Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.mft
File: ed-J0j-dbc_x-71wtjZnHR7wrZE.mft (raw, json)
Hash identifier: VxQds8TApvvDBaamwvvL9sHnbtzaqTm84PcB9UV1J3E=
Subject key identifier: BF:86:8E:3B:67:A5:65:2B:7E:F1:47:A3:85:42:70:BA:4C:C0:DE:C7
Authority key identifier: 79:DF:89:D2:3F:9D:6D:CF:F1:FB:BD:70:B6:36:67:1D:1E:F0:AD:91
Certificate issuer: /CN=79df89d23f9d6dcff1fbbd70b636671d1ef0ad91
Certificate serial: 019D3866784CEBE5FFDEBCEE41D49B1BBB80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ed-J0j-dbc_x-71wtjZnHR7wrZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.mft
Manifest number: 08D5
Signing time: Sun 29 Mar 2026 07:02:12 +0000
Manifest this update: Sun 29 Mar 2026 07:02:12 +0000
Manifest next update: Mon 30 Mar 2026 07:02:12 +0000
Files and hashes: 1: ed-J0j-dbc_x-71wtjZnHR7wrZE.crl (hash: 3eFC9YL5gzFxxofCGG87JjwETXQy7JM5ACyYMHF0B+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ed-J0j-dbc_x-71wtjZnHR7wrZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:78:4c:eb:e5:ff:de:bc:ee:41:d4:9b:1b:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79df89d23f9d6dcff1fbbd70b636671d1ef0ad91
Validity
Not Before: Mar 29 07:02:12 2026 GMT
Not After : Mar 30 07:02:12 2026 GMT
Subject: CN=bf868e3b67a5652b7ef147a3854270ba4cc0dec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:66:c4:07:d8:c5:71:df:75:02:fc:52:04:6f:
9a:b2:40:3a:a1:b4:1d:78:66:7e:3e:28:75:b0:12:
2d:0c:f5:ba:61:ae:c0:1e:88:63:3f:4d:25:98:de:
c6:74:fd:e6:9d:2f:9f:b1:c9:35:d8:cc:bc:c7:a0:
a6:f7:d1:00:14:13:e5:c9:ee:c4:5e:e8:6e:9a:9d:
4b:41:54:c3:ec:5b:0a:dc:6e:f0:2d:52:85:02:6c:
73:8d:31:61:af:c2:3c:b6:6d:80:32:a1:3a:bd:c1:
89:9e:de:3f:7a:1e:ec:df:46:6f:d0:f3:06:4c:79:
e3:5a:26:8e:02:8e:9f:8a:d5:7e:8e:b6:f3:59:15:
b0:bb:58:1d:50:e6:94:99:62:99:9b:2d:cc:c4:92:
cc:0a:2c:02:3f:70:ff:37:75:9c:61:84:30:8d:4a:
69:ea:b1:73:98:02:db:7c:9f:de:da:f3:83:58:e9:
a1:2d:3e:b0:c3:9c:04:c1:f3:cd:35:d9:c3:12:0c:
55:ea:1b:6b:7b:ce:d8:6d:2b:b8:a9:89:ed:d4:9c:
4a:b8:a4:cd:c2:dc:a6:f1:a8:35:86:5a:e0:e2:4b:
08:e1:83:70:87:02:6d:78:77:dd:df:a1:c8:bf:b3:
d6:10:27:93:70:88:1e:3b:ce:c0:0e:d4:e6:38:ba:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:86:8E:3B:67:A5:65:2B:7E:F1:47:A3:85:42:70:BA:4C:C0:DE:C7
X509v3 Authority Key Identifier:
keyid:79:DF:89:D2:3F:9D:6D:CF:F1:FB:BD:70:B6:36:67:1D:1E:F0:AD:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed-J0j-dbc_x-71wtjZnHR7wrZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0f:f4:6b:80:7f:c2:d9:6d:f8:a5:87:9c:74:db:e8:d9:50:
dd:1a:ad:e8:14:59:20:7e:38:1b:ef:88:49:9e:01:3e:cd:7a:
d0:a0:46:61:db:ce:10:9c:e7:8e:a8:14:08:8e:04:fb:cb:e4:
0e:c5:63:b0:5a:15:1e:a4:80:31:44:55:77:3a:97:a5:67:a0:
8f:b9:7a:fc:11:c3:80:86:43:cd:32:6a:59:4a:6f:a8:7d:4c:
1f:67:d0:4a:ee:aa:98:d8:db:ff:65:39:89:b5:01:00:71:c8:
16:ff:e6:4c:44:6d:27:f8:01:04:75:8a:67:03:34:05:67:51:
ef:0c:78:a1:08:3a:09:10:72:34:32:8a:e7:d2:2f:99:fa:f5:
4e:71:54:e7:dc:0c:e7:4b:13:f3:65:9e:37:43:e8:19:31:a6:
3b:40:44:4b:51:25:bf:ec:ac:19:d1:0c:10:20:7d:1b:4a:2d:
bb:95:0b:ee:87:87:45:d0:c3:2c:41:43:78:14:22:a6:27:44:
5f:89:39:8f:dc:c7:75:24:46:34:5a:0b:f9:c1:2e:fa:b4:88:
13:79:8b:13:86:36:c1:e6:53:5f:0e:52:6a:09:96:2f:73:0f:
9c:d5:29:c4:7b:9a:ba:e8:a5:a0:84:32:ae:ea:ed:9e:38:10:
83:11:2c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:38:59 2026 by rpki-client