Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
File: EJsFo11BCaHkqDTMrazdLG9WsFo.mft (raw, json)
Hash identifier: 6V/AL4VMOP2y5jwoXyt0RDsk/+J7awJNY0TZEqcAS+A=
Subject key identifier: D4:C1:29:DB:68:D8:1D:DB:EA:9B:18:F7:25:41:59:86:DB:60:D4:87
Authority key identifier: 10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
Certificate issuer: /CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Certificate serial: 019F1830BB350F82E61F8445C70FCFC54075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 11:01:14 +0000
Manifest this update: Tue 30 Jun 2026 11:01:14 +0000
Manifest next update: Wed 01 Jul 2026 11:01:14 +0000
Files and hashes: 1: EJsFo11BCaHkqDTMrazdLG9WsFo.crl (hash: yVU9h/4msY5d+NkGfBpCQ/1a2ShRuQFlmq+JKvSf68I=)
2: wvM-Mwaw5-Yu2Gi4rXyhq8xWjTo.roa (hash: zwkwV/qCyW+dPqYTHQuCJTe82tiBbsC4rDyFqVjw0RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:bb:35:0f:82:e6:1f:84:45:c7:0f:cf:c5:40:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Validity
Not Before: Jun 30 11:01:14 2026 GMT
Not After : Jul 1 11:01:14 2026 GMT
Subject: CN=d4c129db68d81ddbea9b18f725415986db60d487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:eb:23:66:b6:b3:03:20:d0:b8:fb:94:2e:8a:
a6:c1:e8:81:bd:a9:a3:a7:54:db:c3:9c:ce:6e:b5:
19:67:d8:fe:69:3a:f1:4b:e3:a9:49:ea:9e:fc:ac:
30:2e:60:73:1b:5e:29:bc:be:94:95:2e:77:cb:c4:
36:64:ab:d0:85:48:c6:f9:49:23:8e:82:0a:d6:10:
03:9b:e2:0b:0b:39:a1:c1:ce:69:05:ad:94:3c:52:
44:64:0a:17:72:52:3b:0d:36:8f:b8:a4:4b:4c:e6:
7f:e8:cc:fd:42:72:9f:f3:76:85:b1:3b:7e:26:4c:
68:1a:34:44:81:5f:c5:ab:a2:6d:8c:8f:01:76:e3:
ae:7e:f2:70:53:32:d9:bc:cc:17:46:4e:65:7c:b2:
d9:14:e4:1a:38:3c:d7:35:1e:a6:d8:f2:f2:86:92:
71:b3:ec:ef:e0:ca:f0:35:91:c2:1b:8c:a4:88:19:
f2:f4:f4:99:e0:a2:37:b4:55:9a:c4:db:2d:6b:5e:
df:04:39:bf:86:51:e3:81:92:cb:8c:1a:6f:05:48:
1e:b4:8f:ec:c9:df:14:cf:a4:ca:4e:c6:9c:87:ad:
79:95:f4:57:28:4e:12:47:1f:b8:f5:8f:d1:7d:1a:
5b:40:2f:8f:a5:db:11:bf:31:68:c2:44:f4:3c:82:
53:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C1:29:DB:68:D8:1D:DB:EA:9B:18:F7:25:41:59:86:DB:60:D4:87
X509v3 Authority Key Identifier:
keyid:10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1f:9b:56:0d:1d:73:43:05:0e:54:a4:b0:8a:97:96:74:b4:
60:d7:ab:75:0e:af:9d:04:e3:6d:ac:25:80:ee:dd:1d:55:e4:
01:0a:8b:89:44:8c:f4:50:04:47:96:a5:c7:1c:ba:d6:5f:5e:
cf:a4:9e:81:71:e6:00:bf:43:0e:cb:ed:6a:ef:1e:88:3d:09:
92:fe:1f:8a:89:71:83:51:67:7e:2c:d6:28:24:ec:0f:0f:f3:
48:1f:92:02:9f:65:05:0d:af:d8:2d:44:8a:6d:cf:25:e8:9f:
c9:29:e5:5c:ee:99:eb:15:39:62:50:0f:40:fd:d2:05:28:61:
44:33:37:0f:89:e9:87:10:de:78:85:cc:3f:a9:6a:12:b6:a9:
52:65:5b:dc:e6:80:06:bc:2d:19:44:d9:44:89:04:9e:89:fd:
7a:12:c2:d0:96:de:29:bb:89:34:83:b4:3c:64:8b:e8:76:dc:
d0:0d:d7:4c:4e:ec:cb:ed:e3:ce:48:f9:ec:ea:60:b6:f8:f1:
11:ea:60:55:0c:ba:76:84:73:96:85:df:44:c0:b4:c9:13:da:
1e:71:33:b7:bc:e0:55:a2:36:4e:d1:86:1c:b7:9d:d8:8a:08:
15:b7:56:29:0b:80:5e:b1:36:a4:1b:d2:6d:ec:51:53:5b:79:
a0:71:ec:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:11:32 2026 by rpki-client