Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
File: EAcdqxaOjlPjzX31244PBCQukIY.mft (raw, json)
Hash identifier: mEpVPqd12kDaWB/i6C+8V4ymaxuBkWrI1NWDSxTEsck=
Subject key identifier: 23:C3:FB:4C:37:53:15:FA:C6:09:FE:4A:F2:91:49:F8:31:4A:04:DA
Authority key identifier: 10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
Certificate issuer: /CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Certificate serial: 019D389C17F1AB14501F76F34BB25422A7FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 08:00:46 +0000
Manifest this update: Sun 29 Mar 2026 08:00:46 +0000
Manifest next update: Mon 30 Mar 2026 08:00:46 +0000
Files and hashes: 1: EAcdqxaOjlPjzX31244PBCQukIY.crl (hash: vEPuuIBqdqNozwm7fRslyTKKqSUTxGsR2MczMi5H/y4=)
2: TehJaUKE7-UYVJg4qzcGnHF4gEE.roa (hash: g9yiDNMzuqT4Xury4y9vb4TVbFovThME/EkaBOlvwI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:17:f1:ab:14:50:1f:76:f3:4b:b2:54:22:a7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Validity
Not Before: Mar 29 08:00:46 2026 GMT
Not After : Mar 30 08:00:46 2026 GMT
Subject: CN=23c3fb4c375315fac609fe4af29149f8314a04da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:44:42:6b:91:81:6b:d7:f6:16:f7:49:42:58:
cd:e0:97:0e:26:8e:08:65:35:31:52:5b:65:9e:80:
42:a6:fe:5e:ae:27:24:11:69:4d:0f:2a:70:8e:b7:
df:e2:46:23:d6:44:7b:9c:f1:46:36:37:e4:be:20:
85:44:12:30:2a:8a:a0:7c:64:3e:6b:f2:60:ba:27:
4d:65:f8:8c:3e:6e:23:d2:1e:8f:6e:8c:52:2b:0c:
31:dd:71:f5:03:58:cf:82:f5:86:4c:c8:39:09:ea:
2f:99:be:8e:81:15:7c:e3:f1:b5:f1:81:ff:e2:67:
12:4b:a2:a6:8e:bc:86:54:4c:e5:3e:4a:d8:27:28:
d2:a9:08:63:39:67:f1:00:fc:41:6b:6d:c1:b5:59:
0f:18:b6:62:b7:b0:e9:84:6a:0e:6f:42:88:ad:3c:
bc:1a:c9:af:78:0f:de:84:40:89:12:96:ec:0f:3d:
08:50:77:18:3c:40:41:b0:6a:0d:38:48:dd:a9:02:
0f:85:dd:c5:a8:61:23:35:75:99:a0:0e:3b:7d:54:
af:60:0e:40:34:f5:eb:be:23:cb:fb:9e:67:b6:c0:
00:f4:14:1f:3e:c4:49:00:d1:f4:d8:c7:9e:e7:45:
d4:2d:27:48:b8:6c:37:71:93:ed:6e:18:6d:66:56:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C3:FB:4C:37:53:15:FA:C6:09:FE:4A:F2:91:49:F8:31:4A:04:DA
X509v3 Authority Key Identifier:
keyid:10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:8e:a1:0b:36:e9:15:6c:12:03:3f:ee:32:a0:f4:f9:b3:4a:
8c:13:e1:ac:12:cf:c5:bc:c1:89:d8:0e:38:68:c5:d9:8e:8f:
c6:9c:20:1b:d9:3b:72:25:62:d8:50:61:fa:71:f9:8d:59:b3:
79:20:84:c3:1f:cb:1d:45:0f:87:6d:b8:c4:aa:96:b0:4c:6a:
5d:89:ee:e9:c2:74:1c:a8:e7:08:fd:85:76:f2:cd:71:b5:39:
56:35:7c:71:19:e2:bc:6c:32:49:88:75:46:47:e7:57:c9:59:
31:6e:87:34:fd:7b:dd:26:a8:8e:58:40:70:20:f7:5b:cd:fc:
ac:4f:c3:f6:c3:01:d7:1d:2b:6b:90:b8:00:2b:0e:f7:b4:fe:
2a:4f:0f:ea:a7:89:4f:f8:ce:66:dd:d7:2b:ba:cd:37:fa:ef:
ce:3f:5b:43:b3:9e:5a:02:70:8f:28:82:7a:f0:61:20:22:1b:
66:34:2e:14:8a:a7:42:74:01:f9:9a:fb:f7:03:54:31:8a:3f:
45:69:da:a0:06:38:b4:da:94:3d:0a:06:e6:7d:6b:e4:21:18:
90:38:a9:a7:b2:54:58:63:e4:26:c3:d3:50:e5:d0:27:fc:c0:
73:ef:fb:38:82:79:44:4b:e3:1d:3f:37:87:b9:3d:b7:7e:3c:
80:09:e0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:22 2026 by rpki-client