Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
File: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft (raw, json)
Hash identifier: r4uhMQiRi8Ys4RrM74kK9OQBfnQcoC0iJSrQxq0DeTY=
Subject key identifier: 52:80:CA:DB:88:89:5B:58:B6:33:D5:77:29:47:37:F9:CC:DA:4F:3C
Authority key identifier: 10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
Certificate issuer: /CN=10515090f850e337eb3b118a157e4e39083b77a6
Certificate serial: 019D375340B7B6ADD439E52DD56F5E30557D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 02:01:35 +0000
Manifest this update: Sun 29 Mar 2026 02:01:35 +0000
Manifest next update: Mon 30 Mar 2026 02:01:35 +0000
Files and hashes: 1: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl (hash: 13WQrTAvTL/CuGcygCGvM01JpopdekTfLaAtP/f1xZY=)
2: kKlXzTXjueD4aV2RPewpgcu-BS4.roa (hash: o9M2DvXmpV9HLolJqNlhrCOdw2MyjQNTI+g5HIxVra0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:40:b7:b6:ad:d4:39:e5:2d:d5:6f:5e:30:55:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10515090f850e337eb3b118a157e4e39083b77a6
Validity
Not Before: Mar 29 02:01:35 2026 GMT
Not After : Mar 30 02:01:35 2026 GMT
Subject: CN=5280cadb88895b58b633d577294737f9ccda4f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ee:00:2f:47:44:f1:be:02:ac:48:12:54:78:
bc:e1:b9:7a:d5:b4:7c:6d:72:5f:58:07:d7:ba:98:
19:54:ed:88:1f:38:72:d9:72:c1:c9:1f:a8:3e:b4:
7c:e6:3a:3f:24:83:60:36:e2:3f:89:26:15:0a:f6:
14:ee:12:32:89:35:82:b2:3c:19:d1:53:4b:2a:8a:
7a:b9:05:03:89:88:2f:f3:47:d7:51:96:f1:c0:95:
98:96:41:41:7e:44:3f:77:ee:52:9f:87:51:2f:32:
09:b5:99:71:c1:55:d3:b3:c4:e3:8b:e7:a4:15:6a:
d8:40:3d:b7:ae:02:3a:d2:6a:0c:55:f0:c7:25:cd:
e4:4d:10:60:26:47:2f:a2:62:9e:0b:04:9a:db:c8:
b5:85:5f:40:41:c0:3e:5c:25:fb:59:e0:96:a8:a4:
07:e7:c8:b4:39:ce:bc:20:f3:07:6e:9f:e1:3b:3e:
08:75:61:83:69:d8:34:73:f2:33:9a:87:9e:e7:1d:
d7:bc:35:ad:ed:46:17:1f:3b:41:c1:bd:82:73:af:
e0:d3:6d:31:30:7f:82:26:ac:2a:ec:45:d5:b2:40:
9e:8b:04:5b:bb:b3:4c:97:be:77:8d:3e:25:8f:02:
07:d7:ba:97:16:a9:1d:3e:fe:82:01:8e:6d:ed:18:
02:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:80:CA:DB:88:89:5B:58:B6:33:D5:77:29:47:37:F9:CC:DA:4F:3C
X509v3 Authority Key Identifier:
keyid:10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:53:fc:9e:3f:34:9d:90:07:16:90:63:c2:5f:a8:49:4a:8c:
38:9e:f2:d0:37:7d:f6:59:05:02:75:77:7b:0a:9b:5a:e2:0d:
4c:0a:9f:89:ea:ce:10:b2:25:c1:0a:71:8c:82:2c:a5:6a:84:
66:cd:03:a3:85:0f:bf:4d:13:b8:17:08:44:5a:3f:92:ad:70:
73:e3:22:d7:fd:27:20:ef:91:58:7d:26:72:85:2a:33:16:53:
8c:d4:ad:e5:fa:77:2f:37:2c:9c:bb:5f:42:11:81:d1:b0:e2:
d2:10:31:91:1d:fd:24:58:9f:fe:1c:10:41:a0:e7:2b:0c:37:
b6:72:19:f5:2d:a3:e5:d2:f9:ea:d2:c8:9a:47:56:ad:56:e9:
eb:41:e0:4a:c6:d9:eb:81:09:80:e3:e3:93:4c:d1:c4:71:11:
ab:9e:58:a7:3d:61:9d:e7:75:a8:dd:8d:45:4d:7e:61:9a:31:
43:51:36:51:a9:46:5b:37:6b:3a:07:88:6f:04:a6:89:39:86:
c7:5d:dd:73:be:0e:43:32:37:95:ce:c5:7c:76:d1:85:00:50:
47:10:17:73:98:df:10:30:5b:eb:56:9a:5e:45:db:ae:3b:c5:
42:fe:48:c5:ff:ed:e6:6b:64:67:40:42:2d:50:d6:98:a0:0c:
20:5f:f4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:26 2026 by rpki-client