
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
File: edFXhuZE1JfLeisyU71D2S5Jxas.mft (raw, json)
Hash identifier: zGPHDf1/bQh6pb0pkRsgYyUFN/tF0mvo21gTjJnpAfU=
Subject key identifier: 49:2A:43:38:D5:CD:E7:A4:A0:4E:DA:37:A7:37:CE:1B:AE:1A:EB:90
Authority key identifier: 79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB
Certificate issuer: /CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
Certificate serial: 019D26287E9BA5CC9A245368D12A9B7E3522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 18:01:21 +0000
Manifest this update: Wed 25 Mar 2026 18:01:21 +0000
Manifest next update: Thu 26 Mar 2026 18:01:21 +0000
Files and hashes: 1: 1oQnHtziYZUN1dZc7QkQQyuqMPE.roa (hash: j6nJzk5ZsSd6XpFmMvEADhEDlPdaRY5G9ebbRW3253M=)
2: edFXhuZE1JfLeisyU71D2S5Jxas.crl (hash: RyW9b0Pv3syZK23I+yPJ4LkUBJ/PFSueOoD7hy8+qGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:7e:9b:a5:cc:9a:24:53:68:d1:2a:9b:7e:35:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
Validity
Not Before: Mar 25 18:01:21 2026 GMT
Not After : Mar 26 18:01:21 2026 GMT
Subject: CN=492a4338d5cde7a4a04eda37a737ce1bae1aeb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:c3:45:dc:dc:5d:a8:d5:00:0c:71:4f:fd:
55:c3:4b:05:a3:63:93:63:ed:45:34:3f:5f:6b:1f:
b1:7a:0c:83:0a:ff:f8:d8:40:b6:a3:d6:9a:9d:29:
fd:55:7c:a6:83:0b:6c:a9:1c:7e:81:6f:1d:b4:76:
b6:f6:7b:e9:db:07:79:0d:b9:da:cc:75:1a:03:84:
56:9c:8b:4f:e6:5b:5c:96:b6:b1:c2:23:0c:5d:ea:
22:58:53:dd:64:3b:04:ba:05:2a:2b:0e:12:b5:27:
3c:8f:d3:bb:11:84:1c:ab:d0:3a:f6:86:55:71:e3:
70:6f:6d:8f:58:1e:9a:91:5f:50:b1:6e:a8:d1:14:
1d:32:1e:25:24:ef:55:11:e2:9c:d5:90:09:b4:90:
cd:54:0e:9f:64:23:bf:dd:cf:a4:2b:32:81:cb:ff:
8a:38:1f:df:0e:d2:04:d8:50:4e:95:ee:90:31:a9:
a8:fa:9d:dd:ba:4f:c5:11:25:6f:02:e2:8d:64:50:
27:27:a9:a1:db:3e:c0:48:dc:24:c9:71:a7:55:4a:
f8:ef:60:1b:94:84:61:d5:88:56:5c:b2:91:1c:00:
55:de:28:16:9d:72:e6:36:5a:73:f2:e2:e0:09:f6:
ae:b0:89:5b:25:31:08:2d:32:fb:1d:62:db:08:a3:
4c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2A:43:38:D5:CD:E7:A4:A0:4E:DA:37:A7:37:CE:1B:AE:1A:EB:90
X509v3 Authority Key Identifier:
keyid:79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:fb:2c:78:22:f5:38:66:fe:65:fa:f8:55:5c:07:fa:64:8b:
96:a0:83:ff:c6:d1:84:62:d2:b8:e2:ff:78:fe:12:a6:48:da:
83:80:cc:59:3a:7a:37:b3:12:53:9b:4f:1c:d8:08:b6:a9:97:
5d:6d:7a:7b:f9:93:1d:17:90:cd:07:b6:2e:1f:cf:78:2d:32:
d2:a4:27:3f:71:e4:70:a3:90:a8:23:65:e3:64:4d:0f:f8:c6:
e2:04:3e:37:3a:c4:1e:d1:d4:c9:0f:89:01:1b:2d:07:0e:4e:
f3:b1:9f:a8:04:ff:64:03:89:bb:50:96:cd:a9:a7:19:29:23:
8f:75:6d:68:ba:1c:de:57:ed:24:98:48:50:5d:d7:df:b5:61:
91:b2:12:ec:da:ae:6b:64:27:c0:66:c0:1f:22:56:82:a1:17:
08:66:74:b5:dd:7d:f7:7c:63:2e:4e:10:f8:c9:9b:2d:9d:47:
d7:b4:b0:e8:35:72:e8:bd:70:e5:b1:ba:bb:41:22:82:df:06:
29:e8:2f:61:92:52:91:17:ce:7f:4c:19:75:6d:47:df:92:a6:
1b:7c:21:3a:d5:21:e4:dc:70:fa:d5:cc:6c:33:7d:b2:83:93:
7c:ee:81:9a:15:ec:57:13:1c:01:52:2e:b9:03:1c:8e:1d:78:
19:35:de:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:53:19 2026 by rpki-client