Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
File: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft (raw, json)
Hash identifier: KelBpMzd84SOq8ds5gi4kAM11l3vvvHnlzhg9IGs+Yo=
Subject key identifier: D9:18:34:47:49:83:55:90:F8:D2:C7:52:CA:0A:C6:FF:88:35:D7:B5
Authority key identifier: 10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
Certificate issuer: /CN=10515090f850e337eb3b118a157e4e39083b77a6
Certificate serial: 019D29CE9A860F7BFDC31310C2122BCAC294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 11:01:38 +0000
Manifest this update: Thu 26 Mar 2026 11:01:38 +0000
Manifest next update: Fri 27 Mar 2026 11:01:38 +0000
Files and hashes: 1: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl (hash: aE+1i5t7OoCWN1lVOfYE5/y2xCizB81IeV+Ff/+0RRo=)
2: kKlXzTXjueD4aV2RPewpgcu-BS4.roa (hash: o9M2DvXmpV9HLolJqNlhrCOdw2MyjQNTI+g5HIxVra0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:9a:86:0f:7b:fd:c3:13:10:c2:12:2b:ca:c2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10515090f850e337eb3b118a157e4e39083b77a6
Validity
Not Before: Mar 26 11:01:38 2026 GMT
Not After : Mar 27 11:01:38 2026 GMT
Subject: CN=d918344749835590f8d2c752ca0ac6ff8835d7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ee:ad:6e:09:ad:c3:a5:1b:49:a9:d3:e9:ae:
84:84:63:ac:f3:cf:5d:7f:14:59:d8:bb:d0:62:69:
09:02:ce:ca:dd:dd:82:9a:49:5e:1e:3a:46:ab:83:
0c:d2:d8:8f:e0:bc:77:14:9c:ef:a5:78:bd:32:ce:
cb:b0:24:55:06:03:88:ed:98:72:84:f9:5e:72:1f:
51:fd:bb:e1:c7:88:d1:b4:9e:42:35:4b:d2:ad:c8:
6a:18:8a:9c:c4:46:fb:6d:1b:00:ed:db:20:56:73:
c1:d5:61:d2:8f:ea:38:b1:bb:88:c0:f7:55:7b:f5:
ae:9e:0f:bd:d8:29:ef:fe:07:da:01:20:7e:e0:f9:
3f:ff:90:71:df:7f:6c:d4:7a:a8:60:7d:e6:a6:a6:
a3:83:19:d5:d3:c3:e8:38:8e:35:f5:9f:0e:eb:5c:
51:3e:f1:ad:13:8f:57:3f:2e:17:a1:fc:8a:ca:60:
38:e2:77:17:66:86:de:e6:ca:ea:c5:a8:b4:c8:c2:
19:01:a3:99:c4:8c:f8:9f:d4:63:f3:b1:0c:19:bd:
21:6b:bf:c2:68:c4:08:97:ca:f6:7e:1c:ee:fc:60:
f8:35:c2:68:e6:61:0b:2d:fd:cf:69:34:54:fc:cc:
e2:5c:be:79:8f:9c:0f:08:cf:c5:75:89:8f:1c:5e:
8a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:18:34:47:49:83:55:90:F8:D2:C7:52:CA:0A:C6:FF:88:35:D7:B5
X509v3 Authority Key Identifier:
keyid:10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4e:38:52:39:57:81:53:65:69:de:28:65:08:19:40:ff:6d:
00:6a:09:1d:0f:54:0c:1b:92:e6:5c:41:a7:97:87:31:af:8c:
12:2f:02:fd:90:fd:f7:ad:4a:6c:98:a6:15:2f:7d:87:6d:1e:
c3:a6:01:5f:d4:cf:5b:f6:d5:09:83:86:76:9d:66:8c:85:ed:
ee:ad:f9:df:38:51:f9:5e:b3:26:6e:64:8f:f6:27:65:53:b8:
40:b2:22:02:7a:98:50:1b:d5:92:4c:05:f8:a9:25:41:41:02:
0b:be:6e:b5:d5:76:84:02:41:32:79:0d:ca:09:e4:24:3e:57:
b1:f6:03:02:a6:7a:49:be:ee:52:49:66:df:4c:b0:97:f7:92:
2a:27:3f:69:96:b5:ef:2e:80:3d:28:29:a4:18:fc:e3:fd:8d:
f9:98:7e:c8:fd:f5:3e:7b:8c:6c:1e:94:c1:99:09:60:57:a2:
a2:38:02:03:fc:4d:b3:c4:7a:a6:03:d8:76:87:db:d1:30:14:
c3:80:d1:7e:70:ef:c9:c0:c3:f2:03:ab:ca:13:26:de:09:bd:
53:01:f9:06:c6:34:65:f4:b6:07:f8:65:89:f9:06:16:fd:c8:
8e:de:22:cc:21:ad:a5:92:69:b6:51:00:7a:b3:c8:14:a2:19:
aa:2e:13:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:56:17 2026 by rpki-client