Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
File: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft (raw, json)
Hash identifier: w56OUPz6pljvkf2mGgjf/QZOrThkMOl7Hg1446FE7CY=
Subject key identifier: 9C:96:60:1C:C7:3C:DD:3B:96:30:79:16:CF:58:EC:78:8B:E0:C1:64
Authority key identifier: 11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
Certificate issuer: /CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Certificate serial: 019D39E5BEF6AD0F775433B402C8BB61D6F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
Manifest number: 1810
Signing time: Sun 29 Mar 2026 14:00:51 +0000
Manifest this update: Sun 29 Mar 2026 14:00:51 +0000
Manifest next update: Mon 30 Mar 2026 14:00:51 +0000
Files and hashes: 1: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl (hash: 4aDYPwRFgU0CcYjT2ai8AwxxBECixuhgB81loGnptOU=)
2: XTqrU8Fe3dyCsrhN-j7VCGJxXio.roa (hash: f4c8Huch2WTliXq5MFgPvjqV6741k9rGMrHBDUOfaY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:be:f6:ad:0f:77:54:33:b4:02:c8:bb:61:d6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Validity
Not Before: Mar 29 14:00:51 2026 GMT
Not After : Mar 30 14:00:51 2026 GMT
Subject: CN=9c96601cc73cdd3b96307916cf58ec788be0c164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:45:2b:1f:b0:ec:9c:36:a9:2e:66:fa:7d:
6e:e8:87:ff:73:82:5c:61:3a:c8:a5:73:e2:db:f7:
26:08:e3:6b:50:7a:41:48:79:79:4b:38:1d:9b:82:
64:54:e5:71:17:94:db:7c:96:c3:fd:9c:6e:cb:24:
5e:f7:29:fe:c2:13:3b:74:4f:ae:a8:ac:dc:74:37:
6f:dd:b1:dc:8a:8b:cd:fd:fd:82:e6:4d:c9:0c:2f:
65:a4:89:cc:2e:05:9c:fb:5b:05:02:90:3c:08:74:
29:4a:35:79:61:83:00:4c:e9:fa:37:13:2d:cb:49:
ae:eb:04:7e:32:c5:f4:d3:ef:03:42:60:8f:9f:08:
e6:ea:95:01:b6:af:50:6c:e2:9c:d6:ff:aa:cf:fa:
dd:2c:04:40:74:80:b4:ac:79:e3:f6:4f:6b:e2:cf:
fe:79:28:b7:bf:79:aa:0e:a5:86:cd:7c:2d:91:a7:
19:81:57:01:61:24:94:8b:6c:7c:ff:6a:7a:7d:bc:
6f:7c:e4:5d:57:55:b6:c3:fe:4e:20:8a:49:6d:c7:
98:7d:17:e2:ac:1d:34:47:2a:f9:01:b6:fc:a7:19:
b1:3b:15:fa:2c:f6:ca:0b:3f:68:cb:4c:0a:42:53:
77:01:8d:d9:74:8d:dc:d4:ed:09:b8:9b:dc:84:a7:
57:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:96:60:1C:C7:3C:DD:3B:96:30:79:16:CF:58:EC:78:8B:E0:C1:64
X509v3 Authority Key Identifier:
keyid:11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:85:af:54:f2:5a:f4:41:a9:39:d3:3a:12:67:26:6e:27:f9:
0c:4f:cb:b0:b8:d4:15:db:35:6d:99:82:12:1f:78:5e:e6:a9:
23:49:5c:7e:43:70:e9:5a:8d:08:80:f5:fa:9c:9a:d9:d0:11:
e1:1f:54:14:17:54:97:af:92:fc:d0:3d:d0:d2:55:4a:4b:7c:
c2:96:f4:77:9c:d9:1c:b3:5a:3c:c7:25:db:18:84:be:f6:71:
75:4d:80:83:80:c9:c9:33:53:d5:36:f2:0a:a7:57:dc:fa:50:
0e:e2:54:30:4d:7d:dc:1f:fe:d6:a5:e4:a1:cd:4f:dd:4b:e5:
b3:20:f5:1e:a3:f6:54:82:2b:69:68:05:13:68:cf:be:44:3a:
cd:21:ce:d7:cd:3e:ce:6a:94:97:56:4d:f3:3d:ce:6e:c7:f3:
d6:79:ff:3a:1d:a6:d9:00:49:9e:13:59:cb:45:fd:b9:11:e3:
e3:44:26:7e:a9:7c:66:a0:61:49:57:bc:71:de:03:dd:73:a4:
20:b8:75:25:d7:20:d3:a8:c4:85:28:58:63:a4:d8:e8:9e:3a:
4a:a0:1a:3e:be:4a:17:bf:3e:58:68:3d:7e:4b:00:bc:ab:41:
d8:fa:ed:21:15:f9:83:91:a1:51:40:54:26:27:2d:f2:6b:61:
4a:8c:cd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:12:56 2026 by rpki-client