Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
File: eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft (raw, json)
Hash identifier: lIL+84F79tDlFcCNuMCSa8g4DsLX15lPuXIV1R5zXyQ=
Subject key identifier: 12:51:03:3F:F4:E9:B5:0E:FA:13:6A:34:9A:1F:5F:5C:E0:F1:44:E2
Authority key identifier: 78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C
Certificate issuer: /CN=78d403d938d71bdc5a3acb076d32af8283be627c
Certificate serial: 019D2AE00C11B798D7D85139396777A22173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
Manifest number: 09A5
Signing time: Thu 26 Mar 2026 16:00:19 +0000
Manifest this update: Thu 26 Mar 2026 16:00:19 +0000
Manifest next update: Fri 27 Mar 2026 16:00:19 +0000
Files and hashes: 1: eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl (hash: oFMzfO6pcCfpSxfVx++SDNSOU0qQCkPwaXQds+hzCwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:0c:11:b7:98:d7:d8:51:39:39:67:77:a2:21:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d403d938d71bdc5a3acb076d32af8283be627c
Validity
Not Before: Mar 26 16:00:19 2026 GMT
Not After : Mar 27 16:00:19 2026 GMT
Subject: CN=1251033ff4e9b50efa136a349a1f5f5ce0f144e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5f:c8:9a:be:ec:f9:3d:a8:57:f5:11:7a:cc:
4a:d3:fd:23:9e:1f:9d:46:a4:f0:f2:0a:a1:c7:b8:
52:85:0d:50:e2:7e:91:4a:4f:83:de:b8:11:b9:e5:
90:72:d9:b2:a5:93:f3:39:67:b0:df:32:a9:03:69:
16:42:17:a5:87:d7:75:a5:bf:65:40:b2:d3:43:6a:
5e:15:f9:4c:3d:5b:8b:f1:a4:45:2c:24:df:d1:a9:
ad:7a:32:00:da:b2:d0:5b:f5:af:88:13:1c:31:7b:
cf:71:a4:9c:20:f0:dc:cd:8d:4e:d8:63:d3:6a:0f:
c1:60:d7:1a:6b:64:26:eb:b9:ff:51:c8:81:8c:a5:
8c:9d:ad:ec:0e:26:7c:eb:18:69:58:d4:16:ff:4d:
d7:4b:5a:51:0c:94:a3:08:93:c4:13:7a:e5:40:2d:
28:40:00:f2:9f:ec:8a:86:ef:85:09:c4:98:51:4a:
cb:51:4a:eb:00:d9:f1:6e:ed:c0:2b:09:20:16:6f:
79:e3:f6:04:b1:8b:d0:6d:50:bc:72:1c:60:f6:9d:
6b:4d:28:7d:e3:e0:da:63:79:dc:c9:a7:eb:3f:07:
de:c6:32:eb:52:0c:74:00:54:58:00:56:84:47:a4:
80:e5:f9:75:2b:18:91:7c:1a:cc:38:3e:06:f4:92:
44:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:51:03:3F:F4:E9:B5:0E:FA:13:6A:34:9A:1F:5F:5C:E0:F1:44:E2
X509v3 Authority Key Identifier:
keyid:78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b9:52:ab:63:e4:d2:ff:72:63:a4:e6:d1:fd:40:87:c9:e8:
4c:df:a3:08:88:27:55:65:da:c0:28:44:7c:38:12:22:1b:92:
30:e3:62:73:58:ea:5b:07:ed:3f:68:8a:f3:57:7f:d6:85:98:
95:52:f7:da:75:cc:f0:4d:86:a0:ce:01:a3:74:4c:64:af:5f:
d2:27:87:54:2f:9d:ed:cc:50:ae:a0:da:59:d0:70:a2:d5:0a:
6e:8d:a8:3c:0f:4e:46:42:b2:6b:80:45:1c:6b:f9:7a:96:05:
5a:8a:1e:19:92:f2:a0:36:f3:90:2a:04:06:cb:8d:fa:1b:58:
2d:f9:83:f5:f3:9c:f2:0a:4a:be:12:90:ac:0b:7c:b8:4b:0f:
2e:7d:af:e5:0f:01:28:ea:47:32:4b:f8:24:68:bb:58:f1:dc:
06:78:f1:90:4f:aa:f3:7f:e8:02:2f:07:95:5a:52:3e:5b:be:
40:1a:d0:6a:2e:9c:6a:b9:10:42:30:8e:9f:8e:a4:78:d1:3f:
aa:7a:cc:fe:18:35:5b:3a:aa:99:c6:eb:21:12:05:40:2e:17:
09:6b:5a:29:ca:88:c4:e1:70:e7:6b:90:e2:fc:d7:b4:54:72:
56:cc:82:c1:3b:c4:b3:c4:56:2e:c7:06:e5:9f:d9:52:05:da:
bc:ed:81:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:53:25 2026 by rpki-client