Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
File: EdJ3EZBuQdC_164BvAo40-eeJgE.mft (raw, json)
Hash identifier: Rqbs73Eb2+8DOos4720MYC8ObR7A9Z+VVYc6l1LeCls=
Subject key identifier: 8D:29:9F:F2:D5:72:D4:9F:FA:A2:F1:62:A8:07:99:DD:0C:67:B5:00
Authority key identifier: 11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
Certificate issuer: /CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Certificate serial: 019D284E2FA3F114013E93C8BAABBAF039F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 04:01:45 +0000
Manifest this update: Thu 26 Mar 2026 04:01:45 +0000
Manifest next update: Fri 27 Mar 2026 04:01:45 +0000
Files and hashes: 1: EdJ3EZBuQdC_164BvAo40-eeJgE.crl (hash: 6nN3K1aiIx+LBCbaLA4+TdkKOX/BCgldqlp06KlWzvA=)
2: gXTGqs4LKJz0Vrtvliei4acD1Ew.roa (hash: p/wSJPqOIsg3ZzxrAAFzNgFBQSzliYRj4Gqn0szjKSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:2f:a3:f1:14:01:3e:93:c8:ba:ab:ba:f0:39:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Validity
Not Before: Mar 26 04:01:45 2026 GMT
Not After : Mar 27 04:01:45 2026 GMT
Subject: CN=8d299ff2d572d49ffaa2f162a80799dd0c67b500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:e3:61:42:3e:e3:97:08:5e:ef:d7:a3:aa:
81:d7:5a:7d:f9:99:ea:3b:2b:c4:64:04:f7:6b:b6:
78:7e:af:2c:0c:7b:83:a7:48:8f:37:fb:c3:a0:1f:
c8:5b:0d:eb:43:22:9b:09:b9:b5:62:83:4a:71:fb:
a0:bd:47:2c:80:95:c4:1f:72:12:74:af:06:99:eb:
19:cb:33:d7:0e:6f:95:d0:c0:33:54:5e:c2:59:c1:
90:35:68:61:82:05:72:70:2c:4d:ff:c4:66:fc:81:
ba:50:49:64:b3:d8:97:79:2c:9f:f7:58:d5:73:7c:
b0:6c:4a:80:c7:4e:5a:4d:e9:a8:36:54:3e:79:be:
85:ce:b7:99:63:06:d1:d6:1d:5b:69:7b:a5:70:a0:
f1:cf:9b:82:97:28:d8:7b:30:32:f5:3c:45:cd:b7:
54:e6:bf:de:b8:78:67:b0:22:06:7d:6a:86:cb:36:
45:06:99:59:24:28:65:1c:4a:d6:8f:ca:88:e5:f4:
2c:69:5b:9e:69:d0:de:56:c9:01:b5:b6:48:cf:c6:
f9:b1:a6:01:7a:0a:ec:2d:ba:44:0b:de:3f:1d:47:
1f:8e:d9:eb:fb:b0:21:57:3e:24:6b:f4:7d:75:db:
fc:62:0d:9a:8a:a5:32:7e:4a:75:74:b5:2d:da:97:
a5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:29:9F:F2:D5:72:D4:9F:FA:A2:F1:62:A8:07:99:DD:0C:67:B5:00
X509v3 Authority Key Identifier:
keyid:11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:16:59:45:8b:43:ff:ec:6f:1e:a2:06:1e:be:af:90:da:96:
6f:be:e9:84:0b:fc:94:19:37:72:77:b0:9f:22:e2:9b:9e:cb:
a8:92:b9:3c:d0:ea:d7:20:86:9d:74:41:1c:56:e4:fa:c0:e7:
d5:53:2b:aa:9d:2d:e2:d2:a4:38:24:30:2e:ab:ee:13:8c:a4:
f1:5c:6d:4f:65:4f:39:96:b0:9c:4c:5f:93:53:09:dd:b7:f4:
0a:4c:fc:32:0e:1d:39:6d:07:3c:8a:bf:51:73:6c:c6:f2:09:
b9:1d:4a:fa:cd:ab:a8:98:1f:15:3b:96:d5:bd:e5:04:83:fd:
ad:0c:a5:7e:60:0d:16:80:44:29:f1:e2:d6:7c:4e:d1:41:ad:
03:75:b0:fd:9f:24:dd:ad:7f:c1:f4:e6:ec:1f:b8:e7:34:8f:
6c:88:d7:49:d7:aa:27:fb:4a:c9:88:9b:e0:c0:59:b6:57:f9:
00:a9:f4:c8:e2:e3:30:ed:eb:20:ea:80:b6:26:c5:47:3b:4c:
a2:db:62:a8:3a:11:9a:5f:da:61:b0:2a:f9:2c:f1:0a:2e:c3:
44:cf:a8:70:9d:c1:38:0c:0e:fb:e9:e2:47:40:23:ff:05:f2:
e4:4d:82:ce:0c:be:33:5a:53:a3:06:d4:59:84:42:8c:2f:54:
65:02:af:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:53:39 2026 by rpki-client