Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
File: ELZc9vpeH8roz4TJcB44vftjqrM.mft (raw, json)
Hash identifier: +zQqmEEw/K0rsd3xZKTXpKuzN9581pa5BnTeKCkZE9c=
Subject key identifier: 03:9C:46:DF:2E:1C:AB:F5:66:4B:24:57:35:4D:F7:CC:7F:45:5F:9D
Authority key identifier: 10:B6:5C:F6:FA:5E:1F:CA:E8:CF:84:C9:70:1E:38:BD:FB:63:AA:B3
Certificate issuer: /CN=10b65cf6fa5e1fcae8cf84c9701e38bdfb63aab3
Certificate serial: 019D265EED14EDB0783EC30AF8203EF2A135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
Manifest number: 1132
Signing time: Wed 25 Mar 2026 19:00:48 +0000
Manifest this update: Wed 25 Mar 2026 19:00:48 +0000
Manifest next update: Thu 26 Mar 2026 19:00:48 +0000
Files and hashes: 1: ELZc9vpeH8roz4TJcB44vftjqrM.crl (hash: xa86xDqNFLTZsgcRZVrS1tBS0n28SWMgjOVHWHLfGwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:ed:14:ed:b0:78:3e:c3:0a:f8:20:3e:f2:a1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10b65cf6fa5e1fcae8cf84c9701e38bdfb63aab3
Validity
Not Before: Mar 25 19:00:48 2026 GMT
Not After : Mar 26 19:00:48 2026 GMT
Subject: CN=039c46df2e1cabf5664b2457354df7cc7f455f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:47:66:34:a3:29:cf:84:86:4c:0a:cc:cf:d0:
1b:f7:cc:4e:02:bb:ba:6c:5e:c2:ad:43:21:d2:a1:
b0:28:0b:83:66:c3:8f:b2:57:ec:04:2a:2b:c3:b4:
20:ef:5d:7d:74:59:74:3c:bf:bf:c4:4b:a3:ef:fd:
60:8b:15:5b:ec:15:d4:50:9d:05:e9:37:ea:9e:c3:
2d:ce:ff:9d:23:66:8c:c1:a1:65:e6:ea:28:72:7f:
6d:9f:40:d1:1f:8f:c0:c5:43:16:59:79:70:f4:b8:
b1:32:df:97:21:32:76:a9:95:e1:59:54:47:2d:5b:
21:fd:20:67:28:71:e3:3d:c5:c9:ad:21:a6:2f:70:
5a:72:36:4a:44:fc:6d:bd:ec:70:f4:b6:05:12:c9:
f5:d0:df:51:22:62:4d:bd:ba:46:6e:5f:0a:79:a4:
79:7d:87:21:cc:43:b6:03:8d:c0:b5:a7:2d:e7:60:
0d:d2:8f:80:ec:5b:36:e0:31:4d:23:e8:10:8a:14:
fb:15:ff:5b:20:6b:b1:fb:d4:5c:be:cb:7d:d9:5c:
7f:f3:cc:ca:c3:fc:59:e2:00:43:61:8c:da:c2:bb:
ae:6b:41:25:28:66:11:ae:0c:2f:9c:b5:2a:3b:13:
86:78:03:6d:97:c7:54:c3:33:68:6a:a5:c8:01:62:
6a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9C:46:DF:2E:1C:AB:F5:66:4B:24:57:35:4D:F7:CC:7F:45:5F:9D
X509v3 Authority Key Identifier:
keyid:10:B6:5C:F6:FA:5E:1F:CA:E8:CF:84:C9:70:1E:38:BD:FB:63:AA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f0:f0:da:6e:a7:62:3b:85:af:20:aa:f3:e0:98:6d:7d:38:
3d:21:16:cc:b5:2f:70:9b:66:33:4c:2f:ca:f0:5e:ca:a3:a4:
6e:d6:bf:02:85:9c:dc:40:3c:39:5c:05:d9:b2:15:2e:5b:0b:
e1:2b:9d:be:cb:2e:bc:27:8c:8f:4d:1c:69:84:a4:56:01:41:
97:b2:94:25:63:45:70:87:72:12:d1:6e:e3:c0:9d:ed:7e:c4:
cd:d1:b7:c1:60:7b:c6:18:ec:d2:85:b1:0b:27:59:05:16:2b:
37:bd:6c:ac:d9:1c:6a:ce:d6:39:44:28:b2:d5:59:27:b9:48:
64:5e:f4:03:13:d0:6c:e9:e0:79:40:16:6c:c8:5c:11:5a:bb:
07:3d:d4:6d:05:ba:40:f3:83:55:c6:f0:01:76:09:82:e6:d6:
70:67:4d:a2:0d:cf:4e:c1:4b:5f:c2:4b:81:2b:73:5a:96:7e:
a1:ad:ca:5e:0d:71:58:e6:06:b9:ee:86:3c:e3:f2:fe:94:e3:
ce:50:7e:57:c7:4c:35:38:f7:ac:1f:5b:b7:5d:c5:6e:89:8f:
d3:bd:ce:39:e1:76:35:98:73:cf:4e:23:3b:74:b1:f0:ff:66:
d3:8f:aa:40:00:f6:10:5c:8e:3e:27:0e:2e:db:17:34:e7:ba:
21:20:be:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:46 2026 by rpki-client