Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
File: EdGfiLDcG4kCVNuUqbYgRta-eUs.mft (raw, json)
Hash identifier: mVbrZQXUgFYg8e6nGAHo2ur71u3PouzlrRk2XdN2PlM=
Subject key identifier: 52:E8:DD:10:29:0E:21:2B:E9:18:2E:A0:8E:3D:F5:02:FF:DF:48:AF
Authority key identifier: 11:D1:9F:88:B0:DC:1B:89:02:54:DB:94:A9:B6:20:46:D6:BE:79:4B
Certificate issuer: /CN=11d19f88b0dc1b890254db94a9b62046d6be794b
Certificate serial: 019D2997730EF6926A10048F4C22AAE434A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
Manifest number: 0DD4
Signing time: Thu 26 Mar 2026 10:01:24 +0000
Manifest this update: Thu 26 Mar 2026 10:01:24 +0000
Manifest next update: Fri 27 Mar 2026 10:01:24 +0000
Files and hashes: 1: EdGfiLDcG4kCVNuUqbYgRta-eUs.crl (hash: O5x9hTFGFRstAA7yg2zFbF1vbZnmBMsWx+zSVTx+REg=)
2: YLaRX-nsqRWCtPec2Dv5Q_k5OhQ.roa (hash: 5033rgrhup6n7WpdXD6+8ygWTQrZT3eRPIezPH3qoAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:73:0e:f6:92:6a:10:04:8f:4c:22:aa:e4:34:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d19f88b0dc1b890254db94a9b62046d6be794b
Validity
Not Before: Mar 26 10:01:24 2026 GMT
Not After : Mar 27 10:01:24 2026 GMT
Subject: CN=52e8dd10290e212be9182ea08e3df502ffdf48af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:cd:cf:0a:de:5e:2d:8f:c2:1f:e8:04:cb:
5a:a1:ff:7f:00:a4:68:4f:de:35:2c:12:95:55:9d:
e1:21:60:19:a6:62:a8:d9:5e:c5:88:07:e7:7f:c5:
5f:6c:42:ab:34:91:3f:33:78:c4:75:5c:a8:cd:fc:
32:f3:cc:1e:e4:44:ce:48:3a:2b:aa:2f:2e:04:50:
8d:10:79:27:d2:d7:59:2f:a7:5e:a1:34:34:41:59:
29:b7:40:28:52:4a:ef:d6:92:98:9c:88:49:5f:9a:
d3:88:de:95:c6:c2:1b:96:4b:2c:5b:1a:2c:4b:5a:
d4:d9:51:96:b9:4b:e2:8e:fc:d4:12:81:7d:fe:37:
af:03:c4:74:89:e9:6a:91:47:72:30:b3:8b:21:d4:
26:f5:bb:93:46:8d:88:d9:c5:31:6c:98:d2:c1:06:
12:1f:cd:03:e7:ab:20:43:22:e9:86:3f:0b:cc:bf:
fd:85:46:71:e6:b6:eb:02:f6:e2:36:e8:cb:4e:6e:
24:07:99:8b:6a:4f:9c:3d:60:99:cb:27:1d:fa:d6:
d1:09:4d:e9:6c:c8:9c:07:f8:09:96:1b:ab:7c:32:
ea:2c:c7:e7:1c:bc:5a:4a:89:59:d3:0c:ad:27:5e:
f3:66:6d:d2:92:68:74:d7:01:b8:23:53:98:c5:c5:
c0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E8:DD:10:29:0E:21:2B:E9:18:2E:A0:8E:3D:F5:02:FF:DF:48:AF
X509v3 Authority Key Identifier:
keyid:11:D1:9F:88:B0:DC:1B:89:02:54:DB:94:A9:B6:20:46:D6:BE:79:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a7:b8:38:b2:ca:96:51:4e:e1:a3:81:2b:c2:90:08:cd:21:
97:21:4d:18:44:30:8b:8d:85:cf:61:75:32:f3:2f:7a:a0:43:
d3:3e:ea:74:4a:92:31:bd:67:e5:9a:12:72:c2:42:19:f2:5c:
8c:a4:89:6e:3c:52:ed:04:ee:3b:35:c7:b6:d6:c1:12:a6:54:
af:af:bd:32:ae:84:a0:fc:8b:41:99:d2:ee:ca:fd:3f:e2:fa:
03:1c:38:ec:2c:81:ba:a8:d7:76:35:a9:33:99:aa:f6:dd:44:
3a:bf:9c:40:b5:5c:75:e7:d6:c8:da:ab:0e:6e:62:16:10:5c:
78:eb:2e:1c:e0:ff:2f:3d:af:52:4f:57:d6:c4:5e:36:42:29:
c3:08:ee:bc:81:fe:d8:59:2e:32:5f:f5:fe:3d:a7:88:5b:ee:
d7:c0:64:ec:65:34:93:12:00:57:44:94:1a:3a:3c:35:2d:ba:
1d:77:54:9d:d4:46:61:e3:40:be:00:bf:7e:11:b9:da:65:75:
36:f9:2b:b6:2e:a4:83:48:27:49:b6:62:4a:9f:64:30:17:78:
28:40:9a:90:5e:51:65:ca:f4:44:b9:f4:67:6f:0d:70:e1:fd:
70:bb:df:98:71:60:0b:4f:8c:96:d8:b7:1d:19:8f:b4:77:d5:
ff:cd:e2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:28 2026 by rpki-client