Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft
File: 1EdMHAbL_elGFNZcfQX2FKbiOZg.mft (raw, json)
Hash identifier: NFQetsTxacPN3DrLDx+JWW1CshVtPBdk/+5SVchvM7w=
Subject key identifier: C0:02:B2:95:D5:13:31:A9:32:51:00:9E:70:F8:6B:98:03:1F:48:48
Authority key identifier: D4:47:4C:1C:06:CB:FD:E9:46:14:D6:5C:7D:05:F6:14:A6:E2:39:98
Certificate issuer: /CN=d4474c1c06cbfde94614d65c7d05f614a6e23998
Certificate serial: 019D262802C3039DF7CC1DFD0F6D5177CFCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 18:00:49 +0000
Manifest this update: Wed 25 Mar 2026 18:00:49 +0000
Manifest next update: Thu 26 Mar 2026 18:00:49 +0000
Files and hashes: 1: 1EdMHAbL_elGFNZcfQX2FKbiOZg.crl (hash: 4yDdd3d4UpoznsdvLLkPBB1sOhg14a7qhkioxehjaXE=)
2: W6Y3idz-0ZKwDYNSRKjUJfW8Ww0.roa (hash: 1WR2Uw1GdUwynyPsOGJjutQPMS2E5J6S8kJ56yegvbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:02:c3:03:9d:f7:cc:1d:fd:0f:6d:51:77:cf:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4474c1c06cbfde94614d65c7d05f614a6e23998
Validity
Not Before: Mar 25 18:00:49 2026 GMT
Not After : Mar 26 18:00:49 2026 GMT
Subject: CN=c002b295d51331a93251009e70f86b98031f4848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:93:97:e7:18:64:3b:a0:9a:4e:e1:ef:a3:8b:
73:e0:cb:3b:3e:4b:71:de:c5:96:81:20:9e:e0:38:
1c:22:fe:3d:f3:a3:fd:12:7f:e1:39:52:74:1b:08:
97:54:fa:2f:81:b0:cc:0c:33:f5:2f:05:63:bb:b4:
c4:70:ca:2e:4f:8a:b5:9f:49:b4:12:49:af:65:8e:
3c:7f:85:22:78:4d:3e:38:88:0e:73:34:0e:f0:17:
17:ee:b9:43:5c:07:11:1c:16:bf:70:dc:38:86:92:
bf:27:1b:48:2c:78:44:ff:f7:d7:7d:df:05:80:8c:
21:38:c4:ac:fe:e1:cf:c3:a9:6e:19:fe:00:86:e7:
10:56:9b:d6:9d:dd:08:5b:d6:90:e7:29:75:12:99:
f5:2a:c2:1e:02:f9:06:09:ac:38:15:5a:c8:05:ad:
31:90:ac:9b:2b:02:04:00:66:c6:d4:c9:30:0e:74:
de:5e:9f:da:4c:ac:cd:19:e2:e3:07:db:8f:d4:14:
b2:8a:cb:bf:14:22:62:e4:78:de:0b:e3:02:0d:0b:
c6:65:8b:a2:87:c3:38:1a:72:fe:42:32:fb:6f:99:
f4:e2:20:b2:b2:85:f1:e5:d3:bd:8c:5c:2a:fe:a0:
23:95:af:5d:1b:44:ab:4b:57:ef:47:bb:50:5a:e0:
0e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:02:B2:95:D5:13:31:A9:32:51:00:9E:70:F8:6B:98:03:1F:48:48
X509v3 Authority Key Identifier:
keyid:D4:47:4C:1C:06:CB:FD:E9:46:14:D6:5C:7D:05:F6:14:A6:E2:39:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f9:c0:13:de:a5:65:f5:17:a7:2a:87:1c:57:35:03:9d:9d:
b0:a8:85:7d:45:5d:22:66:d0:2b:80:2b:f9:70:28:e5:89:61:
c8:ae:03:35:8e:24:d8:6a:e7:d0:56:c2:15:6b:7e:6f:d8:92:
c0:ff:44:2a:7c:ec:3a:6b:39:e4:d2:56:d2:1c:11:0f:b5:f5:
84:e2:df:c2:83:d3:d0:d0:fc:12:2a:9d:41:1c:d1:5e:62:be:
55:ac:55:f8:e3:c7:b4:e1:01:f8:08:a6:5f:9d:cf:16:bc:4c:
d0:25:55:0b:0c:bc:54:5d:d7:d4:d9:5c:d8:3a:19:c2:70:88:
e2:09:51:e6:b3:78:0d:4b:c4:17:bd:d4:48:91:79:43:94:3a:
94:61:d9:0f:1c:8e:f4:28:0a:ed:92:57:96:73:ec:74:1e:83:
d6:aa:00:e1:7a:84:43:34:6b:bc:71:60:0e:af:6e:30:e4:ce:
58:96:43:90:c2:13:10:52:27:2b:52:53:e0:41:8d:9e:d8:79:
12:45:63:63:bc:e0:c6:b2:31:46:63:8d:01:74:90:a9:ad:60:
f7:57:af:e9:d3:41:14:97:97:db:73:43:f0:e8:25:10:c0:45:
76:32:f2:aa:9b:30:7f:b8:eb:93:ff:1e:b7:2b:a3:a4:de:3c:
b1:56:96:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKALDA533zB39D21Rd8/NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NDc0YzFjMDZjYmZkZTk0NjE0ZDY1YzdkMDVmNjE0YTZl
MjM5OTgwHhcNMjYwMzI1MTgwMDQ5WhcNMjYwMzI2MTgwMDQ5WjAzMTEwLwYDVQQD
EyhjMDAyYjI5NWQ1MTMzMWE5MzI1MTAwOWU3MGY4NmI5ODAzMWY0ODQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJOX5xhkO6CaTuHvo4tz4Ms7Pktx
3sWWgSCe4DgcIv4986P9En/hOVJ0GwiXVPovgbDMDDP1LwVju7TEcMouT4q1n0m0
EkmvZY48f4UieE0+OIgOczQO8BcX7rlDXAcRHBa/cNw4hpK/JxtILHhE//fXfd8F
gIwhOMSs/uHPw6luGf4AhucQVpvWnd0IW9aQ5yl1Epn1KsIeAvkGCaw4FVrIBa0x
kKybKwIEAGbG1MkwDnTeXp/aTKzNGeLjB9uP1BSyisu/FCJi5HjeC+MCDQvGZYui
h8M4GnL+QjL7b5n04iCysoXx5dO9jFwq/qAjla9dG0SrS1fvR7tQWuAOWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMACspXVEzGpMlEAnnD4a5gDH0hIMB8GA1UdIwQY
MBaAFNRHTBwGy/3pRhTWXH0F9hSm4jmYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUVkTUhBYkxfZWxHRk5aY2ZRWDJGS2JpT1pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9kNzU3NTktOGRjYi00NTMyLThiZmUt
NWI2ODhhY2RiNjc2LzEvMUVkTUhBYkxfZWxHRk5aY2ZRWDJGS2JpT1pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9kNzU3NTktOGRjYi00NTMyLThiZmUtNWI2ODhhY2RiNjc2
LzEvMUVkTUhBYkxfZWxHRk5aY2ZRWDJGS2JpT1pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfnAE96l
ZfUXpyqHHFc1A52dsKiFfUVdImbQK4Ar+XAo5YlhyK4DNY4k2Grn0FbCFWt+b9iS
wP9EKnzsOms55NJW0hwRD7X1hOLfwoPT0ND8EiqdQRzRXmK+VaxV+OPHtOEB+Aim
X53PFrxM0CVVCwy8VF3X1Nlc2DoZwnCI4glR5rN4DUvEF73USJF5Q5Q6lGHZDxyO
9CgK7ZJXlnPsdB6D1qoA4XqEQzRrvHFgDq9uMOTOWJZDkMITEFInK1JT4EGNnth5
EkVjY7zgxrIxRmONAXSQqa1g91ev6dNBFJeX23ND8OglEMBFdjLyqpswf7jrk/8e
tyujpN48sVaWyQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:23 2026 by rpki-client