Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
File: ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft (raw, json)
Hash identifier: GlCwklWC8P8g7+nI/b3Tc4lBaL8XsdUOzOevsVXLhp8=
Subject key identifier: BD:DA:EB:70:DE:DB:85:C0:0A:04:D2:1C:F3:E2:6B:CD:9E:BB:E2:D9
Authority key identifier: 10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
Certificate issuer: /CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Certificate serial: 019D28847EC137036FF62369ACD8DFB9C10D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
Manifest number: 0960
Signing time: Thu 26 Mar 2026 05:01:04 +0000
Manifest this update: Thu 26 Mar 2026 05:01:04 +0000
Manifest next update: Fri 27 Mar 2026 05:01:04 +0000
Files and hashes: 1: 7CSVGtYUX5r3HPpcYYedHjS20IQ.roa (hash: hzzOsdStylJXNXeCzZeL6+XDTe9J82yzkNqZCVPm+lM=)
2: ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl (hash: hFhzEt9J/FssPLn5mNfwwkiJK4BwIwD3xsU6RTD6wvI=)
3: nQENJbRz1W0WhBM6EIeWbWaXGe0.roa (hash: XnC7G+pMyq9QIiJSY8PXtmwY2A35n+casWMMCOJ/vOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:7e:c1:37:03:6f:f6:23:69:ac:d8:df:b9:c1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Validity
Not Before: Mar 26 05:01:04 2026 GMT
Not After : Mar 27 05:01:04 2026 GMT
Subject: CN=bddaeb70dedb85c00a04d21cf3e26bcd9ebbe2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:70:bf:bd:50:c8:ce:eb:50:ac:11:80:db:42:
3e:ef:52:d8:9f:3d:1a:5a:28:1b:14:a1:c2:cf:8f:
bf:c0:f5:26:2e:97:c1:24:cb:c6:ca:0c:f4:0b:15:
66:a9:6a:51:fb:ed:5d:a2:b4:70:5b:f1:6d:3e:8b:
67:0b:78:52:ec:04:c0:e3:9a:92:2a:40:60:3c:44:
54:b6:6b:4a:41:7f:4c:16:1c:7e:23:de:c1:7c:05:
6c:3a:0c:cd:da:10:c4:11:48:1c:7a:7c:49:5d:9b:
ad:ac:9f:2a:50:e8:19:29:fa:fe:9e:8d:0e:43:92:
a5:d7:b5:67:a0:13:dd:09:3b:86:1f:51:97:9d:54:
16:e2:e5:69:86:1c:16:43:80:b2:84:8b:88:6a:c4:
c1:d4:02:66:3e:36:20:74:e9:3f:32:ed:24:bb:03:
19:e1:09:1f:42:d3:ce:1a:bc:47:94:54:75:8b:f9:
67:f1:d4:1d:11:00:4f:9f:16:4c:5f:bd:07:5a:5d:
f8:54:d7:db:41:94:83:04:3f:07:d3:d3:96:84:df:
30:be:ee:5a:a9:e3:ac:b3:69:22:43:ce:47:00:42:
c0:cd:b1:b3:19:53:79:dc:a8:0d:ac:be:79:58:74:
cf:90:fd:a8:40:0e:a3:97:3c:64:da:d2:c9:19:e0:
8c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DA:EB:70:DE:DB:85:C0:0A:04:D2:1C:F3:E2:6B:CD:9E:BB:E2:D9
X509v3 Authority Key Identifier:
keyid:10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:4b:42:0a:af:bd:d2:dc:3c:f8:3b:76:b8:65:9e:8a:77:f9:
74:a6:bd:b9:5f:2e:6d:8d:fc:61:e4:4f:e3:24:81:0e:1f:14:
ed:b8:fd:5d:66:f8:24:21:b5:e8:fb:10:fe:ba:dd:bf:05:2d:
6a:0e:7f:da:8d:c7:c6:a0:4a:21:16:96:8a:59:ee:ad:ba:7b:
16:51:1c:25:7f:54:bb:5e:ad:0c:92:5c:b7:d0:23:d2:20:00:
f0:3a:cc:60:e3:e0:4c:e1:13:86:70:0f:d4:49:4f:66:66:b1:
99:43:13:bb:a3:06:b5:ee:3b:1c:de:bf:0b:b2:df:7a:ce:b9:
dc:1d:97:54:b3:f0:85:66:c2:e7:06:1d:b3:d9:66:f9:12:50:
22:59:f5:a6:ef:fa:d8:4b:1a:bc:73:d3:f6:51:a3:06:83:69:
99:91:db:d9:3a:19:ec:b0:73:10:20:da:e3:d1:99:f5:c7:4d:
4e:a8:c2:6d:ef:91:1b:9e:f3:25:76:ce:b2:1e:01:08:fe:00:
29:26:85:a3:4a:25:99:33:c6:31:3c:9f:93:08:4c:19:ae:41:
f0:c0:3a:a7:86:f2:43:fa:12:39:29:97:cd:ea:d5:a9:78:fc:
1e:f1:67:c0:fe:2b:87:d0:88:6e:98:d8:04:19:6c:fb:9e:60:
d7:f7:e0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:26:31 2026 by rpki-client