Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
File: EdGfiLDcG4kCVNuUqbYgRta-eUs.mft (raw, json)
Hash identifier: jRZBp5Tg7P/QfSyf6HAsmz0+dM1QctxpXksi6n7N/s8=
Subject key identifier: C0:42:B8:DF:8B:44:34:A6:3C:F2:D0:E2:9A:40:40:38:D6:B3:F6:4F
Authority key identifier: 11:D1:9F:88:B0:DC:1B:89:02:54:DB:94:A9:B6:20:46:D6:BE:79:4B
Certificate issuer: /CN=11d19f88b0dc1b890254db94a9b62046d6be794b
Certificate serial: 019D3909D314B26F2170E47615423AA23D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
Manifest number: 0DDC
Signing time: Sun 29 Mar 2026 10:00:38 +0000
Manifest this update: Sun 29 Mar 2026 10:00:38 +0000
Manifest next update: Mon 30 Mar 2026 10:00:38 +0000
Files and hashes: 1: EdGfiLDcG4kCVNuUqbYgRta-eUs.crl (hash: uzoh0A79fo/EfktCmeebVcDRx5kBMK09kKQLhLe1rFk=)
2: YLaRX-nsqRWCtPec2Dv5Q_k5OhQ.roa (hash: 5033rgrhup6n7WpdXD6+8ygWTQrZT3eRPIezPH3qoAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d3:14:b2:6f:21:70:e4:76:15:42:3a:a2:3d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d19f88b0dc1b890254db94a9b62046d6be794b
Validity
Not Before: Mar 29 10:00:38 2026 GMT
Not After : Mar 30 10:00:38 2026 GMT
Subject: CN=c042b8df8b4434a63cf2d0e29a404038d6b3f64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:be:0f:98:65:5b:ce:a9:de:42:1b:59:b3:
c8:ba:75:1c:b9:ca:03:cc:fe:f6:63:81:d3:7b:ba:
c0:e5:de:a2:30:1e:f0:32:8e:33:d8:7c:c9:bf:75:
9b:82:59:73:c3:fe:cf:99:d2:6c:4c:7f:51:d3:7a:
4f:99:b5:e0:49:e3:0b:f4:13:70:15:27:ab:b4:c1:
9e:57:2e:19:19:40:ca:33:e1:ce:e8:20:1c:52:7b:
6e:a4:86:e4:53:c7:2d:28:04:25:35:db:9a:9a:6e:
28:93:34:33:d9:0e:52:3b:76:11:3b:9a:a0:28:60:
5e:03:2c:6d:7f:dc:83:6d:93:6b:fd:d0:6d:e0:ae:
70:d4:ac:b1:fe:85:47:d1:ba:2b:9b:a1:cf:e1:77:
e4:96:cc:21:fb:c5:47:a7:a0:43:d3:e6:ed:fa:2b:
a9:3f:4e:94:38:a8:bb:30:cc:30:10:2b:3e:7b:4c:
62:43:3a:8e:ba:be:7f:fb:bd:88:d7:5b:f8:48:9c:
ff:75:6d:98:5b:a7:81:8a:3b:ef:8a:ce:86:d8:4a:
57:b2:4e:0e:79:03:e9:32:7a:6c:d9:29:dc:d4:10:
f3:32:e3:e2:c4:3f:15:51:fc:69:57:e8:e2:b5:bb:
21:3d:59:89:93:85:7b:be:04:6d:95:b0:5d:ca:a7:
a7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:42:B8:DF:8B:44:34:A6:3C:F2:D0:E2:9A:40:40:38:D6:B3:F6:4F
X509v3 Authority Key Identifier:
keyid:11:D1:9F:88:B0:DC:1B:89:02:54:DB:94:A9:B6:20:46:D6:BE:79:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:61:07:15:8c:ac:1e:14:96:df:5e:5a:cb:c8:0b:d2:9f:3a:
de:02:cb:3f:18:54:a8:06:15:2c:e3:3a:ab:e0:0c:c3:a6:de:
77:4a:01:d8:02:8f:8e:a4:0d:e6:c1:95:33:81:e1:a0:83:c8:
06:f3:cb:39:98:e1:fa:40:6c:cb:8e:a5:e8:35:a3:04:bf:a2:
c1:37:f5:81:97:85:9c:68:42:21:e2:e3:01:87:52:83:1a:49:
bf:11:a7:c4:4c:f9:78:fe:28:08:5b:08:ee:79:c4:a2:75:2e:
b8:92:3c:c2:b3:a2:5b:fb:30:18:93:99:32:c1:58:75:95:99:
d1:4d:92:7f:2e:da:37:5f:e9:3a:2a:4a:4e:fc:2a:bd:b1:46:
9a:e1:45:61:ba:a9:3e:99:d2:9c:ce:88:b8:c5:cb:c0:8d:08:
23:0c:42:21:82:8f:35:a5:74:d2:82:c2:a5:44:69:5c:14:70:
24:46:06:a9:ea:89:ed:75:74:f6:85:b0:1e:c9:d9:aa:42:f2:
a0:cd:80:62:ee:7e:cd:8f:bd:21:13:60:0e:63:29:a9:a9:c8:
90:24:a6:35:8f:93:9f:74:08:55:9a:78:a8:a2:97:4a:19:55:
7f:42:ab:60:53:7a:10:30:f6:b7:68:64:53:25:40:e2:83:8e:
63:4d:f0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:27 2026 by rpki-client