Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
File: EiDdK5LaKExjzsRvb2pBwBOpyIE.mft (raw, json)
Hash identifier: c0sLVudZvNwE5D3WIwwIqL0GfY2b3E0W2Medgp6k5pI=
Subject key identifier: 30:56:65:60:04:BC:BA:E0:12:3B:39:EB:DB:B2:0C:37:AC:84:D2:9E
Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
Certificate issuer: /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Certificate serial: 019D27E04A2F634AD8B27046751E7F9BFF3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
Manifest number: 117D
Signing time: Thu 26 Mar 2026 02:01:43 +0000
Manifest this update: Thu 26 Mar 2026 02:01:43 +0000
Manifest next update: Fri 27 Mar 2026 02:01:43 +0000
Files and hashes: 1: EiDdK5LaKExjzsRvb2pBwBOpyIE.crl (hash: SWG+Ongioxrz3IwnAPr3ciMs/5gumWwTtreYnK+tPJU=)
2: M1xpquK399A5wByDEtKHq_wqClk.roa (hash: zVgRyEKABrkhckv/3fAzW08qm0hqJsbaTBszAR7kayA=)
3: kkk3yXE8XoIEDRsGs9EdkpoqcD8.roa (hash: k6wchoXLvZ9SOEunorfauAloLI47oJBy9bourGp1I0s=)
4: muPGRcmARPddaHREVLuAaLLzFEM.roa (hash: 8DfdChKzrQe9Wu4l2fprWgGRtA6D3e1jiM5zqPRZkgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:4a:2f:63:4a:d8:b2:70:46:75:1e:7f:9b:ff:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Validity
Not Before: Mar 26 02:01:43 2026 GMT
Not After : Mar 27 02:01:43 2026 GMT
Subject: CN=3056656004bcbae0123b39ebdbb20c37ac84d29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:4e:77:20:1f:d9:af:37:ac:15:c0:0b:70:
13:83:a5:9f:88:77:8b:61:39:61:8b:d5:a1:03:65:
25:1b:b3:ca:8a:9a:70:40:70:62:1c:8b:e1:70:23:
ca:0b:27:42:da:1d:c4:25:17:5c:87:ab:29:5b:70:
a2:a2:e4:10:64:db:29:cd:a5:50:bc:6e:7e:f5:50:
2e:dc:60:48:32:fb:44:d9:af:af:a4:8d:ab:f6:f4:
ff:05:ed:2a:95:28:dd:e2:71:0f:c2:45:56:56:34:
e4:3d:29:31:bd:5e:0d:30:f9:76:80:83:c5:82:95:
3b:63:02:35:83:28:d9:c5:4b:1d:73:7d:6e:53:e8:
03:48:f1:b9:83:e8:28:44:53:cf:ef:9b:90:dc:81:
92:56:4e:4e:37:ce:cb:9d:ab:0d:4d:09:b3:33:a4:
3d:3e:43:cd:b4:a4:c9:6d:3b:9f:96:85:64:1b:3d:
7d:db:5a:7d:34:8f:18:52:a4:ae:6a:9d:89:57:60:
bc:a3:c2:ac:e2:f4:d4:f9:0d:00:bd:c2:2d:61:fe:
4d:1b:41:d5:02:37:11:ca:9b:f0:eb:48:90:36:d0:
28:28:e3:43:8e:ea:e8:c5:a7:b4:16:cb:fa:9a:2e:
91:15:51:73:19:77:67:b0:d8:79:85:a3:1e:21:8f:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:56:65:60:04:BC:BA:E0:12:3B:39:EB:DB:B2:0C:37:AC:84:D2:9E
X509v3 Authority Key Identifier:
keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d0:c0:29:ee:8b:84:ce:fa:54:53:38:c0:76:9a:c7:2c:96:
b3:ea:73:63:82:01:9a:a6:23:a9:bb:a9:3f:22:0a:64:e2:8e:
68:60:94:38:ab:c2:63:0c:80:70:f6:64:5c:26:07:c3:58:f8:
4b:32:b9:85:95:06:f7:e1:68:a6:fa:9e:3b:ca:83:b5:dc:86:
e4:d1:03:e9:33:a3:77:9d:2b:37:14:a6:bf:61:47:01:71:96:
d6:3a:82:ec:52:a4:12:30:e8:ce:b1:ef:f4:ff:c1:45:38:22:
a3:02:9b:9a:5e:a9:73:97:7f:a1:f3:44:6a:04:c2:df:7d:2d:
be:06:90:09:16:a2:d0:f5:0a:bf:7e:2b:27:71:5a:dd:7d:ff:
76:31:38:a4:f8:a9:1d:b2:01:0f:c3:37:5c:4c:3a:6d:1b:96:
ce:f6:6d:f7:a7:51:dd:84:79:b6:6a:c7:a6:dd:45:b6:b2:4c:
af:97:95:2b:99:51:ee:1d:63:e7:04:7a:87:fa:7e:e6:8f:dd:
b1:e1:f9:96:b6:b8:f7:21:a5:b2:af:ea:b3:0f:ba:10:0d:e0:
bc:f4:d8:db:b6:28:c7:00:80:4e:c4:28:34:89:ad:00:fb:e9:
47:e9:1f:2e:f0:6e:58:c4:5b:2e:4d:c7:ab:9a:59:13:57:3b:
c5:69:21:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:28:23 2026 by rpki-client