Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
File: ENSbc8raAe6FGBLsRAt6HsmGSLM.mft (raw, json)
Hash identifier: JqaVVOXC5vhgFZF5hFXiUdoaxwKPBigScOrNKCB2PSE=
Subject key identifier: 5A:99:F8:4D:FE:C1:E9:AE:AE:67:7C:83:F5:E0:0C:80:B3:2A:FD:B4
Authority key identifier: 10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3
Certificate issuer: /CN=10d49b73cada01ee851812ec440b7a1ec98648b3
Certificate serial: 019D37F6FE6F00EB31D95E117FE647B06EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:27 +0000
Manifest this update: Sun 29 Mar 2026 05:00:27 +0000
Manifest next update: Mon 30 Mar 2026 05:00:27 +0000
Files and hashes: 1: ENSbc8raAe6FGBLsRAt6HsmGSLM.crl (hash: Oh9xns+5amJLaRmDidMjnZUCnw/Sce13HVmqTus4S0M=)
2: eSrmop84goo0iEWfYlqPX_ANRJ0.roa (hash: ztPjyknlOnXPUcaGUj1KAhGBxdHzv46hT4CpZXwcNUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:fe:6f:00:eb:31:d9:5e:11:7f:e6:47:b0:6e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d49b73cada01ee851812ec440b7a1ec98648b3
Validity
Not Before: Mar 29 05:00:27 2026 GMT
Not After : Mar 30 05:00:27 2026 GMT
Subject: CN=5a99f84dfec1e9aeae677c83f5e00c80b32afdb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ae:67:a1:dc:21:c8:e0:e0:6b:44:a8:f2:ee:
3d:19:42:27:1e:13:ba:f1:e6:94:2b:47:9a:01:dc:
b7:ed:ae:bf:0f:ef:66:c3:91:ee:6a:6a:b5:c0:5d:
76:69:ec:29:2e:39:9c:17:a2:3d:51:4c:e7:1e:44:
21:f1:c5:d9:5e:0f:95:a4:12:bf:7c:d0:db:90:cd:
6f:6c:8a:36:58:fd:62:a3:d2:b6:9a:4d:a8:12:3e:
88:6b:8c:c2:82:e6:22:c1:03:af:8d:9f:0e:f6:da:
70:79:a1:26:2c:19:58:e3:eb:8b:2f:9c:44:cb:c1:
b2:99:81:65:30:07:3f:62:17:4e:bc:88:ff:04:ed:
f0:d6:dc:c5:f2:69:c6:6c:70:71:08:4a:17:af:9a:
35:ce:48:cd:71:35:69:aa:e1:70:77:64:17:f6:47:
8c:20:34:9d:fc:4d:cc:5d:6d:c6:97:96:0c:0a:b9:
f9:61:95:84:ab:f7:e5:b6:6a:be:60:09:61:cd:3c:
43:51:88:e7:9a:f1:4f:3a:ff:6f:e7:fc:70:43:99:
00:31:dd:09:91:23:93:bf:34:db:4f:64:bc:1b:92:
bf:84:3f:e7:1a:2d:1b:84:21:8d:cc:bc:33:c8:47:
09:1a:55:3a:89:df:f9:43:ae:1d:da:08:a4:1b:46:
69:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:99:F8:4D:FE:C1:E9:AE:AE:67:7C:83:F5:E0:0C:80:B3:2A:FD:B4
X509v3 Authority Key Identifier:
keyid:10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:02:3d:8e:56:bf:09:96:42:95:0c:e2:bc:84:dc:d0:4e:d2:
42:4f:ed:24:4e:cd:0a:47:41:8d:fb:59:45:eb:f2:54:4b:b8:
e4:5c:b2:52:7d:d5:fe:f8:48:c2:65:90:dd:42:67:44:9f:28:
d8:08:bc:4e:db:89:f4:65:21:ff:25:e5:3d:db:8d:b4:b2:bc:
0c:1f:bd:75:57:7c:63:00:6d:33:10:91:9e:e2:fb:4a:83:62:
78:a9:e5:11:b4:11:37:bf:98:e7:64:5a:bd:03:64:f8:fd:98:
62:06:c8:25:7c:4e:ed:7e:4b:2a:b6:ed:11:3f:e6:c7:3b:04:
93:09:2c:14:05:81:4b:c0:86:32:14:93:64:a3:25:5f:e3:76:
7f:15:5e:be:48:32:ab:a1:9e:17:60:93:d6:64:66:c7:c3:16:
b3:26:d6:c5:31:0f:92:02:e8:46:31:8a:2e:8b:b5:75:d0:35:
00:0a:5a:14:71:bc:b2:8b:ee:0d:82:30:53:3c:be:c8:07:79:
f5:06:7a:ae:e9:37:08:16:5a:be:0f:78:0f:80:b2:5e:ba:b5:
61:a0:80:d1:3f:43:e5:20:95:42:9c:ff:f4:56:f1:40:bc:fe:
96:c9:7f:9b:d5:48:61:e1:d0:09:31:2e:c7:b5:3c:3b:2e:a8:
fa:78:56:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039v5vAOsx2V4Rf+ZHsG7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZDQ5YjczY2FkYTAxZWU4NTE4MTJlYzQ0MGI3YTFlYzk4
NjQ4YjMwHhcNMjYwMzI5MDUwMDI3WhcNMjYwMzMwMDUwMDI3WjAzMTEwLwYDVQQD
Eyg1YTk5Zjg0ZGZlYzFlOWFlYWU2NzdjODNmNWUwMGM4MGIzMmFmZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq5nodwhyODga0So8u49GUInHhO6
8eaUK0eaAdy37a6/D+9mw5Huamq1wF12aewpLjmcF6I9UUznHkQh8cXZXg+VpBK/
fNDbkM1vbIo2WP1io9K2mk2oEj6Ia4zCguYiwQOvjZ8O9tpweaEmLBlY4+uLL5xE
y8GymYFlMAc/YhdOvIj/BO3w1tzF8mnGbHBxCEoXr5o1zkjNcTVpquFwd2QX9keM
IDSd/E3MXW3Gl5YMCrn5YZWEq/fltmq+YAlhzTxDUYjnmvFPOv9v5/xwQ5kAMd0J
kSOTvzTbT2S8G5K/hD/nGi0bhCGNzLwzyEcJGlU6id/5Q64d2gikG0Zp9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqZ+E3+wemurmd8g/XgDICzKv20MB8GA1UdIwQY
MBaAFBDUm3PK2gHuhRgS7EQLeh7JhkizMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU5TYmM4cmFBZTZGR0JMc1JBdDZIc21HU0xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wZGRjYTItODFiMy00Yjk5LWJlMDIt
YWEwM2VjNjYyOTBmLzEvRU5TYmM4cmFBZTZGR0JMc1JBdDZIc21HU0xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8wZGRjYTItODFiMy00Yjk5LWJlMDItYWEwM2VjNjYyOTBm
LzEvRU5TYmM4cmFBZTZGR0JMc1JBdDZIc21HU0xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbgI9jla/
CZZClQzivITc0E7SQk/tJE7NCkdBjftZRevyVEu45FyyUn3V/vhIwmWQ3UJnRJ8o
2Ai8TtuJ9GUh/yXlPduNtLK8DB+9dVd8YwBtMxCRnuL7SoNieKnlEbQRN7+Y52Ra
vQNk+P2YYgbIJXxO7X5LKrbtET/mxzsEkwksFAWBS8CGMhSTZKMlX+N2fxVevkgy
q6GeF2CT1mRmx8MWsybWxTEPkgLoRjGKLou1ddA1AApaFHG8sovuDYIwUzy+yAd5
9QZ6ruk3CBZavg94D4CyXrq1YaCA0T9D5SCVQpz/9FbxQLz+lsl/m9VIYeHQCTEu
x7U8Oy6o+nhWDQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:43 2026 by rpki-client