Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
File: EJsFo11BCaHkqDTMrazdLG9WsFo.mft (raw, json)
Hash identifier: Vc5RJzWom18cMgsG3azw+dQ1WvsJixm2CFy/N8NZs0M=
Subject key identifier: 3D:20:E2:CC:08:D2:4F:83:DD:82:6F:26:10:01:93:D1:70:D7:6A:27
Authority key identifier: 10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
Certificate issuer: /CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Certificate serial: 019D27E055EB2AC1A176342E391E90DC05EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 02:01:46 +0000
Manifest this update: Thu 26 Mar 2026 02:01:46 +0000
Manifest next update: Fri 27 Mar 2026 02:01:46 +0000
Files and hashes: 1: EJsFo11BCaHkqDTMrazdLG9WsFo.crl (hash: obRDRZeX1EOcupMbm9kfAUQDHk9z08vG1GSk7PTbo1U=)
2: wvM-Mwaw5-Yu2Gi4rXyhq8xWjTo.roa (hash: zwkwV/qCyW+dPqYTHQuCJTe82tiBbsC4rDyFqVjw0RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:55:eb:2a:c1:a1:76:34:2e:39:1e:90:dc:05:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Validity
Not Before: Mar 26 02:01:46 2026 GMT
Not After : Mar 27 02:01:46 2026 GMT
Subject: CN=3d20e2cc08d24f83dd826f26100193d170d76a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:83:34:1e:1a:44:9b:b4:1a:35:88:e7:59:bc:
0a:20:7e:3b:38:6d:bc:6b:ee:a7:45:08:ce:1d:b2:
22:57:95:20:17:3b:be:1e:3d:78:c2:5e:e7:0c:05:
d1:18:68:ab:f1:15:18:e2:15:0b:60:9b:b4:a8:d5:
34:70:2e:32:37:96:9f:80:82:62:f0:a0:f7:1c:cc:
c7:e2:87:01:a5:8e:1e:b5:2e:52:6f:cd:2d:ef:fa:
cb:17:64:93:78:17:74:e9:62:17:98:85:db:a8:82:
6f:1d:95:85:27:75:21:36:d6:f2:ae:d8:40:9b:e7:
57:26:db:68:1c:12:6d:ba:04:ee:f0:fd:21:ba:c2:
63:30:bd:c0:ec:86:a9:71:a4:6a:16:2e:ff:24:bc:
1f:c2:34:51:74:09:97:16:4a:2b:ea:aa:f0:86:f3:
a8:63:8b:5f:7c:40:68:5f:d3:88:6f:ba:d8:cd:1a:
99:77:c8:12:fe:d2:f0:80:bf:9d:14:b4:a5:2a:36:
a4:6a:6e:05:e8:0e:e5:0f:40:2e:8c:6c:5c:7f:85:
f3:a9:ef:16:97:5a:5e:3d:b8:e4:a1:4e:8b:ba:f0:
d4:f0:fd:03:47:68:3c:cf:9d:bb:4c:2e:37:0c:bd:
71:74:8c:60:fe:12:34:e1:9e:02:0b:c5:30:93:a5:
99:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:20:E2:CC:08:D2:4F:83:DD:82:6F:26:10:01:93:D1:70:D7:6A:27
X509v3 Authority Key Identifier:
keyid:10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:46:b0:15:89:8e:7c:a9:6b:a5:f4:e9:c8:fa:78:4e:4d:63:
c4:55:b3:07:d6:bf:d4:5c:0e:e2:08:da:7d:1e:ac:20:de:8f:
b5:5d:9e:e1:cf:de:e0:07:36:c3:c3:e7:a8:46:59:e7:ac:a9:
88:4f:1d:27:92:d2:17:76:ec:ec:22:2a:c7:a0:32:ac:ce:03:
e4:07:f1:2e:6b:2a:11:af:37:ad:8b:39:18:2b:fc:68:fa:d7:
99:e0:f1:61:90:0f:87:de:fd:63:fa:d1:c5:a8:6a:c2:41:24:
8c:7a:a2:65:e8:b8:cd:75:50:10:83:3c:d8:94:8c:01:7b:12:
c1:27:89:5c:8e:82:e4:18:f2:a6:08:24:bc:4f:60:52:0c:d3:
89:6c:93:d3:3b:6d:0b:6e:cf:8c:aa:eb:93:8c:8e:91:6f:18:
4d:69:f2:3f:e1:c8:16:ef:a0:a7:48:79:27:b4:5d:41:14:fa:
2a:79:1c:cb:d5:19:00:da:59:09:85:b1:f7:e3:bc:99:8c:29:
06:2d:5f:1a:49:da:c1:73:64:11:2e:9f:7b:58:fd:c8:82:e2:
e9:b9:72:32:ae:f2:88:19:4a:f7:5e:26:83:b2:a7:1d:3a:ea:
87:a0:fa:56:b4:1d:b6:95:08:e4:1a:93:d4:87:eb:86:9f:0e:
f6:b8:38:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:45:07 2026 by rpki-client