Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
File: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft (raw, json)
Hash identifier: PKuAtopNmZbUheDblL5j3upY/wMFv9pCxandxC+0n5c=
Subject key identifier: EE:4D:D6:AB:A2:D6:63:F2:5C:58:3D:CF:70:FF:2B:56:C2:77:D2:C0
Authority key identifier: 12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
Certificate issuer: /CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Certificate serial: 019DD12CDDA0C76575279F5EA78CBBFABDB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
Manifest number: 09DF
Signing time: Mon 27 Apr 2026 23:01:11 +0000
Manifest this update: Mon 27 Apr 2026 23:01:11 +0000
Manifest next update: Tue 28 Apr 2026 23:01:11 +0000
Files and hashes: 1: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl (hash: C6bH7X9yJpsmMo/eCY5cK7QONTvpU+woBJjkVKakz28=)
2: zY6-TSsM-n0cGeuR4MC7O4QKpZU.roa (hash: pDF4f+98qM6dWbtI9D665+bMv7kt2epaA+MQQ2O8Qdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:2c:dd:a0:c7:65:75:27:9f:5e:a7:8c:bb:fa:bd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Validity
Not Before: Apr 27 23:01:11 2026 GMT
Not After : Apr 28 23:01:11 2026 GMT
Subject: CN=ee4dd6aba2d663f25c583dcf70ff2b56c277d2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:0d:80:32:0d:ad:99:c0:84:b9:b3:76:0c:
ba:44:1f:27:66:13:f0:50:ee:e9:d5:0c:a5:7c:78:
d7:d1:80:b4:c1:83:21:cd:6d:15:18:aa:ed:14:61:
41:9f:e6:69:b4:0f:b7:4e:99:de:bb:be:6d:cf:7b:
36:cc:10:93:89:f9:c6:7c:ac:fe:ae:12:cb:22:b6:
d3:ff:93:9d:1e:9a:5b:11:a6:35:23:b0:c0:1c:22:
4f:0e:e0:6d:9e:df:d5:69:88:5f:6c:c6:f9:b3:23:
88:80:91:eb:57:b1:df:03:73:b8:ac:66:60:da:b8:
79:20:87:24:46:43:12:03:15:de:25:d2:a9:db:70:
94:bf:71:43:e0:5b:ae:41:23:0b:95:79:6e:ff:86:
b5:a1:97:9a:0c:27:d5:31:5f:c7:37:02:01:33:a6:
26:51:3b:28:9c:8b:c6:a2:86:e4:a1:ed:ae:69:94:
00:b1:4a:cb:dd:e8:2d:b0:8f:f0:3c:6b:c5:e2:c4:
d9:0c:cf:38:32:64:d0:1e:9f:3d:5f:82:95:7a:01:
72:1d:25:27:64:c1:03:3f:3d:dd:09:0d:0c:e0:3f:
ff:ff:26:88:be:18:28:d2:0f:cd:4c:5f:fe:8b:6d:
9a:6d:fc:1c:63:e2:da:ae:3d:92:d0:b9:d2:ac:59:
58:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4D:D6:AB:A2:D6:63:F2:5C:58:3D:CF:70:FF:2B:56:C2:77:D2:C0
X509v3 Authority Key Identifier:
keyid:12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1b:33:0f:57:f2:22:1d:b8:09:27:0e:ff:50:e2:73:15:a3:
d1:05:8e:88:be:1c:8a:4c:02:bb:f1:58:ad:84:af:f5:35:7c:
60:ff:07:8c:11:00:ef:39:81:79:23:af:50:ec:c7:e7:e4:cb:
fb:89:55:97:e3:cb:7a:4a:07:8a:f3:8f:2b:fc:f4:71:6c:34:
d7:b8:e5:00:65:87:63:32:28:35:3a:19:ed:3e:54:0d:50:6a:
f8:e9:4f:c1:26:30:38:e8:c0:07:6e:07:10:29:cb:e3:31:4e:
fa:9a:02:95:88:62:30:2f:4a:c9:be:a7:6d:06:09:f8:7a:e8:
10:1e:e6:f7:9f:0b:46:db:be:79:b1:28:23:00:8f:76:8b:b7:
99:d5:07:bc:4c:b2:40:eb:08:24:5a:45:0c:9d:35:ff:86:1d:
98:40:71:c0:45:e3:d1:d7:31:a9:a4:9d:6f:1c:99:53:75:87:
c5:bf:0d:ce:8c:7f:f9:ec:e0:f9:b1:5b:9c:6a:a3:21:2f:59:
45:98:34:88:90:b0:43:72:9a:22:4a:f5:b8:56:39:0b:32:d0:
97:b4:fd:2c:e4:6e:7d:a3:d7:79:47:bc:78:75:8a:2f:07:4e:
ed:29:ec:b3:72:5b:9d:71:85:ab:9e:41:e1:78:f7:82:3a:4e:
85:24:45:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 02:15:16 2026 by rpki-client