Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
File: EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json)
Hash identifier: QRJt7THZLeO97ZzRFavkFDR2lV4UvkFuT3IuiCtv8T4=
Subject key identifier: 57:DF:6D:46:A0:9E:8E:57:D0:7F:97:8A:84:B7:5D:9D:B8:BD:CA:6F
Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Certificate issuer: /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Certificate serial: 019D27DFD5735C627015BF9EA5FFCFC73C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
Manifest number: 17DE
Signing time: Thu 26 Mar 2026 02:01:13 +0000
Manifest this update: Thu 26 Mar 2026 02:01:13 +0000
Manifest next update: Fri 27 Mar 2026 02:01:13 +0000
Files and hashes: 1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: 5HL89LUVwygNiRAExvlVt/tAPeKOdi32bSh36PypB6k=)
2: lJ6MK4EWxS2iDNPG8gtC0QXW6QY.roa (hash: gfFr5x9q2uzGjatgMbItLXzkpsrcI9SLgHSTPYcd2mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:d5:73:5c:62:70:15:bf:9e:a5:ff:cf:c7:3c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Validity
Not Before: Mar 26 02:01:13 2026 GMT
Not After : Mar 27 02:01:13 2026 GMT
Subject: CN=57df6d46a09e8e57d07f978a84b75d9db8bdca6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:28:10:9a:33:50:7e:66:72:05:f5:20:e7:
25:fa:03:73:52:27:af:57:60:67:5e:97:f0:f6:f0:
23:32:4a:f6:ef:a9:b4:13:7b:2b:dc:56:13:3b:05:
53:5f:d8:66:1f:b9:6e:35:48:17:1a:31:5f:0a:9f:
81:e4:6e:d4:17:ba:df:ca:ed:c2:b1:d9:00:34:f9:
1a:c8:d0:2f:85:f7:14:8e:c0:34:70:cd:58:ee:f2:
5f:37:00:2f:0c:f7:c2:72:b4:ae:22:f9:76:6e:4c:
16:a3:e2:de:7e:e2:d8:e8:33:a6:62:5a:77:d7:38:
05:67:d7:0c:ed:97:6e:90:88:54:a3:d9:2a:2f:14:
9a:09:78:19:ea:ae:65:35:3c:40:ff:fd:a5:e6:d9:
4f:be:d6:0f:fa:1e:88:a4:59:ce:54:31:5b:16:d3:
ac:c8:6e:c0:30:8c:4e:c3:0f:56:02:42:6c:b0:8c:
8d:e5:f3:eb:95:cb:69:c0:08:c2:dc:09:98:15:76:
7c:6a:9d:7f:63:8c:a6:52:62:f1:56:3b:8b:7e:c3:
dc:8f:b1:0a:90:03:24:6b:d4:e1:4c:0b:b4:0f:83:
c4:88:fe:3d:d6:53:3b:42:4f:b7:01:09:07:ba:7f:
38:66:b6:8f:17:97:d8:c1:0d:f4:d6:87:b4:e1:40:
0e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DF:6D:46:A0:9E:8E:57:D0:7F:97:8A:84:B7:5D:9D:B8:BD:CA:6F
X509v3 Authority Key Identifier:
keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d6:6a:f4:9a:58:12:25:fa:b8:44:d3:7e:46:3a:d7:f0:06:
f1:29:8b:11:ad:a8:b6:8a:d6:c7:a4:90:01:93:8a:63:17:94:
07:c7:98:83:ac:ec:f3:7d:1e:8d:60:86:9a:94:4f:b5:23:f7:
25:f7:71:17:73:e9:c8:56:1d:02:75:ce:74:e6:fe:5a:18:6f:
c9:19:8d:48:b6:0a:bc:9c:b1:c4:68:3f:28:d9:8e:a9:c0:fb:
19:0d:16:af:7e:7f:85:62:6a:45:69:7b:d6:e4:ca:0a:77:00:
ca:98:bf:27:61:71:e0:9e:65:78:8f:d1:0b:0a:9d:e3:ed:ca:
05:62:f8:e1:d5:85:c6:08:26:67:63:6a:f4:86:9b:5d:bf:6d:
d1:dc:1c:89:14:0f:5f:8e:cf:78:d1:e5:2b:ec:8b:6f:a5:10:
9d:1d:43:9b:ea:ff:e7:1a:81:f5:d6:78:18:bc:bc:7d:2b:61:
96:37:00:a0:e1:52:5c:98:97:81:e4:f3:05:be:6a:2d:48:23:
9c:4e:4d:92:af:e5:c7:62:02:4a:e6:43:61:7b:a3:00:c9:9e:
8e:9f:7e:66:dc:77:f2:58:16:31:7b:c0:62:15:f5:98:0a:b7:
25:00:a7:78:cd:63:f0:09:0a:69:92:27:d9:e2:06:75:5e:cf:
4d:4b:c1:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n39VzXGJwFb+epf/PxzwXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwODlhMDI1MWUzMmJmM2M0ODBmNWE5NGFiYjVmYjRlYjkw
NmE1YjMwHhcNMjYwMzI2MDIwMTEzWhcNMjYwMzI3MDIwMTEzWjAzMTEwLwYDVQQD
Eyg1N2RmNmQ0NmEwOWU4ZTU3ZDA3Zjk3OGE4NGI3NWQ5ZGI4YmRjYTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7YoEJozUH5mcgX1IOcl+gNzUiev
V2BnXpfw9vAjMkr276m0E3sr3FYTOwVTX9hmH7luNUgXGjFfCp+B5G7UF7rfyu3C
sdkANPkayNAvhfcUjsA0cM1Y7vJfNwAvDPfCcrSuIvl2bkwWo+LefuLY6DOmYlp3
1zgFZ9cM7ZdukIhUo9kqLxSaCXgZ6q5lNTxA//2l5tlPvtYP+h6IpFnOVDFbFtOs
yG7AMIxOww9WAkJssIyN5fPrlctpwAjC3AmYFXZ8ap1/Y4ymUmLxVjuLfsPcj7EK
kAMka9ThTAu0D4PEiP491lM7Qk+3AQkHun84ZraPF5fYwQ301oe04UAOAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFffbUagno5X0H+XioS3XZ24vcpvMB8GA1UdIwQY
MBaAFBCJoCUeMr88SA9alKu1+065BqWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83ZGI3YTgtODI3Zi00Y2YwLWFiYzkt
YjhjNDZmOTU2NDBlLzEvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83ZGI3YTgtODI3Zi00Y2YwLWFiYzktYjhjNDZmOTU2NDBl
LzEvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNZq9JpY
EiX6uETTfkY61/AG8SmLEa2otorWx6SQAZOKYxeUB8eYg6zs830ejWCGmpRPtSP3
JfdxF3PpyFYdAnXOdOb+WhhvyRmNSLYKvJyxxGg/KNmOqcD7GQ0Wr35/hWJqRWl7
1uTKCncAypi/J2Fx4J5leI/RCwqd4+3KBWL44dWFxggmZ2Nq9IabXb9t0dwciRQP
X47PeNHlK+yLb6UQnR1Dm+r/5xqB9dZ4GLy8fSthljcAoOFSXJiXgeTzBb5qLUgj
nE5Nkq/lx2ICSuZDYXujAMmejp9+Ztx38lgWMXvAYhX1mAq3JQCneM1j8AkKaZIn
2eIGdV7PTUvBMQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:32:38 2026 by rpki-client