Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
File: EUPdhfoB6-wB7jMaExeeijPZAi8.mft (raw, json)
Hash identifier: JkEkbaJoU+7jiApl7FNrU1J80GoHH3m+/bUNqD6G484=
Subject key identifier: 8E:D6:6F:26:A0:F5:0A:6C:7F:98:F1:15:B3:AF:E4:57:C0:19:5D:20
Authority key identifier: 11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
Certificate issuer: /CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Certificate serial: 019D38D2B5B630E560A71BB007B0D5254844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 09:00:26 +0000
Manifest this update: Sun 29 Mar 2026 09:00:26 +0000
Manifest next update: Mon 30 Mar 2026 09:00:26 +0000
Files and hashes: 1: EUPdhfoB6-wB7jMaExeeijPZAi8.crl (hash: V+3C6FoP1Wz26mCFyCaExZjTlVj1r+nnsCGfZvDBwEo=)
2: JiVKV04Q5Yi0YVXZPhzPrQnrdaE.roa (hash: Je/rPrN5iQLTZAw+1b3i8YRBUtHfjaLY04H9s+UkqOw=)
3: WNCvUST9GFQgH9lNnrBxz7wn1MA.roa (hash: Y8xEIX8tbfw6KstlTGIt4As/gEkptm/Cc262V8KE5HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b5:b6:30:e5:60:a7:1b:b0:07:b0:d5:25:48:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Validity
Not Before: Mar 29 09:00:26 2026 GMT
Not After : Mar 30 09:00:26 2026 GMT
Subject: CN=8ed66f26a0f50a6c7f98f115b3afe457c0195d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:61:a3:5c:6a:f1:e0:35:45:e4:53:d5:ce:9c:
5e:98:ea:e6:08:a9:87:09:e1:54:eb:4f:42:3d:59:
37:2b:26:63:f4:45:b0:4e:5b:ae:1f:c9:29:c9:9b:
26:5c:85:85:48:c9:fb:d3:eb:d2:c0:a3:96:25:29:
ab:b6:95:e1:df:d6:a4:c0:03:ee:34:fd:c8:5b:20:
fd:ba:2c:ff:9b:90:da:42:d5:dd:bd:74:78:85:9f:
74:47:e1:b3:be:cd:c8:64:89:7b:22:70:7e:92:87:
c2:15:6c:fb:d0:e1:4e:fe:22:47:47:af:d0:2a:95:
34:d7:bc:8c:db:bb:46:5f:2c:7c:04:66:07:7b:7a:
bf:4b:6a:b5:50:46:77:94:40:04:c9:c4:67:5f:e5:
10:7c:17:7f:f3:19:c6:04:c6:d8:85:90:7f:42:29:
40:63:ca:4b:23:53:70:cd:8b:57:17:a1:46:b7:86:
50:7c:a2:13:38:2a:c9:d6:a8:e3:7f:b7:7f:ab:cc:
ef:53:40:b3:4d:74:c5:00:fd:94:27:1f:60:8e:c3:
27:e1:57:94:ed:23:4e:26:2d:bc:2b:a6:3d:56:2a:
64:33:ee:20:3d:6a:4a:d6:e3:11:72:c5:bd:d0:b6:
fa:ec:b0:c5:dc:92:a6:d1:2b:94:2d:f0:43:13:55:
67:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D6:6F:26:A0:F5:0A:6C:7F:98:F1:15:B3:AF:E4:57:C0:19:5D:20
X509v3 Authority Key Identifier:
keyid:11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:2d:ab:d9:ae:e6:17:3a:55:ba:a4:c1:a1:ad:7b:b2:f1:87:
2a:c9:7e:09:03:ef:72:1e:f1:62:06:33:3b:21:e8:e6:33:05:
bc:cc:b8:05:d8:14:3c:6f:d2:8a:f4:94:42:24:f8:59:70:81:
d2:bb:c9:6f:ae:b8:c3:7f:f8:c8:4a:6f:2a:61:ff:be:6a:91:
f9:b2:f0:f5:4f:58:1f:0e:c6:95:e9:3a:09:49:19:c7:1c:bd:
ef:dc:a1:ac:6e:9e:9b:75:1e:1a:bc:bd:ba:9c:16:9b:9e:96:
19:0a:4f:34:fc:f0:d7:47:8d:94:09:58:60:2a:3e:ad:af:56:
48:bb:2c:1c:f8:6f:74:57:fe:7b:5c:ec:64:f6:4c:fa:f2:a1:
e4:a8:cd:96:e8:31:08:77:0b:b2:52:83:67:e9:d9:36:1d:c9:
07:5f:de:ac:6f:eb:51:03:07:d0:ba:29:3f:84:12:d3:d9:6b:
7f:91:79:f1:5d:d8:ec:03:c0:97:45:41:31:cc:b6:ec:a9:ec:
9d:f5:8b:cd:ef:02:a8:a7:db:2c:4a:35:c7:24:77:89:02:da:
2c:27:f8:1e:f8:ec:15:8a:4b:1f:84:ce:84:3c:f0:e9:77:c5:
ca:aa:90:9a:dd:0e:8f:af:90:78:70:3e:92:4f:8f:32:00:61:
2e:62:a8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:52 2026 by rpki-client