Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
File: EAcdqxaOjlPjzX31244PBCQukIY.mft (raw, json)
Hash identifier: iEbNnDh3jEZdQuWZsnZzA6e+Os36vcnh3X8J/KTpHng=
Subject key identifier: FF:98:D3:4E:EC:82:37:94:C5:9A:5A:4E:95:D9:CF:8D:0B:E4:B0:47
Authority key identifier: 10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
Certificate issuer: /CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Certificate serial: 019F197A3C2EBB5D0EAEF82AA7910AF9C370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
Manifest number: 1986
Signing time: Tue 30 Jun 2026 17:01:08 +0000
Manifest this update: Tue 30 Jun 2026 17:01:08 +0000
Manifest next update: Wed 01 Jul 2026 17:01:08 +0000
Files and hashes: 1: EAcdqxaOjlPjzX31244PBCQukIY.crl (hash: bzcy5AgqHoNFZ1OKezOhoY//y9/pti96sg+eIShky90=)
2: TehJaUKE7-UYVJg4qzcGnHF4gEE.roa (hash: g9yiDNMzuqT4Xury4y9vb4TVbFovThME/EkaBOlvwI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:3c:2e:bb:5d:0e:ae:f8:2a:a7:91:0a:f9:c3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Validity
Not Before: Jun 30 17:01:08 2026 GMT
Not After : Jul 1 17:01:08 2026 GMT
Subject: CN=ff98d34eec823794c59a5a4e95d9cf8d0be4b047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:71:14:fa:fa:0c:79:1e:71:4d:f8:a6:87:22:
76:55:e6:c2:05:4e:9a:43:a9:a3:1a:b5:bb:52:23:
96:d8:e0:f9:3f:40:49:40:f4:d0:68:02:71:62:b7:
4f:1e:3b:28:f3:b1:08:7b:a2:88:9c:ad:06:99:2b:
be:18:5f:5c:b9:75:bd:10:bc:ee:ab:da:f2:b3:0a:
a3:64:56:6a:e1:62:57:26:4f:60:13:ed:62:98:9b:
99:df:44:1f:ab:b2:fb:84:33:aa:ce:95:73:16:ba:
84:79:93:68:6c:eb:21:c1:59:40:0e:8c:1d:3f:ec:
84:ac:11:6f:85:8c:d6:fa:a8:03:cb:61:3b:8c:a7:
73:20:8b:00:9b:b9:bf:8b:b8:08:36:8c:71:10:cb:
89:33:e9:4f:f5:01:3a:66:eb:a8:77:5c:5e:05:8f:
42:72:92:d6:16:39:2e:b1:88:63:9e:f9:70:09:03:
f1:2a:e2:61:d4:63:f1:ff:c7:61:db:14:a5:7d:ca:
9c:9a:24:f6:0c:03:ca:12:88:f9:6b:1e:8d:ac:50:
ae:05:62:79:51:39:16:45:b0:db:b5:40:d2:98:4a:
f8:b0:db:4d:92:17:db:7e:0d:d5:2a:21:d1:46:ce:
d5:ab:df:03:43:9d:5e:35:7d:ab:d4:4a:b3:77:f0:
2c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:98:D3:4E:EC:82:37:94:C5:9A:5A:4E:95:D9:CF:8D:0B:E4:B0:47
X509v3 Authority Key Identifier:
keyid:10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5f:6e:6b:5c:ec:fb:15:3a:5e:de:5e:09:3d:fd:a0:e4:5a:
73:99:dc:67:db:5e:3b:1e:cf:dc:bf:4d:17:8a:55:a2:c8:a4:
6a:be:31:11:74:e9:f5:15:7b:96:78:77:2c:2b:f9:82:61:c7:
2b:9d:74:8f:b4:1a:a8:7b:01:d4:cd:91:f4:1d:30:2f:d7:2d:
8b:8d:35:53:60:a2:2c:ee:51:a0:7f:7d:c0:53:f2:48:4a:74:
df:34:1e:99:3d:df:5b:4c:5c:78:e5:b4:43:b0:ce:72:70:3f:
e9:05:b4:b3:e4:9d:57:e7:3b:18:30:13:2f:f6:bd:41:33:bb:
7e:00:b5:16:a0:8a:8b:8a:5f:71:c3:7c:d6:c5:4a:d0:4a:80:
b0:56:3a:6e:68:bd:23:e0:18:3e:cb:2b:65:39:44:88:c6:33:
e8:47:96:c9:57:5d:98:cc:76:4e:16:fe:38:9a:e6:d1:c3:b2:
ee:35:8f:ba:cc:15:2b:d2:fd:ec:d1:4e:a4:d0:ab:c2:98:cc:
90:b7:a4:40:16:db:2a:b3:a2:65:ab:a5:ec:9b:ad:d2:e8:39:
c1:af:b4:b1:57:03:47:e4:0d:ab:7b:37:ee:85:ec:05:41:61:
bd:9b:17:c1:e7:88:e4:16:37:27:36:dc:a5:9f:fd:62:e8:0c:
09:3f:dc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:31:35 2026 by rpki-client