Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
File: ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft (raw, json)
Hash identifier: sneiRryCcmEulPVhQM1NeL+6+bjxTL/Whia09bs3JaQ=
Subject key identifier: 4C:26:40:4B:48:EC:42:E7:9E:5A:10:27:32:E3:BB:E7:69:19:E6:09
Authority key identifier: 10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
Certificate issuer: /CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Certificate serial: 019D37F77B359C9379D2B20D90858BFD5068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
Manifest number: 0968
Signing time: Sun 29 Mar 2026 05:00:58 +0000
Manifest this update: Sun 29 Mar 2026 05:00:58 +0000
Manifest next update: Mon 30 Mar 2026 05:00:58 +0000
Files and hashes: 1: 7CSVGtYUX5r3HPpcYYedHjS20IQ.roa (hash: hzzOsdStylJXNXeCzZeL6+XDTe9J82yzkNqZCVPm+lM=)
2: ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl (hash: ZJ1Tg8EmfIuxGNQsB6TFzGQg0XxPPXZ2KQTJEv8PCC0=)
3: nQENJbRz1W0WhBM6EIeWbWaXGe0.roa (hash: XnC7G+pMyq9QIiJSY8PXtmwY2A35n+casWMMCOJ/vOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:7b:35:9c:93:79:d2:b2:0d:90:85:8b:fd:50:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Validity
Not Before: Mar 29 05:00:58 2026 GMT
Not After : Mar 30 05:00:58 2026 GMT
Subject: CN=4c26404b48ec42e79e5a102732e3bbe76919e609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b9:2d:ee:67:0a:51:e1:79:b1:e3:72:c2:fe:
ca:96:5e:e5:a3:87:2d:5e:ae:29:cc:e0:80:62:2c:
a2:d7:23:2d:43:a0:cd:0d:fc:87:a1:77:ed:46:21:
a6:c0:69:e7:8e:64:1a:46:6d:31:03:f3:b9:d2:8c:
4b:ee:bf:18:5f:b4:f8:f4:c6:1d:5a:cc:49:02:3a:
ec:85:c1:b0:a0:b9:bc:9c:98:11:d7:26:66:9d:38:
d4:85:a9:91:32:ae:a1:2f:38:17:5d:1d:11:3a:f0:
cb:da:c6:2e:c1:24:29:d3:6a:b9:66:34:39:13:0e:
96:ef:87:8b:cf:2f:99:b1:5b:8f:f6:28:25:bf:ac:
cd:5c:dc:b9:c6:bb:9f:29:e0:73:d8:ff:af:56:3d:
b2:c5:3a:a1:1c:29:73:70:a7:f6:50:7a:36:cc:db:
39:89:93:2f:f7:72:9c:77:e6:77:92:fb:a1:47:14:
3f:70:2f:ab:29:e4:96:5a:24:a4:96:e2:0a:72:77:
43:55:54:71:5d:2a:9b:c0:5e:21:64:47:f3:cc:a8:
73:a6:f5:51:84:f4:8b:ff:e6:ae:29:4c:04:7a:82:
93:3b:dc:2d:18:6f:5c:fb:9a:4b:65:e5:be:69:63:
08:54:f3:c1:f2:ab:03:05:13:d5:e5:25:72:67:95:
57:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:26:40:4B:48:EC:42:E7:9E:5A:10:27:32:E3:BB:E7:69:19:E6:09
X509v3 Authority Key Identifier:
keyid:10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d2:01:1b:8d:12:c4:8d:b0:63:23:6f:90:62:9d:b9:f5:b7:
b8:67:db:68:1f:00:f4:37:36:ba:06:0c:0d:e5:54:db:c0:b3:
53:e3:75:41:ae:b5:94:e0:27:d4:64:dd:a1:65:39:bc:1d:a3:
ce:b7:d8:b3:15:a2:17:cf:f2:4e:15:3c:e5:f1:28:e5:7e:20:
57:8a:86:29:a2:15:2a:1e:65:90:3b:83:6e:4d:6d:21:c4:a3:
86:07:e5:b0:eb:af:8e:e9:3b:bc:7f:d0:15:ec:ba:06:e4:b2:
d4:c7:09:37:4e:74:26:09:48:43:36:25:5d:03:5c:f3:06:02:
16:87:25:49:cf:39:85:33:a0:95:f5:2f:a8:bb:61:39:d3:75:
2f:83:2f:e5:d7:a6:73:63:ce:e7:92:13:c9:94:d2:17:50:49:
17:2d:7e:66:a8:48:fc:9b:9a:85:57:22:d6:61:3d:e4:8f:f7:
c5:b7:cf:69:e2:de:2f:a7:0f:88:fb:b5:f3:2e:41:82:fc:2b:
c3:ef:20:e6:59:c6:a8:89:fa:67:68:22:0a:de:29:09:f0:68:
f5:96:31:f8:3d:80:9e:fe:6a:49:39:01:11:3c:e1:3b:66:6b:
e2:98:40:58:57:44:43:db:4a:31:60:ae:fb:7b:87:0f:e2:fb:
92:07:46:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:18 2026 by rpki-client