Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
File: EXdPipmODyrxj3UnnjJlSBNpRIg.mft (raw, json)
Hash identifier: 5d90xWbqtTDMyjrdF2TZxtLfNEIbHM4ekfg8osIzSDQ=
Subject key identifier: 4F:A7:FC:D8:38:C6:D8:BA:46:79:C0:97:19:47:CF:8F:1D:59:B7:3E
Authority key identifier: 11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
Certificate issuer: /CN=11774f8a998e0f2af18f75279e32654813694488
Certificate serial: 019D2A724BDCACD8F952146DA43F6441A783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
Manifest number: 06CC
Signing time: Thu 26 Mar 2026 14:00:26 +0000
Manifest this update: Thu 26 Mar 2026 14:00:26 +0000
Manifest next update: Fri 27 Mar 2026 14:00:26 +0000
Files and hashes: 1: EXdPipmODyrxj3UnnjJlSBNpRIg.crl (hash: leRQ1DzBrq2n8t9Iq/lFQp1VxdBgtpQxgNqSkm2b7T0=)
2: ygqVEItGIAPq201_EaX3RPM0SYE.roa (hash: nK2V1OaTjiUIms74l37fVU9XwfhRb41uIhN10QlUnmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:4b:dc:ac:d8:f9:52:14:6d:a4:3f:64:41:a7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11774f8a998e0f2af18f75279e32654813694488
Validity
Not Before: Mar 26 14:00:26 2026 GMT
Not After : Mar 27 14:00:26 2026 GMT
Subject: CN=4fa7fcd838c6d8ba4679c0971947cf8f1d59b73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:25:1a:9a:1f:05:0b:e1:24:70:79:ac:ea:
f2:45:1a:85:f2:09:4b:63:ab:27:9a:de:b9:9c:8c:
69:06:3e:52:4e:a9:d0:ab:bc:fd:8b:40:58:0b:9f:
4e:09:12:ef:be:57:d2:51:af:31:82:f5:8d:56:4a:
04:b8:71:ff:3f:e5:d1:ac:c3:5d:e0:bf:0b:38:54:
40:c2:0b:2b:c0:94:9b:11:73:3e:06:9b:18:d7:d5:
c5:27:8f:bb:3a:16:91:96:6a:cd:50:0a:7c:b1:cf:
76:a2:0b:86:87:a6:ab:77:f0:29:d4:e9:60:9a:cb:
eb:2c:4c:e0:87:8b:02:37:3b:4c:ee:46:be:c3:72:
fa:a3:3e:a2:a7:1d:7d:36:45:33:ed:46:a7:71:8c:
e4:10:ef:e9:12:39:11:31:ac:d4:34:cb:d1:b3:ca:
4c:d0:38:47:06:1f:25:16:6b:ad:8d:8e:38:ef:f1:
1b:79:64:d7:49:b8:60:b0:b9:64:20:68:31:08:b3:
b2:f6:99:6a:42:94:6b:26:ec:a9:b8:95:2e:60:2f:
76:4e:32:17:c2:ed:fe:6c:4f:f5:44:db:ff:a1:97:
d3:d0:5d:3a:86:f4:25:a9:01:4a:45:94:42:a8:dd:
db:f4:4d:af:62:06:8f:9c:15:29:b0:df:97:a7:8a:
7a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A7:FC:D8:38:C6:D8:BA:46:79:C0:97:19:47:CF:8F:1D:59:B7:3E
X509v3 Authority Key Identifier:
keyid:11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5c:01:72:95:55:b1:cc:a0:d4:68:fa:0d:52:67:23:39:9e:
0d:0b:89:5c:2a:36:c2:0b:4a:d8:44:0a:d9:15:24:97:67:ad:
6b:2b:c8:47:8e:77:b6:bb:cf:c1:c8:3b:fd:51:5b:55:41:5d:
87:b3:7b:90:35:3b:5d:c6:87:50:0e:5a:90:4a:c7:cd:86:b5:
4d:48:b1:5a:1e:c4:c9:5a:cf:80:1b:5d:20:fc:48:e3:8f:3c:
fc:d2:2d:71:d6:29:7c:9f:17:74:45:7c:59:9f:60:41:6e:ef:
bf:e0:c6:47:2a:50:3c:e6:2b:3b:9c:4d:31:44:10:f9:e3:3a:
dd:03:4c:ca:26:68:79:7f:1d:40:8c:22:54:b9:49:58:fc:9f:
f2:55:4d:34:85:38:e7:b9:52:00:83:7a:cd:b1:06:86:6d:e1:
7c:a8:42:3b:65:29:39:a8:17:c2:01:a4:d4:f2:d0:fe:93:a7:
ea:94:87:f1:8b:79:17:57:41:78:5f:2d:09:6c:b3:d4:e2:1b:
1b:55:19:d9:9a:06:95:77:dd:e3:bd:d4:7f:6c:62:68:10:1c:
bc:dd:f5:6a:c7:52:d5:ce:a7:1d:76:c9:8d:af:95:7b:be:24:
9d:b6:22:ff:db:5a:2f:75:94:34:66:93:f6:e7:03:ba:0b:84:
8a:d3:8e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:37 2026 by rpki-client