:
ac:7c:db:7b:23:63:f3:25:36:6a:58:06:64:62:0e:
ed:ab:b9:40:fb:f0:b7:02:9c:7a:a4:e2:61:5d:7e:
96:21:91:ac:a7:63:77:58:a1:c9:76:4c:a8:37:b2:
40:13:29:3a:a2:8c:c7:f4:3d:d5:82:a6:16:fa:43:
88:c1:58:3a:2c:e1:45:8e:69:8b:80:bd:16:34:a5:
92:5a:28:73:f1:c3:19:f8:f8:5d:58:8a:be:9a:a9:
ac:ab:a7:05:e7:4f:4f:6a:38:93:cd:ae:42:ed:39:
a9:52:e2:ac:3c:ed:90:b2:86:ef:7a:1c:87:df:e7:
73:7b:5c:54:27:f3:c2:a9:4a:55:8f:b2:03:08:9b:
5a:9c:d1:fd:11:54:38:47:9c:c1:da:bf:8a:da:e0:
d3:5d:10:b9:48:c7:21:c0:41:8f:7c:d4:82:1a:a2:
67:5c:29:a5:67:d3:70:d3:86:83:36:a0:d5:73:a2:
c4:55:04:49:13:28:78:69:e6:09:7c:d1:32:ea:82:
c7:fc:25:2f:11:1f:a4:4a:97:46:e1:cc:a9:9f:f2:
48:e5:ad:43:ec:dc:21:74:39:22:ba:63:ce:d7:de:
8d:4b:ee:1c:cf:83:71:e6:af:19:4e:9b:65:74:19:
02:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CA:9E:F2:82:2B:C2:86:3A:81:68:FD:71:2D:38:33:11:66:2C:40
X509v3 Authority Key Identifier:
keyid:11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6a:5d:34:d6:f1:e5:ca:3d:e6:b9:2c:c4:ab:b2:90:dd:87:
ac:13:86:84:7c:bb:59:ad:cf:1d:f4:60:d2:e6:6b:2e:82:c2:
92:d6:31:2a:a8:98:b8:59:ad:2f:bb:66:77:a5:0e:9f:c6:e5:
62:e9:49:2c:65:cc:6e:e6:58:a7:4e:d5:4f:f9:42:58:ac:db:
54:63:ad:b4:d4:0d:09:ae:a1:ac:08:e1:e4:aa:22:61:ee:c9:
42:1e:46:94:80:8f:dd:bc:ba:70:ce:d2:c2:df:7b:b8:2b:8d:
6c:1e:d8:35:23:50:43:c6:42:82:07:73:d7:b8:b2:75:ca:28:
65:0b:41:98:b6:b3:88:bd:47:cc:c9:f7:60:76:31:6a:0f:2f:
31:cc:2f:74:19:f8:96:b3:d9:c6:4d:62:35:4e:a1:ac:8c:32:
d0:16:00:21:47:89:cf:a2:ee:3a:e3:e7:98:a1:3f:29:ac:6b:
6b:ae:15:f6:6a:dc:c5:2c:bd:61:99:dc:9b:ee:90:0b:ce:7d:
81:b9:9e:b1:75:2d:62:c3:c5:e1:d5:ed:ec:3e:3a:c3:e6:c8:
39:be:0b:67:39:5b:7d:62:81:2b:e6:13:9f:9e:e0:26:d4:0e:
40:92:38:d5:21:fe:4a:7d:8a:e1:03:b5:af:75:9b:8e:1c:cd:
4b:f2:ec:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:50:32 2026 by rpki-client