Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
File: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft (raw, json)
Hash identifier: 3hVmCgYAXnRlLsBH2/+7i+RghsiiyOk27GkBZsZjWFA=
Subject key identifier: 16:47:AF:4B:7F:20:7F:CD:29:68:BC:3F:D0:6A:43:41:31:BE:9A:2C
Authority key identifier: 12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
Certificate issuer: /CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Certificate serial: 019D273A9D1DDDDB273C87480A9FB9EC1AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
Manifest number: 0987
Signing time: Wed 25 Mar 2026 23:00:45 +0000
Manifest this update: Wed 25 Mar 2026 23:00:45 +0000
Manifest next update: Thu 26 Mar 2026 23:00:45 +0000
Files and hashes: 1: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl (hash: /hxHejgq6+Z/+q81kyLekHZ4x5a4UtoHm/wpISwiIWc=)
2: zY6-TSsM-n0cGeuR4MC7O4QKpZU.roa (hash: pDF4f+98qM6dWbtI9D665+bMv7kt2epaA+MQQ2O8Qdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:9d:1d:dd:db:27:3c:87:48:0a:9f:b9:ec:1a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Validity
Not Before: Mar 25 23:00:45 2026 GMT
Not After : Mar 26 23:00:45 2026 GMT
Subject: CN=1647af4b7f207fcd2968bc3fd06a434131be9a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c4:e9:3d:5f:80:5f:9a:8e:6c:6e:14:33:6b:
5d:8a:40:b7:36:ae:02:f6:d5:f7:f4:b9:22:f0:15:
b7:97:28:c7:8c:e7:e5:1f:1e:ea:ae:de:c7:03:9c:
1b:5b:b4:15:2f:73:cd:0d:2f:42:77:0f:ac:5f:1a:
51:cc:2d:ca:9b:7d:c9:46:8d:47:43:f9:13:a0:54:
4f:21:68:e3:5a:cf:5e:5e:33:ce:7d:2d:fa:f0:1b:
b4:10:29:9d:97:e2:bb:28:1e:ae:7e:dc:b0:b4:c2:
1d:1d:d5:81:21:5d:b1:c5:9d:9a:10:de:bb:05:9a:
c4:92:9a:fe:74:7c:cd:fa:08:71:a8:5d:61:cc:df:
5a:3f:b1:f7:f8:53:32:c2:90:da:80:50:01:78:e5:
f1:c4:d9:f6:8a:1a:60:19:02:2c:4e:d2:19:1c:28:
f7:5d:88:59:dc:7e:35:e3:5f:13:a7:2d:29:55:d0:
f6:38:49:5f:2d:b7:00:eb:60:c8:8d:14:6a:a7:1d:
12:8d:cf:22:82:59:5b:4e:02:90:2c:b5:22:5a:99:
8b:f4:8a:8d:66:3e:c3:59:14:f9:d7:e4:c4:69:5c:
3e:55:4a:ee:38:e0:cb:25:cb:c2:7a:6f:b2:86:b0:
48:c6:70:30:89:49:88:90:31:c4:ff:37:18:78:79:
46:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:47:AF:4B:7F:20:7F:CD:29:68:BC:3F:D0:6A:43:41:31:BE:9A:2C
X509v3 Authority Key Identifier:
keyid:12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:eb:13:57:6b:e8:b7:62:f1:1f:80:18:41:3c:aa:2f:d1:12:
f5:79:9e:9b:4a:9a:5a:b3:95:35:ef:ee:17:9b:7d:48:f1:5f:
d8:ad:de:ef:1a:8e:46:09:c9:e9:48:08:3b:e7:f8:ec:49:76:
97:a0:89:a2:d8:be:b9:ff:c9:eb:52:79:07:81:8d:05:78:cb:
07:54:c6:fd:b5:16:e6:68:03:84:d2:81:05:49:42:c3:7b:96:
f8:26:67:9b:da:20:3b:b5:c2:fe:41:f7:d7:17:77:97:c2:fb:
b5:45:ae:43:ba:bf:1a:27:dd:4f:e2:27:e2:dd:41:f6:16:31:
8f:47:1a:f0:85:56:d6:96:c9:c4:b7:bc:15:bb:38:aa:a2:39:
7a:ec:d5:31:01:a7:bf:ec:8a:1c:e3:52:2a:c4:ed:6c:2b:01:
48:14:a3:02:e3:e6:6b:ff:f9:15:45:56:b3:a8:4a:b6:02:df:
f9:10:55:0a:bd:fd:fd:25:e6:e9:67:d0:c6:7e:79:01:c4:d8:
11:d1:92:a0:17:01:fd:34:df:a2:21:6e:77:c8:dd:a0:5e:67:
b2:c3:d7:fc:82:81:08:b1:02:42:87:eb:31:8d:8f:91:9b:1e:
bc:b4:00:cb:09:21:6a:4b:a0:01:c5:1e:64:bb:64:bc:1b:71:
1e:be:b0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:51 2026 by rpki-client