Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
File: EAcdqxaOjlPjzX31244PBCQukIY.mft (raw, json)
Hash identifier: Dt9Uor//GL34C4JMBYmXEdGtMQQFrX/VTgsP1WkzmN8=
Subject key identifier: 7C:23:9C:5C:AE:2C:AF:7C:95:CF:4F:FB:28:5C:BC:F1:57:BD:B4:4F
Authority key identifier: 10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
Certificate issuer: /CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Certificate serial: 019D273ADD06AAA27A7390892D7885E541EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 23:01:02 +0000
Manifest this update: Wed 25 Mar 2026 23:01:02 +0000
Manifest next update: Thu 26 Mar 2026 23:01:02 +0000
Files and hashes: 1: EAcdqxaOjlPjzX31244PBCQukIY.crl (hash: opedKNipMx6+EAwkBBVN8Wo+91YfKd7aP+RstWm1jWs=)
2: TehJaUKE7-UYVJg4qzcGnHF4gEE.roa (hash: g9yiDNMzuqT4Xury4y9vb4TVbFovThME/EkaBOlvwI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:dd:06:aa:a2:7a:73:90:89:2d:78:85:e5:41:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Validity
Not Before: Mar 25 23:01:02 2026 GMT
Not After : Mar 26 23:01:02 2026 GMT
Subject: CN=7c239c5cae2caf7c95cf4ffb285cbcf157bdb44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:88:5b:c5:cf:ee:c9:26:ce:5e:56:fe:b9:2a:
26:67:4c:a1:51:12:3a:c4:f3:a6:eb:26:ff:21:d8:
70:0d:b9:33:71:f8:33:c2:7f:49:d4:b9:16:cd:57:
4f:f0:dc:19:9f:ac:ad:71:a9:f5:0d:ff:6c:ed:84:
5a:fe:bc:f6:13:52:f5:dd:59:85:6e:cf:24:71:d4:
73:95:e7:3b:79:c1:27:89:9c:23:dd:e4:ec:09:0b:
fa:c4:79:b9:3e:38:ca:ab:18:7c:c4:dc:61:5d:cd:
20:b4:a8:ba:61:b0:38:90:9d:82:91:da:46:d3:7d:
d9:b7:39:49:a0:a2:ca:19:01:08:7b:d1:77:bf:6b:
6a:31:42:57:35:68:3b:9b:7f:5a:83:c3:1c:df:0f:
26:da:bf:3c:6c:97:d0:45:79:45:25:45:5b:19:37:
f0:63:59:58:23:5a:1e:d4:28:ec:8a:eb:87:1f:e2:
f1:ac:ce:51:0e:0b:05:da:33:be:c7:cb:2e:ad:b8:
d4:32:aa:08:ff:4d:11:26:41:66:1d:39:dd:e8:39:
4b:f3:d4:40:00:15:af:8f:92:1f:f3:d2:07:b1:5d:
51:42:ca:25:dc:ca:0e:40:74:34:d6:1a:2f:a2:84:
39:86:31:81:f3:e8:05:4a:b2:22:43:70:0f:37:40:
5c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:23:9C:5C:AE:2C:AF:7C:95:CF:4F:FB:28:5C:BC:F1:57:BD:B4:4F
X509v3 Authority Key Identifier:
keyid:10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:61:05:d3:0c:c8:cd:fd:b7:0d:b7:61:18:da:5b:a4:8c:9a:
5c:46:a8:ff:6a:0e:5f:6c:ca:ac:24:ce:c7:9c:a0:ca:ba:e8:
2a:4f:95:ca:f7:33:90:55:97:fa:a2:a9:ca:65:23:73:56:f4:
0a:79:2c:0f:a9:0b:73:13:c0:23:41:64:b4:8f:ff:b4:ea:82:
ee:cf:3b:d5:c9:0e:91:e9:f9:d8:75:12:db:88:dc:c3:f4:ea:
b5:ad:b2:20:60:f1:94:67:2a:82:7b:80:57:5f:74:1d:67:f0:
02:2e:cc:b7:89:73:0f:8d:60:2b:ea:88:3e:84:d4:4d:d1:aa:
af:88:37:81:9a:cd:d2:a4:cc:7c:bb:c7:30:54:e8:15:02:11:
97:f7:52:a9:f6:a0:82:63:73:e4:7c:53:1f:61:c8:c9:36:74:
0b:f6:99:21:c0:76:26:8e:6e:6e:31:a8:62:81:a9:04:13:ac:
8a:b9:1e:10:f5:13:68:54:48:ea:d2:72:b4:a4:68:1a:22:d7:
a3:23:de:ec:54:53:a1:7b:94:55:8c:20:89:3c:95:55:95:34:
4b:1e:93:46:9b:c5:1f:86:e3:d4:25:59:23:72:c6:c7:d0:95:
70:6b:b4:8a:ec:9c:93:cd:62:24:12:5c:0b:f1:e2:fe:59:c8:
5f:08:d0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:43:20 2026 by rpki-client