Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/EW3J4YxQICkXWc-S1TsDfTAX--Y.mft
File: EW3J4YxQICkXWc-S1TsDfTAX--Y.mft (raw, json)
Hash identifier: oV16XQnV2az0Vk3rW7cm2M0HNnDQ1wlj/5VI/yOPZJc=
Subject key identifier: 22:27:C9:B8:62:E0:7F:48:BE:D2:25:68:B2:D1:D0:29:9C:02:DC:C1
Authority key identifier: 11:6D:C9:E1:8C:50:20:29:17:59:CF:92:D5:3B:03:7D:30:17:FB:E6
Certificate issuer: /CN=116dc9e18c5020291759cf92d53b037d3017fbe6
Certificate serial: 019F111C59B4D22AB94E405FB0F4763CC209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EW3J4YxQICkXWc-S1TsDfTAX--Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/EW3J4YxQICkXWc-S1TsDfTAX--Y.mft
Manifest number: 26
Signing time: Mon 29 Jun 2026 02:01:38 +0000
Manifest this update: Mon 29 Jun 2026 02:01:38 +0000
Manifest next update: Tue 30 Jun 2026 02:01:38 +0000
Files and hashes: 1: EW3J4YxQICkXWc-S1TsDfTAX--Y.crl (hash: xht6w/X+cIHBH070f9m/eLuAADv6zmMxtZCTSGg085g=)
2: _Ef8SeBp3ruAkA6qeKEIJMt7sHw.roa (hash: hLdHiEsuMtIvVzUZs/wSgsPSZZFFyxjS22x4zUMaD44=)
3: v7mY6I48fXr5lZqQOEgemrB2Gew.asa (hash: mz0VyhyWewERmhr2u7u9dQqusZanaV7uz7P6c/6fM7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/EW3J4YxQICkXWc-S1TsDfTAX--Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/EW3J4YxQICkXWc-S1TsDfTAX--Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/EW3J4YxQICkXWc-S1TsDfTAX--Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1c:59:b4:d2:2a:b9:4e:40:5f:b0:f4:76:3c:c2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=116dc9e18c5020291759cf92d53b037d3017fbe6
Validity
Not Before: Jun 29 02:01:38 2026 GMT
Not After : Jun 30 02:01:38 2026 GMT
Subject: CN=2227c9b862e07f48bed22568b2d1d0299c02dcc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:bb:a8:b9:9f:65:12:69:0e:b7:c9:fd:b4:
71:83:79:25:9b:29:67:21:4c:bc:11:2f:e4:24:4f:
2b:60:87:74:f5:5c:cc:6f:e2:8d:c0:54:22:08:c9:
73:65:13:3b:b8:0e:f2:61:a5:26:42:f6:41:df:20:
59:5b:22:71:6c:db:bf:c0:75:72:4d:ef:8a:60:73:
0f:e3:49:7c:5b:f7:45:b3:db:a9:fc:6a:f2:8a:63:
34:b6:78:28:06:20:87:1a:2f:89:5a:be:f6:ab:af:
7c:6d:9a:67:91:26:40:ed:16:78:e2:84:e4:f8:99:
d4:94:f0:84:42:7d:36:b7:fa:39:8f:f7:85:b8:bc:
3d:89:a5:bc:90:ec:51:c8:bf:0b:f5:35:df:2f:70:
54:6d:58:42:4e:9b:71:8e:fa:28:9e:33:61:13:98:
c3:4b:e0:f1:95:13:1b:19:7b:ec:a7:02:8d:cf:ae:
b1:4d:03:4a:d3:02:ae:af:0e:92:d3:0a:15:0c:0b:
2b:60:ad:59:a9:c3:d2:fb:fd:6b:c4:24:42:57:8d:
e6:f1:b0:d1:f0:8f:1f:a7:06:ad:73:a5:14:6c:1d:
95:54:4e:01:90:ab:95:dd:65:a9:df:1c:08:f5:11:
e2:d9:cf:46:e8:47:78:77:d9:43:38:13:b2:2d:89:
8a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:27:C9:B8:62:E0:7F:48:BE:D2:25:68:B2:D1:D0:29:9C:02:DC:C1
X509v3 Authority Key Identifier:
keyid:11:6D:C9:E1:8C:50:20:29:17:59:CF:92:D5:3B:03:7D:30:17:FB:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EW3J4YxQICkXWc-S1TsDfTAX--Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/EW3J4YxQICkXWc-S1TsDfTAX--Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/EW3J4YxQICkXWc-S1TsDfTAX--Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f4:40:3b:26:a4:2d:9a:3e:88:ad:a0:e7:03:23:ce:24:be:
78:29:4e:41:d3:36:e0:d5:af:38:a6:72:d1:cc:ac:bf:2e:c5:
07:8f:c2:49:8b:c1:ab:17:c5:a9:22:7a:ad:f0:e0:9b:c8:5c:
64:07:a6:d1:1c:c5:2c:74:e5:7d:7a:f1:be:92:a9:9d:4f:41:
6c:c0:ca:fe:64:df:31:3a:47:f1:d0:bc:72:75:ac:90:8b:6d:
fd:ce:38:ef:aa:ff:40:0f:91:65:6b:83:c2:1a:6e:a4:af:34:
09:76:c1:0f:6a:2a:b8:1c:55:32:36:16:e1:40:e2:4d:77:2e:
e3:80:12:bd:41:5e:71:fe:a4:38:ff:3f:29:7b:8f:ec:78:4c:
b4:e8:f8:86:d3:0b:fd:5c:0e:85:2c:74:1d:1a:43:f3:cb:56:
d8:e5:f6:b9:d0:98:dd:85:15:ba:b5:e1:d5:13:b9:5e:91:37:
c5:31:7c:bf:92:d1:91:8a:25:b7:6b:90:71:c4:82:da:e1:8b:
0a:3e:70:30:43:54:2e:6f:0c:45:19:e1:0d:c7:7b:6e:80:90:
f4:69:6a:06:d1:94:6e:8a:05:96:b1:a0:53:09:1e:88:88:29:
2f:d1:92:d5:ab:94:d3:44:ec:e8:64:14:c5:db:7c:8f:64:bf:
11:93:9e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:38 2026 by rpki-client