Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
File: eAl9X3eghkNQCkNtDpjwM9D1SPk.mft (raw, json)
Hash identifier: 9Di25ErqDzlJKUjDUh/vTniEaldRGwfuU1aMnryXkzE=
Subject key identifier: 50:5D:E3:AC:A7:2D:9A:2C:9D:29:08:5F:CD:EB:EC:1C:0F:AA:E9:FF
Authority key identifier: 78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
Certificate issuer: /CN=78097d5f77a08643500a436d0e98f033d0f548f9
Certificate serial: 019D37C08ED1F3DC8EF5D399D4630D317C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 04:00:59 +0000
Manifest this update: Sun 29 Mar 2026 04:00:59 +0000
Manifest next update: Mon 30 Mar 2026 04:00:59 +0000
Files and hashes: 1: eAl9X3eghkNQCkNtDpjwM9D1SPk.crl (hash: V5YV7TALW/8cc9Px8xGMfAqMUNCcwHfAyGUbMsAIiJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:8e:d1:f3:dc:8e:f5:d3:99:d4:63:0d:31:7c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78097d5f77a08643500a436d0e98f033d0f548f9
Validity
Not Before: Mar 29 04:00:59 2026 GMT
Not After : Mar 30 04:00:59 2026 GMT
Subject: CN=505de3aca72d9a2c9d29085fcdebec1c0faae9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:75:55:4b:ab:9e:6c:a8:f3:2c:14:78:4a:53:
2e:57:8a:ee:2d:a7:7a:81:72:d2:cc:14:37:88:5b:
e9:4f:f6:c7:61:73:5d:d8:4a:73:d6:ff:b4:29:48:
f2:ce:97:3d:5d:66:37:4f:4b:4d:22:9d:f7:74:b0:
ac:07:b5:00:de:b5:48:60:c6:e5:e2:32:49:ba:3a:
fa:af:0e:5f:84:18:1e:d9:c6:24:3b:f3:f1:20:e3:
d6:3a:88:f4:29:c6:70:6f:ef:4d:cf:db:bf:d4:d4:
be:44:66:83:54:dd:d4:ec:7e:33:0c:d1:c3:3e:b3:
b8:a7:02:b5:f3:76:dd:a4:ee:af:46:92:18:94:be:
f9:79:a8:61:42:b7:7f:12:a7:9f:4e:8c:fc:51:e1:
30:09:7e:a2:f4:32:d2:6f:2f:c2:f4:81:d4:5c:14:
98:ee:42:33:af:88:dc:4d:0d:d7:e8:6f:94:e7:c3:
82:af:1b:0c:27:45:7b:a9:7a:c0:72:ba:90:54:23:
0e:fe:35:29:97:ee:9f:17:07:da:65:44:8d:ee:d3:
d4:26:00:6a:99:cb:81:dd:17:4c:e1:08:99:c6:1e:
6a:91:da:c6:3b:3d:a0:79:2c:d9:4d:06:da:e8:3b:
51:0a:23:5f:cb:30:59:5b:30:7a:59:57:8a:17:7d:
18:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5D:E3:AC:A7:2D:9A:2C:9D:29:08:5F:CD:EB:EC:1C:0F:AA:E9:FF
X509v3 Authority Key Identifier:
keyid:78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a4:82:e2:42:2b:d4:c5:56:f2:a2:70:e2:23:c9:77:06:a1:
6b:7e:6e:c4:42:86:a5:24:98:9a:ec:02:82:66:c5:fd:b6:2d:
f4:ca:22:f2:0e:d2:d4:ab:83:0f:5e:90:8c:e1:09:0f:75:c9:
91:99:c5:d7:c1:eb:67:1f:d6:ad:af:b2:aa:5d:26:47:9b:a9:
32:1d:35:48:af:d7:6f:b5:ca:5f:d4:1a:63:94:ee:de:1f:1f:
49:4e:cf:44:a8:40:e4:9b:d3:34:55:ac:87:d2:d7:14:a8:bc:
e0:7e:ff:72:3b:12:f7:4d:87:b2:a3:96:b6:d7:01:13:97:7e:
54:18:1d:f8:f6:50:96:5a:2b:94:4f:1d:a7:d6:b2:2a:64:44:
fb:88:ee:3a:a5:cd:b3:43:2f:60:51:74:f4:82:49:af:c1:ca:
9c:5e:41:ea:b4:01:84:b4:c4:95:64:95:d2:81:d8:df:46:6f:
56:90:06:5d:8b:ea:d3:b6:58:64:ca:52:ad:02:a2:01:5c:0d:
df:c0:f3:6b:1b:97:f6:bb:f8:1f:12:b5:4f:1a:2a:d2:e6:76:
0f:4e:fc:a6:7a:fd:71:72:57:91:b1:b9:fe:79:c6:d1:11:3f:
dd:b6:2a:62:4a:d0:af:93:54:9e:cf:42:ad:1e:bc:15:15:01:
62:08:f7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:53 2026 by rpki-client