Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
File: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft (raw, json)
Hash identifier: XZjlc2gCJRxoGP4tmtpaQm+qGzb8Wq0g8NejIp3qhjw=
Subject key identifier: 68:C9:CC:0C:1B:91:BE:D2:52:8B:0A:3A:21:85:75:9A:72:6D:13:F4
Authority key identifier: 12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
Certificate issuer: /CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Certificate serial: 019D2703DE3747E2A5D000117ADA290C28A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
Manifest number: 031F
Signing time: Wed 25 Mar 2026 22:00:58 +0000
Manifest this update: Wed 25 Mar 2026 22:00:58 +0000
Manifest next update: Thu 26 Mar 2026 22:00:58 +0000
Files and hashes: 1: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl (hash: yhYqaKFpBP9K3Na/X0sssvKG8czIDZvZw46/doPw8bo=)
2: StENb4oXUe_gqEhZ_cRSGTbf9h0.roa (hash: jpZ/aosQxaXXNjBqwfCSJNayGEKyZap7VBjnyDJ/cIU=)
3: ustsKef3_kQrz_t0nmHTw0MaqT0.roa (hash: QAz/jM+TUevEvBm3ClnKE5FN9ZTcnHmV+8tjFLI7axU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:de:37:47:e2:a5:d0:00:11:7a:da:29:0c:28:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Validity
Not Before: Mar 25 22:00:58 2026 GMT
Not After : Mar 26 22:00:58 2026 GMT
Subject: CN=68c9cc0c1b91bed2528b0a3a2185759a726d13f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4a:31:ca:3d:00:66:63:63:ba:b4:12:b7:47:
6d:e1:88:09:bb:69:ed:e7:86:9c:1b:4e:cf:f6:89:
9b:98:7a:c3:3b:71:b4:a7:90:42:c3:dd:d7:63:8d:
85:15:80:55:b0:aa:fa:cd:a6:5f:57:f5:f2:b6:dd:
43:15:1e:e0:57:f9:e3:fc:a6:e6:e1:5a:e6:60:41:
65:62:73:4a:b7:36:27:a0:24:0d:dc:b0:22:6c:f5:
56:d4:f0:0b:eb:2c:3c:c0:9c:94:cf:e7:9f:71:39:
fe:cb:f1:82:17:ad:a2:00:62:de:ca:5d:85:d7:9a:
0c:f7:20:1f:d7:49:e4:1b:72:4a:df:50:cc:7a:68:
a4:f8:71:0f:a5:36:d1:29:e7:a7:32:5e:5c:10:cb:
99:19:f8:a6:31:c4:10:35:ab:c2:d5:44:93:bc:84:
c6:07:5e:37:b7:ea:44:49:28:b1:08:27:77:96:bc:
e3:0f:24:93:38:6d:c6:40:8d:49:b6:c4:c7:0e:48:
3b:a9:73:83:db:8e:33:e9:e2:09:f6:0d:27:62:15:
f5:33:bb:9e:6c:4b:6d:31:c2:88:43:ea:79:8c:45:
61:4a:49:8a:21:25:9c:ec:ab:07:86:dc:34:e6:9f:
82:c5:dc:ca:b2:7d:88:ae:58:c2:db:85:0c:7f:30:
6e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C9:CC:0C:1B:91:BE:D2:52:8B:0A:3A:21:85:75:9A:72:6D:13:F4
X509v3 Authority Key Identifier:
keyid:12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:61:31:d7:62:98:e9:1c:b8:97:dd:7c:f5:54:f9:61:74:88:
ff:02:70:ca:73:91:3d:ff:32:e2:2b:b6:e0:ce:47:e1:20:8c:
a2:30:1d:cf:1f:cd:2f:a7:a3:e1:1d:17:60:d8:95:28:f8:3a:
a2:99:d7:7e:ab:4f:25:d2:76:31:94:10:07:94:6e:71:4b:cb:
d4:e0:8e:45:e4:f5:eb:bd:c6:6a:18:ec:a1:78:f8:30:4e:96:
b1:43:b3:85:9b:20:40:b2:33:24:06:c8:1a:e1:36:01:fb:25:
d5:c3:94:7b:36:85:7a:d1:4b:45:12:92:f6:e4:f1:11:32:d6:
93:ee:76:77:08:52:6f:b6:3e:c0:69:df:d1:0d:9a:bd:7d:70:
51:86:63:59:63:4d:3e:6e:a9:70:8f:62:67:8f:df:f4:9b:3d:
3a:54:a8:b8:00:2e:d0:95:23:7a:ed:79:30:99:46:e3:1c:12:
51:ae:11:3a:4b:1f:5d:86:1f:6a:ed:8d:c8:02:86:fb:79:12:
a1:48:5d:64:a4:1b:4c:20:f7:20:8f:a6:b5:3d:02:db:6b:23:
81:bf:94:e3:da:89:b4:80:9f:01:c0:86:48:ae:f5:e2:a4:8e:
70:63:40:b9:c1:04:d8:02:26:5e:4e:b1:fc:54:77:fd:28:61:
2c:e3:ec:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:22 2026 by rpki-client