
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
File: ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft (raw, json)
Hash identifier: bOjydyt/1rJgqsLwNl8I5BSs+kobBtjjvr3DyWCWvS0=
Subject key identifier: 45:CA:FF:ED:A8:E0:D7:14:F0:16:F1:C6:82:11:E2:A3:74:67:29:28
Authority key identifier: 10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39
Certificate issuer: /CN=10b43613535ffaa73d9acc503c71a28fa17b3839
Certificate serial: 019D27DF5962D7909239CA3625D5D801C9F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
Manifest number: 0F28
Signing time: Thu 26 Mar 2026 02:00:41 +0000
Manifest this update: Thu 26 Mar 2026 02:00:41 +0000
Manifest next update: Fri 27 Mar 2026 02:00:41 +0000
Files and hashes: 1: ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl (hash: 6L89xZwSHPAI6L+D2eX/8A+aCQeNsm/Nu5RLldTv7XE=)
2: bk3MpB9dFYsKx-vk9Fu2s4AOobg.roa (hash: VhKUc5HBMkEPpFpw6zVe4nOAoJ2kIgyeitJGidAI9eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:59:62:d7:90:92:39:ca:36:25:d5:d8:01:c9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10b43613535ffaa73d9acc503c71a28fa17b3839
Validity
Not Before: Mar 26 02:00:41 2026 GMT
Not After : Mar 27 02:00:41 2026 GMT
Subject: CN=45caffeda8e0d714f016f1c68211e2a374672928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f0:6e:08:00:8c:de:8a:61:ba:47:7a:d3:8c:
10:ac:d4:ad:d7:c6:ba:30:9a:18:7c:30:6c:f4:56:
1d:1d:79:d5:d2:96:0d:17:d2:82:5c:c4:86:4e:cd:
92:62:38:92:66:c7:b6:b2:99:ad:c3:39:5f:e0:20:
f0:9f:01:83:dd:b1:9f:1d:a5:23:25:d9:24:f9:6a:
2b:70:d2:3c:22:0c:a0:10:9e:56:f4:fc:6a:00:1f:
7f:ef:47:02:d0:6b:3a:e4:12:8b:df:b7:04:9e:b0:
7f:9a:f7:6d:fe:94:3f:20:06:32:ca:67:5d:f1:1f:
a6:ef:ae:ea:5a:d5:30:f5:10:5e:c7:b8:1a:47:10:
b4:58:d4:b6:26:19:4b:2a:2e:a7:cb:2d:42:c2:bd:
f6:f2:22:82:cf:f0:ef:7c:23:9c:8c:5d:f8:1e:91:
f9:e9:5d:aa:b8:f8:4c:a7:5b:dd:e5:c8:85:88:5d:
de:64:bd:a3:ff:60:8c:5f:14:56:ce:43:1e:cc:43:
2d:09:86:0f:13:25:7a:82:d5:81:74:e5:ae:c7:73:
d2:29:e7:11:3f:5d:a1:a4:22:28:9a:48:df:68:63:
50:68:b4:a7:7f:f5:8f:25:ba:5f:62:35:ff:f5:49:
7d:2d:67:ba:e6:d4:0c:e2:60:52:b8:d9:88:3a:36:
6b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CA:FF:ED:A8:E0:D7:14:F0:16:F1:C6:82:11:E2:A3:74:67:29:28
X509v3 Authority Key Identifier:
keyid:10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e9:6e:df:c2:55:67:f9:4c:50:85:46:1a:07:40:fa:63:22:
64:5f:58:bd:91:e2:a5:22:95:b4:eb:2f:07:bb:95:d0:6c:9a:
04:f3:df:13:c3:c2:dc:9f:33:1a:46:90:5a:48:76:b2:a5:4d:
be:cd:54:e1:82:fd:96:35:a4:3b:a9:38:be:ab:41:dc:75:30:
2d:02:2b:66:aa:41:93:0d:82:46:e6:b0:c6:bf:a9:c8:3e:6c:
c6:ca:de:34:76:ce:1a:e0:bc:e2:bc:25:55:ab:7f:62:62:a8:
15:29:20:1b:9a:90:29:e2:99:d1:ce:ac:9e:40:d4:a2:75:2f:
2d:29:3d:4a:08:46:28:5c:0a:da:33:1d:f9:a8:bb:42:88:d4:
d6:74:69:95:d3:c1:0d:13:36:5f:ab:2a:05:e6:85:5d:4d:82:
f5:06:28:b4:08:38:06:ca:b2:25:eb:f9:1b:ca:1a:6a:01:42:
37:d9:8d:df:32:c8:6d:0d:ab:08:69:6b:96:f8:fb:4c:4c:07:
a4:50:05:87:76:78:e7:21:15:53:eb:14:cb:47:55:fe:51:c6:
c9:d6:76:a7:e6:02:da:3f:54:d6:67:2e:60:9f:a1:a3:6e:23:
ba:f1:d4:1c:aa:aa:93:1a:d0:b9:15:b4:9d:b8:38:96:d9:1e:
e9:71:05:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:44 2026 by rpki-client