Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
File: ekQ0Re8M2qdnJh9OCxILvj_OByc.mft (raw, json)
Hash identifier: jHZTZgkDWYcOdPM7X7mK7YBfdtIrNVsfyWFyaNReFpo=
Subject key identifier: 47:D4:1B:50:02:E1:8A:26:FD:94:2D:73:EA:24:8C:2F:E3:BA:FA:1C
Authority key identifier: 7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
Certificate issuer: /CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Certificate serial: 019D38666DD692A6E66C6DFBC5C58D1E1794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:02:10 +0000
Manifest this update: Sun 29 Mar 2026 07:02:10 +0000
Manifest next update: Mon 30 Mar 2026 07:02:10 +0000
Files and hashes: 1: ekQ0Re8M2qdnJh9OCxILvj_OByc.crl (hash: JucyvPxJnP15uQLSeWRoKPKks+39H6TVfwm/s1Wk9Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:6d:d6:92:a6:e6:6c:6d:fb:c5:c5:8d:1e:17:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Validity
Not Before: Mar 29 07:02:10 2026 GMT
Not After : Mar 30 07:02:10 2026 GMT
Subject: CN=47d41b5002e18a26fd942d73ea248c2fe3bafa1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:49:89:95:69:12:dd:50:35:f2:b6:bd:cf:32:
dd:6c:9a:aa:17:41:76:2d:ad:2a:ca:1e:95:b3:20:
52:1a:f6:93:55:b2:49:3f:76:c6:c1:0f:aa:06:17:
c0:32:3b:0a:64:27:d9:f1:21:d3:df:a4:f6:02:ac:
82:62:c5:a2:9d:ca:d1:2d:e9:ae:41:6b:bb:be:de:
91:29:86:96:50:4b:04:6c:a5:f9:99:de:01:c2:9b:
67:68:c1:4a:14:5f:65:2e:ac:e6:1c:2c:01:3a:10:
8b:53:8f:ce:22:dc:5e:96:57:2d:31:a0:3d:ed:4d:
65:34:73:d1:0d:58:d9:f7:20:99:b8:91:35:3b:00:
04:19:41:03:a1:0a:51:a6:ba:73:f7:8b:9e:03:ca:
a3:ae:a8:7e:46:65:19:41:ee:7f:5c:b7:2a:6f:4d:
58:53:33:57:35:1b:16:07:5f:ac:10:ba:a2:64:ed:
d1:cf:29:20:6b:14:c0:dd:cf:6c:3e:fa:ef:5c:be:
dd:5a:13:8e:a2:bd:19:05:2a:55:47:01:18:44:ff:
ca:97:da:74:66:e9:ea:c7:2c:09:36:4e:e4:b9:17:
01:3e:02:b3:26:75:40:64:22:df:d8:bb:8a:2d:76:
af:59:48:2d:56:34:90:8b:da:de:7d:05:b2:8d:0c:
24:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D4:1B:50:02:E1:8A:26:FD:94:2D:73:EA:24:8C:2F:E3:BA:FA:1C
X509v3 Authority Key Identifier:
keyid:7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:73:f4:03:e1:4a:86:d5:15:a6:54:45:f4:29:c2:71:69:8e:
7a:92:55:8d:0a:cd:9b:39:26:06:f7:81:18:fb:97:90:e6:1d:
13:fd:cd:c3:55:58:c3:7b:79:b7:eb:64:82:38:37:44:2c:74:
20:3f:ea:45:2c:e5:df:c8:ac:3c:22:d6:76:6b:70:e2:7a:2c:
94:62:21:6c:29:03:c6:36:e0:aa:14:c4:6b:ae:c3:cb:b4:87:
0e:85:20:85:33:c0:8f:1c:8d:b8:cc:20:8f:29:51:e5:18:14:
a2:4c:c3:6a:e5:b0:af:a9:a3:44:3c:9c:9b:d7:f0:35:d1:eb:
7e:06:41:f9:ae:99:80:bd:48:15:12:5f:01:05:b7:95:76:48:
47:4d:91:a5:0f:3d:10:24:dc:c1:84:c7:79:65:e2:56:16:84:
54:77:61:90:ef:a6:9d:91:1f:73:68:6d:65:33:51:e6:00:ae:
82:f4:79:da:e9:7d:05:fe:0d:89:e0:2c:24:eb:1c:a7:de:b3:
19:1b:72:27:53:fb:dd:3e:79:bb:a5:ea:9c:c2:51:f3:b1:24:
1d:7a:07:ff:b5:97:b3:43:d1:7d:95:79:81:e1:27:5c:21:17:
36:5c:24:d5:8a:9e:8f:e3:4f:b2:46:dc:7e:1e:17:ba:57:68:
90:6a:55:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:36 2026 by rpki-client