Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.mft
File: ElV9TH4Hxulcs5EpLcEYZvZhn10.mft (raw, json)
Hash identifier: oTB2uWVKl6Db8iMHBC/FGiEbaPKgYfNEhk+LycjQ8J8=
Subject key identifier: 68:99:A7:7D:9B:B2:AC:CF:91:49:7D:75:46:4A:EF:B0:D4:A5:3E:3B
Authority key identifier: 12:55:7D:4C:7E:07:C6:E9:5C:B3:91:29:2D:C1:18:66:F6:61:9F:5D
Certificate issuer: /CN=12557d4c7e07c6e95cb391292dc11866f6619f5d
Certificate serial: 019D25F1E96F614E826D79D9B1497B1E7104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElV9TH4Hxulcs5EpLcEYZvZhn10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.mft
Manifest number: FB
Signing time: Wed 25 Mar 2026 17:01:43 +0000
Manifest this update: Wed 25 Mar 2026 17:01:43 +0000
Manifest next update: Thu 26 Mar 2026 17:01:43 +0000
Files and hashes: 1: 8iHCL-HIsWmSQWcboIJtcTz5dA0.roa (hash: yMhfyArXlBp53ltADAhKVaNnmVsKrW5l1Xn8ONQr2Og=)
2: ElV9TH4Hxulcs5EpLcEYZvZhn10.crl (hash: vrBm1XvG2SCWkDEBNH3Dg8qLZgglhLovzvsmwLxT4p4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.mft
rsync://rpki.ripe.net/repository/DEFAULT/ElV9TH4Hxulcs5EpLcEYZvZhn10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:e9:6f:61:4e:82:6d:79:d9:b1:49:7b:1e:71:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12557d4c7e07c6e95cb391292dc11866f6619f5d
Validity
Not Before: Mar 25 17:01:43 2026 GMT
Not After : Mar 26 17:01:43 2026 GMT
Subject: CN=6899a77d9bb2accf91497d75464aefb0d4a53e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cc:a2:de:6c:b3:d8:b5:02:c7:90:80:1e:a1:
00:b6:b1:02:35:a2:17:ef:1c:e0:2a:82:50:fa:c5:
11:99:c7:4e:03:c2:24:0b:78:dd:46:de:f3:0d:6b:
49:10:41:40:9c:61:68:20:74:0c:94:02:01:5d:d5:
45:b9:9d:5d:e4:64:7c:c8:df:06:c5:25:17:9c:93:
2d:6e:89:08:aa:18:2f:e0:cd:fa:0c:fb:cd:fb:c0:
79:24:e3:ea:15:cc:af:30:04:d3:60:ab:13:d6:3e:
60:12:49:fc:b2:ae:75:8d:67:fe:69:1f:fe:05:77:
10:34:01:b4:3f:10:67:69:e5:78:d3:af:ec:0c:65:
4d:11:fe:26:bc:95:30:53:22:42:50:9d:64:bb:c4:
81:a4:b4:62:29:c1:c6:88:72:17:a5:8f:cb:35:f5:
a7:43:a3:e0:1c:11:3d:e9:b6:89:9d:a2:2f:10:b8:
dc:14:6d:a8:87:5c:8e:64:4c:bd:b5:bc:ed:5b:a6:
d9:d6:b5:83:7c:7a:c9:88:70:94:13:c0:57:7c:a4:
2d:4e:b2:5a:67:39:cb:3e:ae:38:90:9d:b2:53:18:
27:35:72:24:ad:7e:32:3d:6e:82:83:9c:23:3a:3d:
80:e1:d5:ae:4b:dc:df:af:55:7b:7c:da:36:99:f5:
ae:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:99:A7:7D:9B:B2:AC:CF:91:49:7D:75:46:4A:EF:B0:D4:A5:3E:3B
X509v3 Authority Key Identifier:
keyid:12:55:7D:4C:7E:07:C6:E9:5C:B3:91:29:2D:C1:18:66:F6:61:9F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElV9TH4Hxulcs5EpLcEYZvZhn10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:85:d6:28:de:9e:f1:c1:53:36:10:aa:b0:b0:80:5e:87:34:
ae:91:54:cc:63:e4:0b:aa:6b:89:36:8c:8f:d8:df:7b:e3:2f:
1f:f2:97:08:6e:1b:72:2f:80:0e:ad:d5:74:77:22:ae:22:97:
d3:1f:f0:d4:87:95:ee:87:f3:b1:44:2b:cd:a4:6a:89:7b:41:
f4:15:c2:f0:f7:e8:00:2b:48:44:73:bc:37:62:a7:ec:f9:8a:
fb:e9:ca:5d:30:99:71:f8:40:81:07:d1:23:ce:34:9a:6c:40:
23:a1:8c:b3:62:2b:4a:e4:40:06:fb:9b:f5:de:d6:e4:73:8d:
d7:86:81:c8:ff:7a:af:f9:17:ba:d7:8f:2b:2c:54:cc:92:8f:
bd:15:b2:07:b2:47:3f:19:a2:32:f7:48:da:24:84:49:bb:65:
6c:bb:96:18:f0:af:b7:98:be:6f:9d:c8:d7:05:0a:dc:20:ab:
7d:81:db:e1:ec:27:e4:44:0f:44:22:e2:6d:bd:50:47:bf:d7:
1c:f0:b2:62:54:58:ab:e8:9a:dd:aa:f7:61:63:43:1f:8c:37:
8f:19:ff:81:7c:eb:5f:ad:09:24:4a:4f:1b:f5:06:37:16:62:
40:ac:31:d1:7a:55:df:f0:dc:32:94:af:89:6c:e8:db:85:e0:
ac:55:23:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:49 2026 by rpki-client