Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
File: EfLjWzxVm22ENmfK1drGdOAblsM.mft (raw, json)
Hash identifier: l+GpijeAY8+ofEjNNqii8Ot4a1Tr1SuGTgCXOOdmqJM=
Subject key identifier: 56:BC:54:33:85:2B:8F:D5:24:DE:93:5F:80:41:84:63:42:93:13:07
Authority key identifier: 11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
Certificate issuer: /CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Certificate serial: 019D284E4B52DCB21880D22CE86079C32C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
Manifest number: 107C
Signing time: Thu 26 Mar 2026 04:01:52 +0000
Manifest this update: Thu 26 Mar 2026 04:01:52 +0000
Manifest next update: Fri 27 Mar 2026 04:01:52 +0000
Files and hashes: 1: EfLjWzxVm22ENmfK1drGdOAblsM.crl (hash: MTRSeXnv4hkjxc3NWsbxymaGZJZbJ3pfxZQ1ROGszIY=)
2: PbU9H76uPCLlqOQ-86yXlS220dw.roa (hash: V4GbhAZFv6aWhq1lviPUINhL7BoSID+QsQjoj/+8n6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:4b:52:dc:b2:18:80:d2:2c:e8:60:79:c3:2c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Validity
Not Before: Mar 26 04:01:52 2026 GMT
Not After : Mar 27 04:01:52 2026 GMT
Subject: CN=56bc5433852b8fd524de935f8041846342931307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:03:83:19:cc:29:09:27:62:63:67:ea:71:
69:04:5f:20:df:6a:3e:03:98:f0:82:65:12:d2:2a:
e1:49:57:b9:2b:aa:46:a0:bb:60:75:3d:bb:e5:57:
5e:9c:f4:b4:99:2d:e9:0e:08:c6:a5:93:ac:b6:11:
77:dd:43:fb:8c:3e:04:a0:55:24:25:a2:33:dd:43:
f1:b3:7d:c0:6c:2a:07:de:3f:0a:35:fb:e6:1e:88:
32:27:e6:be:2c:0f:45:1c:f4:13:58:3a:c4:5b:9f:
b1:53:82:ff:38:c8:69:d1:e2:4f:1b:3b:f5:69:ad:
10:08:85:ec:9a:23:fe:9e:78:87:b4:d4:ee:f9:4f:
38:b3:78:5d:55:ae:58:a8:18:1c:64:cb:65:9c:89:
c5:60:37:f3:72:3a:50:bc:ac:ca:b7:3e:36:04:49:
ef:80:71:de:ec:b7:ef:5f:12:97:9e:e6:53:13:52:
e0:7f:b1:21:b4:e8:04:73:11:f8:47:a0:e5:76:24:
c7:5a:c9:a0:aa:00:67:75:57:1d:1a:07:d0:a6:72:
db:7d:9d:1d:4e:c1:fd:4d:25:50:f6:dd:e2:c0:33:
cf:ba:66:5e:6d:cd:1c:58:19:93:4a:66:cd:12:0b:
c2:09:ba:99:32:d3:6d:35:94:31:78:08:aa:50:7a:
3c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BC:54:33:85:2B:8F:D5:24:DE:93:5F:80:41:84:63:42:93:13:07
X509v3 Authority Key Identifier:
keyid:11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:55:d0:5b:29:b1:34:32:fd:68:fd:15:7e:24:b4:7e:92:c8:
29:e3:95:82:14:78:8d:c4:95:bb:c5:a6:31:1d:4e:1b:2e:ea:
9b:ec:54:a1:fd:44:68:71:e4:ed:59:2b:41:48:2b:8e:23:4a:
c8:e6:46:c8:3e:9c:c2:ce:69:81:46:dd:43:6d:6c:d8:ca:71:
94:59:38:bf:40:5a:08:f6:55:fe:e9:07:77:7a:97:26:c1:89:
a7:d1:d4:ea:df:8b:3a:f6:3b:55:e8:4c:f2:7d:84:43:68:33:
43:8a:1d:17:31:1c:37:8a:19:5a:93:3e:14:c6:1b:47:9d:2b:
28:6b:c2:8b:c9:e1:9b:39:bc:78:6d:b5:1a:5f:b6:cb:88:05:
6f:89:6a:bc:63:59:ab:bd:13:a0:e8:0b:47:51:51:5e:9b:1f:
61:00:fe:9f:12:57:df:ae:1a:09:75:dd:d4:91:33:81:cb:ad:
0d:85:24:c2:dd:d9:82:db:2e:19:6c:3b:0a:0f:7b:cc:5e:1b:
fc:f4:1e:dd:44:72:78:7e:a8:c8:25:a8:4f:e2:e0:ae:03:77:
5a:75:93:86:74:b9:fd:14:1c:ca:f7:bc:1d:c4:44:ab:08:11:
f2:88:f6:a0:39:23:1f:75:ec:4c:fc:1a:5f:0d:ac:93:0f:6f:
bd:54:6e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:29 2026 by rpki-client