Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
File: ENJnhg06QDsA4aYcVDSs_265c5Q.mft (raw, json)
Hash identifier: CFwYe1BARz0cS9Q+IsQvXa5COyRDzK+/DNMumYyT1wg=
Subject key identifier: 80:39:9C:0C:38:ED:B1:0F:4F:E0:9A:61:CE:FB:38:CB:85:22:97:B9
Authority key identifier: 10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94
Certificate issuer: /CN=10d267860d3a403b00e1a61c5434acff6eb97394
Certificate serial: 019D382E722E48B8D3AB369B55172AB93493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 06:01:01 +0000
Manifest this update: Sun 29 Mar 2026 06:01:01 +0000
Manifest next update: Mon 30 Mar 2026 06:01:01 +0000
Files and hashes: 1: 8AFAw8J8BylZNxkuCYZxLwFMDu4.roa (hash: rqqV4vNuT7ox7Umt3jz1Rj0aoR+gnpbzztReONXP05Y=)
2: ENJnhg06QDsA4aYcVDSs_265c5Q.crl (hash: pX8CKDP3nFGy66xBloEhf2pI7iMj8ZUhRPCDY/hjyAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:72:2e:48:b8:d3:ab:36:9b:55:17:2a:b9:34:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d267860d3a403b00e1a61c5434acff6eb97394
Validity
Not Before: Mar 29 06:01:01 2026 GMT
Not After : Mar 30 06:01:01 2026 GMT
Subject: CN=80399c0c38edb10f4fe09a61cefb38cb852297b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:57:87:9f:ea:33:78:47:d3:d8:ed:5d:ec:
c5:8d:b2:67:53:82:1a:73:47:d1:1c:57:08:bf:f4:
a1:32:0a:f2:77:ca:74:0b:b4:25:e5:84:05:cd:ab:
72:f1:1c:9e:ff:5c:c3:d4:91:27:e6:90:46:ae:1c:
0b:73:be:2f:1b:68:94:2d:b6:69:4b:d5:8f:e1:84:
d4:50:c7:b1:dc:70:74:2e:52:8f:1a:3a:c1:e9:82:
e2:1e:42:02:b5:eb:94:4f:1a:c4:f2:56:62:56:f1:
b5:87:72:e7:97:9a:09:40:6d:d9:a7:63:49:79:2b:
fc:c8:f0:12:c6:a6:9b:8b:11:e3:be:82:75:ea:df:
f2:19:c2:93:f5:79:0d:de:bb:c8:d6:6f:4f:57:ff:
f7:7e:dc:e9:03:91:86:b1:96:d2:9c:2f:37:0b:90:
e3:56:00:2e:df:7a:31:d8:98:ec:72:82:ef:40:f0:
52:75:b7:56:6e:d4:de:d8:be:2b:19:54:33:7b:9c:
86:4f:69:c7:5d:b0:b0:91:05:5b:a6:37:92:bf:df:
bf:9b:ef:fd:c9:ac:33:05:b2:c8:ef:fe:7c:f8:d7:
09:02:7d:9b:63:c4:05:d3:96:fe:e8:ef:cb:03:48:
77:80:34:74:87:92:d8:55:50:aa:a9:c5:69:14:89:
26:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:39:9C:0C:38:ED:B1:0F:4F:E0:9A:61:CE:FB:38:CB:85:22:97:B9
X509v3 Authority Key Identifier:
keyid:10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d8:33:e8:95:cf:2c:f8:85:8b:b7:eb:5e:c4:be:02:5b:5b:
1a:c3:bb:38:5e:32:13:88:75:8c:1b:40:b0:0e:f5:74:e5:05:
c7:84:d1:81:74:b3:b1:c8:de:7e:97:7a:90:59:83:78:de:e8:
33:0c:b3:e3:bd:4c:c0:4b:6b:f2:d7:2a:0a:a9:8b:09:35:74:
82:5d:43:d0:a7:c8:74:28:9b:c9:c6:a8:42:ae:ee:24:78:75:
bb:0b:c0:01:c5:cf:ac:ed:d9:bf:e8:25:2d:1f:f5:95:71:fe:
f0:a4:f6:62:d8:d1:26:4d:b8:96:52:9d:c0:7a:7c:26:62:74:
d6:4d:88:01:11:41:a3:b2:7d:a8:df:de:c3:29:16:d0:9f:cf:
aa:75:3f:84:74:86:a2:91:56:ec:a2:4b:b6:c2:46:fc:64:f4:
28:1b:d1:23:36:bf:15:11:59:f4:83:c0:02:69:80:f1:50:68:
db:a1:e3:07:f1:94:ee:2c:73:28:02:3e:73:b2:d1:a0:52:f6:
65:af:f2:1d:ff:94:71:f7:22:f8:33:0c:c2:24:fd:6b:32:1f:
28:f2:93:6a:f2:d9:d8:8b:8a:2e:35:a6:f5:bb:a1:ab:a0:16:
72:73:85:94:0b:e5:6c:cf:ba:b9:f7:04:3a:8b:6c:f1:2e:77:
22:1b:a6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:12 2026 by rpki-client