Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
File: EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft (raw, json)
Hash identifier: /VjvG97CDiuPE60PN94Ago5tiLb6Ci42M3ZyzTVcFK4=
Subject key identifier: B9:51:F7:34:C5:4B:97:40:50:A0:0C:0E:D9:00:EB:13:E0:38:6E:BB
Authority key identifier: 10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93
Certificate issuer: /CN=1038d7a2954a32d2afd16b88b363b390681cd593
Certificate serial: 019D2AE067701F7D34A83711D43D00C83393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
Manifest number: 115B
Signing time: Thu 26 Mar 2026 16:00:42 +0000
Manifest this update: Thu 26 Mar 2026 16:00:42 +0000
Manifest next update: Fri 27 Mar 2026 16:00:42 +0000
Files and hashes: 1: EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl (hash: X291xtzycITYqnK3Yy/88gkYzZnwCpBsHolc24qMouA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:67:70:1f:7d:34:a8:37:11:d4:3d:00:c8:33:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1038d7a2954a32d2afd16b88b363b390681cd593
Validity
Not Before: Mar 26 16:00:42 2026 GMT
Not After : Mar 27 16:00:42 2026 GMT
Subject: CN=b951f734c54b974050a00c0ed900eb13e0386ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fe:56:59:cd:21:fd:48:ad:76:60:31:7e:fa:
44:44:ec:94:dc:28:d4:3a:1a:d4:42:70:7d:5d:83:
0c:c3:69:5c:43:f3:a8:73:b0:6e:f2:44:01:a5:29:
eb:91:3c:56:47:ff:78:60:35:2b:94:92:7f:a5:b7:
d6:65:b1:ef:07:96:89:fd:94:d6:b7:51:0c:51:6c:
99:bb:95:b9:d4:f9:15:fe:20:47:d5:64:84:1b:b7:
c1:86:5e:8c:6f:bb:7e:b8:82:a9:f0:66:67:c7:78:
db:33:a4:c0:3d:33:86:41:20:7f:24:eb:d2:76:4b:
d4:c0:3b:4d:d3:b8:00:65:ec:c5:64:70:0b:ff:2d:
9e:b6:10:9d:b7:e0:e9:12:89:31:39:75:89:78:6a:
f4:ca:6e:4a:ee:1f:21:1b:9e:5f:39:05:57:1f:7c:
1a:97:26:3f:72:4c:c3:08:d2:b7:53:6a:5d:87:6a:
76:30:15:47:0d:7c:5f:0e:7c:d1:a0:a7:38:60:83:
13:5c:cf:7d:66:da:f6:ea:13:c7:48:08:00:25:61:
6f:82:bb:ee:8b:34:df:ac:85:8b:5e:9f:b7:20:6c:
e1:6b:f6:7c:d9:6c:85:99:90:d9:b4:1c:c7:f5:36:
83:64:c1:e7:bf:6c:88:8b:46:4a:d0:47:62:a3:ee:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:51:F7:34:C5:4B:97:40:50:A0:0C:0E:D9:00:EB:13:E0:38:6E:BB
X509v3 Authority Key Identifier:
keyid:10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d7:43:cc:02:dc:5e:24:3e:2e:3c:87:ba:a2:de:37:9a:07:
83:ad:da:73:a9:1d:17:8d:e5:76:88:5c:dc:cd:c1:70:b5:ea:
e2:9e:c3:70:1b:dc:b1:91:af:55:88:b4:96:f3:55:30:04:0a:
25:e1:22:c7:35:f5:55:39:a3:fe:c1:4a:f8:d8:25:e1:db:a0:
cc:94:7e:7a:1a:3e:c5:73:ff:de:36:3a:10:13:30:24:a7:cd:
23:7b:d0:af:d5:0a:a6:3e:7f:ef:39:7e:1b:ed:f1:8d:08:1d:
ac:22:3a:b3:56:8c:e9:4e:f3:46:6a:bb:e4:9a:95:9f:fc:22:
eb:b0:c6:fd:df:6b:8a:b7:c3:d6:fb:29:40:f6:e6:ea:af:9a:
9a:9a:32:f3:e0:d2:fc:14:12:6f:78:af:26:0c:4a:18:d5:e1:
88:72:ef:48:b7:a1:6e:3a:cd:3b:a3:3f:a3:c4:0d:6f:8d:15:
2b:79:08:c5:ba:7c:29:f7:a1:06:a6:80:21:76:4b:61:d0:df:
dc:38:84:8d:60:20:ba:19:e5:cf:cc:d1:63:82:52:c9:04:90:
7f:3e:2b:56:69:e6:46:2f:5f:c1:1a:bb:ff:70:e7:4d:93:fe:
a0:71:08:6f:14:10:5a:d9:00:e5:2e:92:c6:07:4c:1f:64:c4:
42:8e:02:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:44 2026 by rpki-client