
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
File: ECgK10HnIygIXV-leXqEUfX7Ajg.mft (raw, json)
Hash identifier: 1HwdLDRba5eC9yNlzdDeDv/VsCnj9i+tSkDW6UwmGAs=
Subject key identifier: 04:77:26:02:39:24:31:83:B5:39:9B:73:0D:D0:7F:EF:0A:26:5D:A8
Authority key identifier: 10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38
Certificate issuer: /CN=10280ad741e72328085d5fa5797a8451f5fb0238
Certificate serial: 019D27E027999B2355C25EB9224205FEAA0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
Manifest number: 087B
Signing time: Thu 26 Mar 2026 02:01:34 +0000
Manifest this update: Thu 26 Mar 2026 02:01:34 +0000
Manifest next update: Fri 27 Mar 2026 02:01:34 +0000
Files and hashes: 1: ECgK10HnIygIXV-leXqEUfX7Ajg.crl (hash: 80bYDnMYkH53ij4TsmcEBXzlR37JhOXQFt80cZMPYfQ=)
2: cFBz2VwRtAE7Ewcz64ZDacXfB5Q.roa (hash: 8S34S+6olNesEjRXQB7m9lNGl0nTPvWZwfDko3leMVc=)
3: f4YlcOOq_31WT7fc27bbteRGEMw.roa (hash: E8VFyjnJbu0a/NApI535E/vwvrXP+nlwEeePdVD35Jo=)
4: ylp5NiXG-DWol4IjywEA3MrLU5k.roa (hash: ev143/+cymXpiGa9zVi8mgdvQUw00MuKnS6trW4s38w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:27:99:9b:23:55:c2:5e:b9:22:42:05:fe:aa:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10280ad741e72328085d5fa5797a8451f5fb0238
Validity
Not Before: Mar 26 02:01:34 2026 GMT
Not After : Mar 27 02:01:34 2026 GMT
Subject: CN=0477260239243183b5399b730dd07fef0a265da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7b:1c:69:a9:61:39:d7:78:58:36:6d:af:72:
22:d3:39:37:31:92:95:2f:ae:ae:bb:c2:47:44:45:
c7:f2:25:f5:86:c6:c8:86:90:7b:ac:0d:18:12:c3:
f0:2a:e7:48:94:d1:e7:7a:2e:4a:7c:cb:65:d0:26:
76:0f:b4:45:50:be:18:0d:55:f3:b0:f6:0d:0b:47:
56:6f:ad:b7:da:74:1d:a2:79:9e:3f:a0:2f:e2:be:
fe:bd:04:d7:d0:66:63:d9:39:6b:2b:6c:25:0e:91:
1c:37:8a:b5:61:a0:d7:22:10:4a:d9:0b:cc:98:70:
cd:3d:a2:38:39:d0:d8:79:0a:23:f9:cf:cf:96:15:
49:21:bd:b5:74:04:21:7e:a2:26:6c:66:31:c6:ed:
e2:8b:43:12:d1:af:d6:dd:95:bc:39:2f:4a:b6:7e:
0b:bd:96:43:a2:05:7d:94:54:be:66:59:1a:f6:cf:
6c:c8:0a:b9:6a:1b:44:cf:60:1b:75:ae:67:3d:48:
d1:2d:b6:eb:ff:cd:ab:12:70:39:0b:02:f4:e7:56:
79:85:eb:3d:90:e6:3e:dc:b2:8c:c1:65:e2:18:38:
4e:1c:7d:8d:89:3c:03:6d:78:3a:17:d7:56:d4:5f:
00:de:0e:1c:d8:b8:52:ba:1a:c7:92:e2:c1:4b:16:
45:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:77:26:02:39:24:31:83:B5:39:9B:73:0D:D0:7F:EF:0A:26:5D:A8
X509v3 Authority Key Identifier:
keyid:10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2b:cb:76:b2:7e:1a:44:15:54:69:84:16:0c:8a:e4:25:15:
a5:1c:0d:e9:7c:aa:84:a4:5e:91:2e:6c:1b:95:70:46:1c:6d:
89:dd:a5:09:5a:ea:0e:f7:ba:d8:ee:22:b5:64:d1:aa:5b:65:
0a:89:2d:d3:38:d1:8f:5c:16:5e:2d:72:7f:2e:93:90:41:52:
16:4c:f2:9b:f3:b3:f7:4a:d7:c1:b2:cf:44:44:3c:88:c9:4a:
5f:4f:1f:5c:49:35:96:5d:90:2d:62:93:3f:34:b5:e0:2b:02:
a2:b9:40:08:65:b5:49:1c:64:40:12:44:3f:22:d4:8a:eb:e8:
18:cb:d9:24:a2:11:2f:89:31:a9:b7:15:83:b3:e2:89:04:63:
25:cb:96:8f:7e:6f:be:a8:bd:78:83:c5:e7:0e:69:d9:f1:eb:
3c:c2:10:9c:df:2f:54:d1:64:b2:f3:cd:96:db:c5:c4:60:17:
7b:c9:e0:29:57:f8:2a:08:11:d0:58:66:b2:e6:82:c1:ab:79:
9b:e8:f7:4b:da:2b:9f:60:1c:d1:8b:b5:09:63:11:fe:a9:8e:
48:ae:9e:9d:1d:0c:12:16:14:38:a1:15:dc:02:bf:bc:35:a9:
e6:a9:71:d9:a1:33:14:64:6c:83:b7:2f:18:10:95:13:b4:60:
53:b6:78:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:25 2026 by rpki-client