Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
File: EdnXl1uM2pIypCR8yd6abf28YGk.mft (raw, json)
Hash identifier: juut6Ax1be9KxmnYMjI9JHZD/FeBdGzQ2H/cq07gDWs=
Subject key identifier: E7:7C:A8:39:96:48:D7:FF:F8:9C:7B:16:56:DE:A0:22:6A:C5:BE:CE
Authority key identifier: 11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69
Certificate issuer: /CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
Certificate serial: 019D277254F662C8CCD78A3EC1AC759EFFA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 00:01:37 +0000
Manifest this update: Thu 26 Mar 2026 00:01:37 +0000
Manifest next update: Fri 27 Mar 2026 00:01:37 +0000
Files and hashes: 1: EdnXl1uM2pIypCR8yd6abf28YGk.crl (hash: 5xAu4TLaeHtngUdAs1SbsvUac6RXJLmdenWPifsBV3E=)
2: yYuc2YO9JtZZoH5XkuKsidq7BX4.roa (hash: HNsng+bOFwiIt3gy2qY4s78ZjR+RCoMxwOTIMZ72g50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:54:f6:62:c8:cc:d7:8a:3e:c1:ac:75:9e:ff:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
Validity
Not Before: Mar 26 00:01:37 2026 GMT
Not After : Mar 27 00:01:37 2026 GMT
Subject: CN=e77ca8399648d7fff89c7b1656dea0226ac5bece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f8:c8:c2:5e:0e:4f:a9:4e:68:39:e9:ec:ab:
e4:92:c6:9c:3c:11:76:91:51:47:90:53:eb:a3:6d:
33:a1:83:80:b0:2d:79:5d:e9:98:42:c8:28:e7:85:
bc:f0:5a:14:24:d9:66:15:ee:97:0a:e7:c2:ca:4c:
7e:c0:be:55:20:28:ff:ac:6d:fa:6f:4d:af:44:b1:
f7:09:90:b3:0c:22:e2:ed:0e:01:34:48:6c:59:ae:
cc:5e:05:5e:ee:1a:e1:b4:7a:93:e2:1f:52:99:d7:
23:9b:8e:ae:35:7b:05:d9:e6:c0:1b:2a:ea:5c:e6:
70:ed:98:3b:6f:7b:dd:96:9c:0f:ee:59:92:4f:82:
9a:6c:3e:cb:ad:be:bf:1d:e9:3c:4c:03:ce:92:63:
ff:de:f9:43:d2:ff:4c:ea:ef:01:9d:8b:37:6f:73:
66:1f:93:18:41:1d:1f:d7:5e:26:15:0d:5d:26:e2:
d2:99:a4:16:fa:a9:9d:7a:18:41:75:a1:9a:6e:03:
b4:41:9f:38:3b:b2:98:cd:8f:72:e2:00:57:b8:f4:
b0:a9:a9:20:89:54:77:70:9e:46:35:71:3a:05:17:
da:bd:f8:fb:6d:37:19:1f:c1:1d:e1:ea:1b:df:23:
dc:a7:58:eb:41:71:74:7b:45:29:3a:49:e7:67:79:
90:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7C:A8:39:96:48:D7:FF:F8:9C:7B:16:56:DE:A0:22:6A:C5:BE:CE
X509v3 Authority Key Identifier:
keyid:11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:25:ca:be:bc:0d:74:fa:a3:ea:47:19:7b:f6:98:c7:38:03:
db:7a:06:52:b6:21:ff:82:1f:75:cf:0b:23:4f:e3:05:9d:e8:
6d:b6:bf:b0:45:8a:a8:88:88:21:c1:cf:7b:bb:45:33:e1:0e:
86:10:04:7a:d4:05:69:9b:f1:d2:3b:47:87:63:85:87:0e:dd:
7e:91:5a:81:e2:aa:54:ac:af:a1:f7:66:33:33:e7:00:a5:f4:
a3:d2:dc:4a:b2:87:f4:b3:27:b8:e3:08:74:55:fe:95:36:48:
7c:f9:3c:f7:f0:e9:77:0e:21:a4:1b:33:1c:70:b7:17:7a:ce:
9e:c0:dd:39:38:45:97:54:c4:97:1d:e7:38:1d:9c:a8:fd:41:
28:3e:51:08:d2:8d:6b:d1:3b:55:b2:35:98:7f:11:ba:b9:30:
cd:6e:8e:be:67:76:98:ca:d0:e2:bc:4b:40:52:3c:84:59:10:
80:f6:c1:d1:b1:4f:75:32:3e:9f:28:a5:50:f4:af:6f:b4:bd:
6e:46:eb:a6:d3:5d:b1:ff:83:99:45:cd:d8:2e:f6:b9:68:45:
3c:c7:14:9c:ca:ae:82:38:e5:8a:5f:59:cb:1d:bc:27:11:03:
ec:91:58:ba:db:11:39:c7:c7:e6:86:d7:d1:8a:31:5d:bc:af:
ca:b6:be:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:32 2026 by rpki-client