Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
File: EfLjWzxVm22ENmfK1drGdOAblsM.mft (raw, json)
Hash identifier: m0mQ1mvEdac9JM06AMilxUdmbgE6vcDaH2c5RcjPOhI=
Subject key identifier: 9F:59:D6:7D:F2:C8:A9:74:60:91:37:47:64:C3:13:3C:E2:FA:EB:13
Authority key identifier: 11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
Certificate issuer: /CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Certificate serial: 019D37C0CC70F53664D7C1F77243E1763B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
Manifest number: 1084
Signing time: Sun 29 Mar 2026 04:01:15 +0000
Manifest this update: Sun 29 Mar 2026 04:01:15 +0000
Manifest next update: Mon 30 Mar 2026 04:01:15 +0000
Files and hashes: 1: EfLjWzxVm22ENmfK1drGdOAblsM.crl (hash: ySzHrCP7F9TUYD1e1wW8GBGHEt5EPL8VtDZsriK+j4E=)
2: PbU9H76uPCLlqOQ-86yXlS220dw.roa (hash: V4GbhAZFv6aWhq1lviPUINhL7BoSID+QsQjoj/+8n6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:cc:70:f5:36:64:d7:c1:f7:72:43:e1:76:3b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Validity
Not Before: Mar 29 04:01:15 2026 GMT
Not After : Mar 30 04:01:15 2026 GMT
Subject: CN=9f59d67df2c8a9746091374764c3133ce2faeb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b7:4c:e4:7f:f6:20:c2:4f:bc:8e:c8:0a:a6:
8e:8a:a3:35:68:e3:f0:f0:60:5b:ba:86:77:dd:36:
bd:88:e6:a5:9f:ee:c7:ed:e0:45:94:d0:2b:c4:94:
78:a7:6a:51:ad:75:4a:fd:b0:1f:da:87:c0:26:5e:
2d:09:17:03:fd:a9:c1:42:38:20:2a:79:00:41:f5:
07:0b:b4:b8:38:62:e5:ee:f8:c0:77:65:c4:4d:7a:
77:b7:eb:6c:c9:0a:44:6c:12:a6:a3:bb:68:6a:05:
f3:85:3f:82:49:c8:78:65:5c:41:b7:c3:1b:33:45:
1c:f9:30:76:7c:c5:36:f5:30:8b:8b:16:3e:82:0a:
4b:73:76:9f:11:fe:73:bf:59:e2:35:4d:d3:9a:0b:
fc:a4:ee:64:a2:8f:d1:fb:0d:ea:e7:b7:1a:f7:f0:
8d:ee:e3:06:d7:9a:a5:b7:d5:72:c8:be:dc:86:fd:
30:d7:44:94:70:ba:99:72:4d:9b:c1:e1:57:3b:e4:
d2:c4:a9:f0:c8:0b:a1:48:69:54:ed:5c:9a:53:91:
87:bc:19:1c:9d:d9:53:a8:02:93:11:43:55:b8:7b:
8f:d2:fc:2d:b5:6a:ba:9a:ab:46:dc:fc:73:85:69:
37:32:18:ba:eb:73:8c:21:a9:9b:e8:87:81:59:f6:
2b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:59:D6:7D:F2:C8:A9:74:60:91:37:47:64:C3:13:3C:E2:FA:EB:13
X509v3 Authority Key Identifier:
keyid:11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:8f:2d:a3:a1:49:c4:aa:24:b1:cc:5a:09:c9:dc:ea:c2:f9:
fd:76:0e:cc:ea:b2:7f:74:08:11:ea:cb:23:78:af:83:a4:52:
51:65:07:49:a5:c1:c9:8d:cd:da:3e:06:31:27:bf:97:f9:c6:
d5:b9:61:25:6b:9a:0f:4d:01:3e:23:ed:24:4d:f9:c0:da:19:
eb:95:ba:34:ec:fd:99:66:9a:b5:3b:ab:24:e6:b6:7a:a1:da:
7f:3c:f1:5d:39:8a:e8:16:a6:f6:23:73:67:02:00:88:6c:89:
07:65:12:89:c9:7c:b9:9d:fd:b6:9e:dc:9d:74:da:30:4e:3b:
fd:2e:69:2f:2a:d0:bb:19:bb:97:0a:b9:6f:e6:60:59:25:c8:
5a:6a:4a:94:ee:45:7b:cf:be:e1:7e:0c:a6:cf:14:ee:19:18:
2d:cd:0e:67:ff:d8:ad:c8:fc:b2:94:92:2c:49:6b:eb:b8:a6:
a8:2a:1e:6e:62:62:ea:c9:e2:e5:62:c7:88:cc:7a:e2:67:cb:
96:74:16:71:9b:11:36:11:9d:67:f1:c0:58:97:c5:c0:ed:b6:
7a:12:32:f1:64:da:30:d0:28:bb:71:7e:2e:e9:ff:09:d4:30:
f7:99:93:e0:b1:d2:a8:f2:f6:19:24:34:4f:89:45:24:0d:da:
a1:94:d9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:34 2026 by rpki-client