Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
File: EdGf2unFPY0oseQcqROcM1VrpiU.mft (raw, json)
Hash identifier: JKBi63LEqOXiLdskRkY0h1Vt2gfnn42QXlv+N+5HAA4=
Subject key identifier: C9:3D:E3:55:F6:8E:82:EF:7B:41:22:71:70:8F:30:A3:61:93:3C:63
Authority key identifier: 11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
Certificate issuer: /CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Certificate serial: 019D38D352F672DD1020E0007E4F43CA7565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
Manifest number: 0CEF
Signing time: Sun 29 Mar 2026 09:01:06 +0000
Manifest this update: Sun 29 Mar 2026 09:01:06 +0000
Manifest next update: Mon 30 Mar 2026 09:01:06 +0000
Files and hashes: 1: EdGf2unFPY0oseQcqROcM1VrpiU.crl (hash: frEkCNKKUsqIPWxhiThY8fu8gBVcM77oRsONwMq5/Bs=)
2: _cYlNrPZ4aNJF3IHILF10hUz1QE.roa (hash: 055GVfTacul6sO6E7JP7r8Y/ZviD+fN14ITbu8RYmeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:52:f6:72:dd:10:20:e0:00:7e:4f:43:ca:75:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Validity
Not Before: Mar 29 09:01:06 2026 GMT
Not After : Mar 30 09:01:06 2026 GMT
Subject: CN=c93de355f68e82ef7b412271708f30a361933c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:60:ac:ec:49:d7:57:83:f9:b2:a6:f6:7b:d4:
92:e2:5f:4d:aa:27:88:ae:1c:ac:5b:3f:5e:9a:5b:
3c:33:88:e2:70:41:95:7e:de:90:92:1b:2d:de:7e:
d5:bc:a9:c3:4b:ac:98:66:fc:32:12:1d:45:39:45:
7c:49:98:92:04:f6:d0:6b:e7:09:43:90:f0:3d:51:
31:10:fd:e2:5f:77:28:9d:66:b3:b6:54:0a:01:d3:
5b:18:d7:66:57:ac:73:e2:51:f5:c1:0e:a3:ac:8e:
86:bf:ba:5e:5f:23:cf:82:e2:06:99:69:05:88:6e:
3f:fd:e8:55:cb:3d:23:9c:d0:ba:12:c7:32:95:82:
e5:65:64:85:d6:86:83:51:d1:fb:8f:c4:1b:25:70:
47:04:2b:60:38:4e:84:5a:f0:85:23:49:7f:eb:0f:
11:bd:bc:27:62:33:71:9d:23:bd:8b:4e:d8:4d:22:
da:74:7c:43:ee:27:ab:7b:0e:d2:4c:36:af:a2:12:
ac:2b:93:05:c7:c6:41:4d:65:ad:25:6c:2b:65:1c:
33:ef:48:3e:7d:4a:cf:0d:4f:81:ab:54:14:e8:77:
aa:17:8d:5c:d4:1c:ec:f4:93:8e:e1:f8:ff:7f:82:
72:a8:d5:25:af:a3:9c:bd:b8:bb:56:da:27:a2:6a:
a9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3D:E3:55:F6:8E:82:EF:7B:41:22:71:70:8F:30:A3:61:93:3C:63
X509v3 Authority Key Identifier:
keyid:11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:43:3d:9a:e2:ab:1c:20:cd:25:a1:53:74:de:38:2c:9e:26:
94:53:55:98:40:cd:63:b3:a2:8a:d2:6c:5e:d2:c8:f6:f7:ea:
95:01:4e:89:eb:dd:e5:b5:96:23:75:89:69:6b:2e:77:7f:ff:
4c:e1:66:74:e4:cd:02:9e:d8:5e:af:ad:0e:c1:95:87:01:50:
a9:14:11:e2:ee:34:1d:97:b4:8c:f6:6d:d9:07:fb:77:e4:d9:
0d:2f:0a:eb:d2:a1:d2:a8:9c:25:d3:92:06:34:a5:77:b5:b2:
72:bd:e0:6d:b3:b3:11:ce:de:97:af:95:7d:17:11:97:c8:53:
4e:f7:86:9e:78:8c:f6:9b:69:8e:d4:b3:8e:96:b3:47:a5:fc:
1c:65:59:f6:6b:0b:10:6a:cd:8e:25:e0:d0:2b:4c:9f:f4:ea:
9b:e8:f0:aa:cb:02:a6:a4:4e:82:90:ac:9b:e4:6e:07:98:a7:
e4:68:af:75:82:fe:98:91:c0:df:a1:81:47:e1:98:59:05:ea:
41:c1:38:bf:7d:de:a7:1a:31:74:98:f6:f1:b9:c0:ef:1f:b9:
23:64:ce:f9:61:01:10:b3:41:15:84:d8:83:cc:38:04:7a:8f:
26:13:30:6b:c3:4a:da:07:f9:3b:cc:39:4d:34:e1:ef:8e:89:
d4:41:55:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:47 2026 by rpki-client