Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
File: eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft (raw, json)
Hash identifier: vp10aaZSxMXyM8+tc/McprmPSt/JaRiixx4lndj6HsI=
Subject key identifier: 49:A3:51:B0:A6:B5:9B:DA:C8:74:35:17:94:A8:2C:49:2A:02:CC:FE
Authority key identifier: 78:34:A7:5D:F5:05:64:7C:7F:50:7D:84:C2:E2:40:E9:19:FE:CB:25
Certificate issuer: /CN=7834a75df505647c7f507d84c2e240e919fecb25
Certificate serial: 019D3AC12045218419292DA4F9ADC9FEA62C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
Manifest number: 0357
Signing time: Sun 29 Mar 2026 18:00:28 +0000
Manifest this update: Sun 29 Mar 2026 18:00:28 +0000
Manifest next update: Mon 30 Mar 2026 18:00:28 +0000
Files and hashes: 1: eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl (hash: VDA0Q5+MghRI/8sDuwk6qtnatqZxKLZLqXiuQK1Mxe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:20:45:21:84:19:29:2d:a4:f9:ad:c9:fe:a6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7834a75df505647c7f507d84c2e240e919fecb25
Validity
Not Before: Mar 29 18:00:28 2026 GMT
Not After : Mar 30 18:00:28 2026 GMT
Subject: CN=49a351b0a6b59bdac874351794a82c492a02ccfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:18:91:55:d8:12:5f:a5:95:aa:c9:5d:83:66:
21:02:f2:2b:3f:c2:85:f4:c2:a1:f9:32:4f:f9:a9:
aa:da:90:17:a5:5c:f9:4a:dd:64:c8:10:93:5a:38:
a5:a6:cc:06:1f:a3:4d:19:47:a8:3d:0f:a9:d0:a6:
28:af:0f:b1:ca:c2:5a:ed:37:1e:96:8a:cf:a3:e6:
7d:33:89:66:3b:60:38:05:b5:a8:da:9e:40:4c:71:
75:9e:a6:19:33:53:0e:27:ce:95:54:e7:11:8a:f7:
41:27:95:14:8e:54:fe:b8:f5:23:e1:e2:55:a7:b3:
5d:dc:1a:bc:50:cb:43:86:3b:c7:55:9e:88:c9:0a:
fe:d9:1c:fb:43:29:5a:cd:bf:2b:50:82:34:52:a5:
2d:b5:67:66:79:c5:40:37:4d:bc:0b:89:9e:0b:54:
43:df:b7:16:10:4f:45:e6:eb:4b:f1:fa:14:fe:da:
6a:1b:b8:e9:9e:25:99:ea:da:6e:66:7d:d8:e4:2d:
f2:82:88:61:6e:ee:6e:47:c5:7a:88:3e:35:2f:e8:
83:d8:71:cc:f9:23:3d:2f:ea:65:8e:71:13:ae:c9:
fe:af:11:c6:54:9a:44:07:1f:09:50:67:88:d9:94:
9e:9b:1f:4e:5f:f3:3a:9f:57:9e:60:38:1e:35:a1:
77:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A3:51:B0:A6:B5:9B:DA:C8:74:35:17:94:A8:2C:49:2A:02:CC:FE
X509v3 Authority Key Identifier:
keyid:78:34:A7:5D:F5:05:64:7C:7F:50:7D:84:C2:E2:40:E9:19:FE:CB:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d8:20:44:46:e1:2b:c9:60:7a:74:f2:7f:d8:bd:a0:2d:16:
0f:0f:12:1e:9f:ec:b8:55:8b:6f:64:4d:ee:08:92:52:c5:22:
9e:64:32:16:04:3c:e6:47:b9:3f:df:d3:3c:86:67:45:f0:37:
93:a9:7a:d4:82:4b:97:8f:c2:66:d7:0b:d6:e1:ce:95:fb:89:
bb:78:06:c2:4f:5f:53:88:e0:ef:1c:82:22:97:8f:22:51:6e:
a0:5b:a5:44:e0:c1:e8:cd:b2:f5:0a:59:8e:ab:fc:fd:c2:30:
ff:3c:4a:8f:b9:28:2e:98:2e:61:31:fb:b9:cd:4f:b6:37:af:
75:53:05:61:b6:ca:a0:af:b1:46:b3:bb:a5:4d:45:c9:b0:75:
12:06:3d:f0:fb:ff:c9:08:d5:c5:c4:23:bd:d9:91:b6:b0:59:
3c:a4:f7:f6:1a:f6:b4:e5:30:c7:3b:62:ff:85:01:0b:b6:2b:
c4:6c:d0:15:9b:b8:0e:44:ed:69:be:72:78:6e:af:5d:84:bd:
e3:d2:93:41:8b:59:16:f7:52:7f:af:a2:46:5f:6f:fe:03:ff:
15:eb:b9:f7:4c:e0:bf:7a:ae:3b:eb:67:a9:6f:47:59:92:46:
6f:74:28:fb:0f:52:6a:27:61:f0:6d:23:d8:3a:3c:08:69:29:
bc:d7:8e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:57:52 2026 by rpki-client