Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
File: EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft (raw, json)
Hash identifier: B60wOVUhTetY+k6wRhZtImoZiiJp5XgQOg/8KHDyl7Q=
Subject key identifier: E1:11:D1:D7:67:5C:78:45:D9:B8:14:62:20:8B:13:EB:8E:A0:25:C5
Authority key identifier: 11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14
Certificate issuer: /CN=1155b16fa9db7bceeccb89d1fe252632c0972514
Certificate serial: 019D2771D145501601F4AAECA64C1A30CC26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
Manifest number: 127E
Signing time: Thu 26 Mar 2026 00:01:03 +0000
Manifest this update: Thu 26 Mar 2026 00:01:03 +0000
Manifest next update: Fri 27 Mar 2026 00:01:03 +0000
Files and hashes: 1: EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl (hash: ugl+ydb5wYqFtd/Jy/3fFZDmdXkd6fZjdJPwwKX1MDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d1:45:50:16:01:f4:aa:ec:a6:4c:1a:30:cc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1155b16fa9db7bceeccb89d1fe252632c0972514
Validity
Not Before: Mar 26 00:01:03 2026 GMT
Not After : Mar 27 00:01:03 2026 GMT
Subject: CN=e111d1d7675c7845d9b81462208b13eb8ea025c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f6:6f:e5:85:df:c2:a6:9d:09:19:0b:dd:9b:
e2:fb:8e:7a:12:24:df:80:61:96:af:20:9f:70:fc:
81:65:fb:b7:eb:5d:06:2b:af:7b:81:13:88:d8:98:
f0:7e:57:21:72:b5:42:38:6f:1b:96:b1:7f:13:12:
46:19:28:c8:ee:66:12:f3:37:bf:14:b4:f0:be:a0:
c1:d7:eb:c1:9b:15:78:d8:0e:a2:eb:98:26:4f:a1:
ae:58:29:c2:c2:41:0a:68:34:f5:b7:8f:1e:2a:94:
1b:78:9a:a0:f6:3f:76:29:b4:cc:6d:37:eb:99:eb:
00:aa:d3:85:a1:75:50:76:e4:fd:19:12:8f:67:89:
ee:a0:11:19:6a:4f:ae:91:3d:e6:36:3f:b7:30:b2:
f5:88:2e:35:31:47:e9:e5:ae:cf:d4:c1:51:3e:6e:
d5:df:84:04:47:03:87:b5:e4:78:58:48:90:f7:e9:
b5:95:af:c5:78:07:51:91:6c:e4:c3:e7:cb:c2:c8:
c7:33:e3:33:8b:3c:66:3e:91:f8:84:2b:87:20:0e:
7b:49:6f:1e:dc:6a:33:e0:b7:a4:ba:c7:ea:55:fe:
d8:8c:5e:35:7f:df:b2:1c:78:46:f5:49:5e:7c:4f:
07:5e:41:4c:e1:0f:ec:e7:00:02:c9:21:64:ed:fa:
98:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:11:D1:D7:67:5C:78:45:D9:B8:14:62:20:8B:13:EB:8E:A0:25:C5
X509v3 Authority Key Identifier:
keyid:11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:bb:43:40:53:f3:3e:c6:4b:0c:ca:4b:59:b2:19:49:63:d7:
1b:26:fe:06:dd:aa:d4:3a:da:98:ed:31:03:d9:8f:56:85:64:
5f:07:64:48:e3:5a:71:06:68:a8:ed:69:55:eb:81:e5:1e:63:
f8:0e:ff:cb:d8:27:16:62:e3:75:64:00:bd:cc:db:a5:25:4c:
75:bd:6e:70:c8:60:d7:45:4b:7d:d6:0c:d2:8f:56:14:bb:f9:
2e:d6:12:4e:10:b7:a1:ed:02:56:e3:bb:37:9e:28:c7:b2:ee:
c6:0d:e1:09:05:c5:0c:ef:e9:20:9a:47:49:1a:2f:6a:c2:8c:
14:5b:9f:c8:9c:dd:f9:91:9d:c0:b5:57:c8:0c:42:68:18:e9:
7f:b3:e8:68:60:01:3c:d6:05:f1:fe:6e:3e:47:b9:fa:f9:ba:
11:b9:2c:6a:37:14:03:82:57:53:d5:98:2f:50:50:58:c9:2e:
08:f1:8f:ad:2e:4c:a6:3f:71:a0:35:5f:c5:b5:0a:86:9c:e5:
51:48:fa:91:a8:fe:2a:db:34:98:28:09:65:2d:ce:43:10:c0:
08:22:03:0c:63:6a:9a:b6:20:4d:b1:ad:9e:77:fc:48:67:f7:
9b:83:06:2a:78:16:ed:66:da:90:5b:b0:e8:11:05:f1:f4:b5:
d9:dc:1a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:06 2026 by rpki-client