Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
File: EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft (raw, json)
Hash identifier: P5G+HDibFajwvfAp3YTLmVgbCHB56LndWduAgp8D/Cc=
Subject key identifier: D8:BA:C4:C0:3C:CB:D1:42:04:F0:98:44:7F:1C:EC:81:84:2E:0A:FC
Authority key identifier: 10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
Certificate issuer: /CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Certificate serial: 019CE85BD27E12A9A8F159D589F76F4FBE85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
Manifest number: 11CB
Signing time: Fri 13 Mar 2026 18:00:57 +0000
Manifest this update: Fri 13 Mar 2026 18:00:57 +0000
Manifest next update: Sat 14 Mar 2026 18:00:57 +0000
Files and hashes: 1: 1Ftg2WrEWLscVrjfa0eX21TL5ys.roa (hash: TxsOnjQ4e16o8H9v1Jos/KbHQj33cJ2zR4Och16WrB8=)
2: EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl (hash: VrgiajWdHGbFlFkIuoNBjDXN+ZG80XnTiTZZqoXZALw=)
3: r4Hrg0bEs6gpKFTSd59isgxSeSk.roa (hash: /DPtXcMqR60C1x1kBS5/vOOh84pABE6/ZVLVmshPVjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:5b:d2:7e:12:a9:a8:f1:59:d5:89:f7:6f:4f:be:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109192c073862e6220c5f9106d7c55e3fc6c5d4b
Validity
Not Before: Mar 13 18:00:57 2026 GMT
Not After : Mar 14 18:00:57 2026 GMT
Subject: CN=d8bac4c03ccbd14204f098447f1cec81842e0afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4e:53:38:ee:a7:93:53:75:ba:28:72:ec:b1:
a8:3c:54:64:84:b0:91:5a:a7:6a:8c:96:5d:65:e0:
b0:b7:97:11:59:29:e3:39:05:ed:22:8b:d5:7b:24:
2a:85:07:54:d1:e2:73:4e:c9:51:e2:83:08:9b:b3:
fe:5b:31:9a:06:58:da:fa:8a:c8:f4:a6:11:2a:aa:
bc:4f:75:8e:f6:1a:dc:8c:4c:fa:1b:01:76:b0:07:
ac:53:b0:55:80:36:46:95:82:f8:17:9b:3b:02:81:
14:b6:2d:a0:c2:7c:8a:99:51:0e:92:67:a4:99:77:
50:6c:48:4d:36:02:a0:f4:7f:30:6c:05:f6:b9:50:
dc:50:6e:f9:15:8c:e0:1f:5f:4a:57:53:d6:6f:f8:
38:98:86:1a:bc:c0:63:b3:cc:cf:76:76:b8:8a:8c:
f1:2f:98:81:bc:84:54:ac:40:be:70:86:2e:10:c9:
0c:7c:4e:ea:9a:2c:d3:17:62:d8:4e:d8:a6:73:b0:
09:b5:69:b7:bd:bd:93:ac:ba:27:7e:48:ac:03:f9:
62:b2:7d:40:c0:99:6a:18:f9:60:3c:84:17:52:9c:
8d:a7:d0:69:73:95:1e:10:fe:e5:11:61:13:e2:8c:
31:48:23:fb:9a:45:2b:37:c1:c1:77:b4:d6:35:b2:
bc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BA:C4:C0:3C:CB:D1:42:04:F0:98:44:7F:1C:EC:81:84:2E:0A:FC
X509v3 Authority Key Identifier:
keyid:10:91:92:C0:73:86:2E:62:20:C5:F9:10:6D:7C:55:E3:FC:6C:5D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJGSwHOGLmIgxfkQbXxV4_xsXUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/53c051-5572-4f83-a7d6-e6fe691d9489/1/EJGSwHOGLmIgxfkQbXxV4_xsXUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:92:36:8e:99:ec:7e:c7:83:5b:64:50:43:30:fd:a9:e3:65:
be:a3:e5:fc:de:42:e6:f7:f2:56:d6:00:2b:e2:98:ae:3a:68:
85:fa:d0:ed:ba:c1:d2:fb:c0:33:61:29:6b:4a:1b:a1:2c:02:
71:fe:ae:aa:88:42:fb:2c:68:e2:51:94:80:fd:18:00:ac:1b:
8f:25:1d:f3:8b:34:9f:f7:9e:24:09:33:8c:b4:20:11:36:39:
4c:7a:a8:59:fd:10:54:78:03:b8:96:f7:2e:b2:4e:fb:a7:06:
6b:08:13:36:33:0f:cc:37:8e:61:c4:30:8a:1c:e2:48:66:71:
93:38:b1:40:5b:77:3c:4e:fd:12:d0:c8:66:cb:98:0d:b1:48:
2f:4e:5d:6f:b3:c0:08:94:56:65:2d:05:da:a9:9c:a2:01:9e:
af:41:65:27:d3:d9:cc:08:f6:b8:3d:cc:64:d7:a4:76:bf:5d:
80:8b:c3:f4:05:7a:f6:e1:66:27:9f:fb:a3:2f:1b:98:75:d5:
c1:9a:76:e6:f1:d1:aa:1a:f4:2a:b6:d4:3b:8c:5f:94:cc:04:
fe:d2:38:b0:db:a6:f7:75:bc:16:43:17:11:24:99:4d:9e:a2:
00:13:ce:73:23:27:2b:15:24:51:29:ac:f8:b8:d9:5f:b2:9a:
9d:63:c5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:51:17 2026 by rpki-client