Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
File: EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft (raw, json)
Hash identifier: MlRiQTavIticz2ZPzYitIMHh8sfSlPS4etCYDkG2uZA=
Subject key identifier: 0E:AD:8A:99:93:7E:E2:02:4A:F1:7D:C2:9A:29:2C:E7:EC:DF:0A:CD
Authority key identifier: 10:79:7E:B5:F9:AA:9A:BE:52:00:8C:E7:F2:1A:B4:4A:FD:EE:A0:D0
Certificate issuer: /CN=10797eb5f9aa9abe52008ce7f21ab44afdeea0d0
Certificate serial: 019D29609BE8525A468352950EC88A3919DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 09:01:30 +0000
Manifest this update: Thu 26 Mar 2026 09:01:30 +0000
Manifest next update: Fri 27 Mar 2026 09:01:30 +0000
Files and hashes: 1: EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl (hash: isCFv1zFoIenKeNdt2n2f4yVSx9HZQ6d3uORsa4VW8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:9b:e8:52:5a:46:83:52:95:0e:c8:8a:39:19:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10797eb5f9aa9abe52008ce7f21ab44afdeea0d0
Validity
Not Before: Mar 26 09:01:30 2026 GMT
Not After : Mar 27 09:01:30 2026 GMT
Subject: CN=0ead8a99937ee2024af17dc29a292ce7ecdf0acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:05:2c:7b:db:2a:d5:b7:49:e0:53:75:41:89:
96:3b:ba:5b:b1:78:1c:0a:e3:b0:88:ca:7f:92:2b:
23:4d:6c:18:0f:c2:b1:68:55:86:c3:61:50:c0:6b:
03:f4:4e:94:36:36:40:20:99:fd:76:7c:22:01:2e:
ef:cb:c1:3b:8f:47:e9:b8:a5:13:8e:9d:ec:99:a1:
99:4c:dc:22:ab:fe:f0:1e:40:3f:e3:bc:87:c5:de:
df:3d:87:15:6e:f5:fb:af:5d:a4:92:3c:29:16:52:
f0:cf:30:13:a5:77:14:1d:27:f8:9a:77:76:f8:1d:
30:7c:04:5a:ae:61:23:41:b9:99:91:08:64:b3:9a:
44:94:79:36:67:b7:0f:16:1f:73:80:8e:4d:d8:50:
6c:64:3e:1c:62:b8:d7:63:e7:5f:2e:40:14:ab:49:
07:99:eb:9d:d5:0f:bc:ac:c8:45:09:6e:86:dd:6b:
a3:85:c4:7e:f2:81:81:74:e9:62:a3:54:37:5e:b5:
01:ad:70:31:50:8d:f2:7d:9d:3a:b1:ae:77:1a:00:
8f:cd:ec:ea:e4:f7:b4:3b:11:af:f9:28:01:e4:27:
a9:d2:df:74:e0:84:2c:66:87:12:f7:e0:e3:72:c6:
b9:29:38:a6:2d:33:43:db:15:aa:87:4e:6d:ad:cc:
07:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AD:8A:99:93:7E:E2:02:4A:F1:7D:C2:9A:29:2C:E7:EC:DF:0A:CD
X509v3 Authority Key Identifier:
keyid:10:79:7E:B5:F9:AA:9A:BE:52:00:8C:E7:F2:1A:B4:4A:FD:EE:A0:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:8a:60:14:8c:81:b7:92:da:84:61:10:27:68:a8:86:a0:3c:
06:d5:85:f2:22:0e:1e:6d:fe:41:d0:14:f4:6c:05:5c:13:4d:
5a:90:73:e4:bb:50:97:d4:15:34:b3:e7:7f:68:4d:8b:c7:bd:
a5:af:a1:86:fb:80:7a:6b:58:a1:52:1a:cb:8a:c1:b2:5d:6d:
ba:1c:22:84:24:2b:af:01:01:af:66:16:6a:e3:1a:5b:ec:f4:
89:23:f0:ae:79:46:1f:fe:df:bf:21:bf:26:f8:ae:71:4b:34:
e5:2f:53:6b:17:d0:0e:38:9e:f2:e8:8b:37:2b:13:18:2b:15:
16:10:e3:12:c4:29:66:ee:21:b3:56:8a:a4:63:ce:3d:d2:4a:
bb:4c:eb:96:35:60:e1:3d:e4:ea:86:24:4c:97:32:88:8e:30:
74:d2:ca:7c:35:37:9d:c2:e8:65:0e:ff:a3:e3:26:48:27:71:
d2:42:c8:4f:40:bd:84:40:21:03:0a:d1:39:a7:2c:ab:e4:8e:
02:f9:53:27:41:dd:79:17:88:41:a4:dc:06:d3:e3:37:0c:f8:
54:f0:3c:3e:8d:97:46:94:32:5d:21:a7:4a:92:16:ad:c1:ff:
b2:c8:90:08:82:90:84:92:32:25:72:8d:28:8b:7c:bd:3a:8f:
dd:0a:40:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:16:51 2026 by rpki-client