Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
File: egadopx7Yd3rzAUk_QjlTf80wWg.mft (raw, json)
Hash identifier: 3EvekQXp8n7Q1vHUzVcd2sRQq4qrJrCcVI4lJ94oAGw=
Subject key identifier: 5E:80:CA:48:53:98:DB:EA:A8:15:7A:70:39:43:60:4F:B3:0C:28:07
Authority key identifier: 7A:06:9D:A2:9C:7B:61:DD:EB:CC:05:24:FD:08:E5:4D:FF:34:C1:68
Certificate issuer: /CN=7a069da29c7b61ddebcc0524fd08e54dff34c168
Certificate serial: 019D3A545147A331728E35122C01B587F94D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 16:01:37 +0000
Manifest this update: Sun 29 Mar 2026 16:01:37 +0000
Manifest next update: Mon 30 Mar 2026 16:01:37 +0000
Files and hashes: 1: egadopx7Yd3rzAUk_QjlTf80wWg.crl (hash: IkBO0/Di2/DC/DQOvSfWH5mC3lIPNvRTAFckahwr9Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:51:47:a3:31:72:8e:35:12:2c:01:b5:87:f9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a069da29c7b61ddebcc0524fd08e54dff34c168
Validity
Not Before: Mar 29 16:01:37 2026 GMT
Not After : Mar 30 16:01:37 2026 GMT
Subject: CN=5e80ca485398dbeaa8157a703943604fb30c2807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:bc:9c:f3:c3:37:8f:a2:26:ac:7a:27:ef:
0e:e4:f7:3a:8e:8d:5c:6c:3c:b2:14:77:8b:95:94:
ec:6d:db:d6:73:48:d1:53:c7:08:42:bf:97:0a:3f:
6d:36:d8:9c:62:e5:59:88:d0:cc:2f:9f:dd:a6:f7:
f8:19:b0:a1:db:33:12:91:44:e9:c9:4c:fd:8a:da:
bb:0c:30:1d:3e:33:9c:5d:cc:ed:f1:ce:68:0c:fd:
19:10:3d:39:61:83:b7:5f:c4:78:96:dc:81:5b:81:
2e:35:d6:83:20:bd:ed:f6:40:43:a6:c6:10:d7:79:
87:24:fe:99:0f:46:0b:7a:3b:fb:62:51:ca:90:ee:
43:6a:2f:c2:df:a3:55:33:a1:0f:08:22:0a:31:03:
04:dc:a7:d5:2b:bd:e5:6e:ec:e7:18:60:1a:a0:b6:
a9:67:56:5e:89:ca:55:c6:71:6e:e8:f3:2e:75:fd:
85:2f:10:7f:76:d4:10:24:dd:09:21:9d:a1:59:8f:
2a:79:4b:80:63:88:55:1f:60:4e:73:6b:9c:06:ec:
91:fb:eb:b6:bc:6d:02:60:29:cd:9e:0b:f6:e6:94:
7a:40:bf:4a:d8:a8:58:93:46:1e:35:ff:ef:53:04:
c4:99:d4:da:97:b9:d2:29:a7:2a:a0:26:a3:b5:f3:
f3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:80:CA:48:53:98:DB:EA:A8:15:7A:70:39:43:60:4F:B3:0C:28:07
X509v3 Authority Key Identifier:
keyid:7A:06:9D:A2:9C:7B:61:DD:EB:CC:05:24:FD:08:E5:4D:FF:34:C1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3c:45:a2:2a:6b:12:b9:e8:ac:2c:6a:97:2e:2e:ec:66:2f:
56:e0:0c:9a:d1:dd:29:2a:25:da:fc:aa:03:65:e7:35:98:fa:
6d:e7:33:a5:5d:34:97:29:5d:c8:9f:05:d6:0d:e0:ee:22:03:
7f:d9:59:9a:07:bb:ff:aa:17:5f:27:b5:6a:93:66:e5:85:44:
76:ee:08:72:0d:46:ba:e6:cf:82:0e:2d:01:56:2b:03:22:d1:
e8:eb:d0:98:ef:ba:e3:fc:bd:10:68:ad:2b:0b:47:94:f1:dc:
1a:4f:90:a7:ac:1e:e9:09:cd:ed:f4:90:2d:fb:be:e0:20:da:
35:a9:bd:3e:45:e7:1f:8f:61:63:10:32:48:bf:7a:d8:59:e2:
97:42:06:a6:28:3c:f9:de:7f:e3:b2:d4:36:78:3d:e8:e9:e2:
73:08:ee:31:09:87:92:14:f8:87:2f:9b:db:ed:13:3b:cf:12:
a9:86:53:73:b4:52:09:81:19:cf:e5:10:e5:22:b0:11:57:76:
ce:96:c3:5a:31:60:c5:20:e5:25:01:c9:21:bd:ae:ec:d0:53:
88:b2:c3:db:38:b4:df:7f:74:1a:52:15:15:75:cf:d2:41:ac:
84:33:b9:5d:5f:8e:22:63:de:a2:fa:91:14:16:68:67:12:6a:
4a:f5:f5:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06VFFHozFyjjUSLAG1h/lNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMDY5ZGEyOWM3YjYxZGRlYmNjMDUyNGZkMDhlNTRkZmYz
NGMxNjgwHhcNMjYwMzI5MTYwMTM3WhcNMjYwMzMwMTYwMTM3WjAzMTEwLwYDVQQD
Eyg1ZTgwY2E0ODUzOThkYmVhYTgxNTdhNzAzOTQzNjA0ZmIzMGMyODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNe8nPPDN4+iJqx6J+8O5Pc6jo1c
bDyyFHeLlZTsbdvWc0jRU8cIQr+XCj9tNticYuVZiNDML5/dpvf4GbCh2zMSkUTp
yUz9itq7DDAdPjOcXczt8c5oDP0ZED05YYO3X8R4ltyBW4EuNdaDIL3t9kBDpsYQ
13mHJP6ZD0YLejv7YlHKkO5Dai/C36NVM6EPCCIKMQME3KfVK73lbuznGGAaoLap
Z1ZeicpVxnFu6PMudf2FLxB/dtQQJN0JIZ2hWY8qeUuAY4hVH2BOc2ucBuyR++u2
vG0CYCnNngv25pR6QL9K2KhYk0YeNf/vUwTEmdTal7nSKacqoCajtfPz6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6AykhTmNvqqBV6cDlDYE+zDCgHMB8GA1UdIwQY
MBaAFHoGnaKce2Hd68wFJP0I5U3/NMFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWdhZG9weDdZZDNyekFVa19RamxUZjgwd1dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82MDM5ZTgtMmQ2OC00MzEwLWEzYWMt
NGJmZWZlNDE2ZjI2LzEvZWdhZG9weDdZZDNyekFVa19RamxUZjgwd1dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82MDM5ZTgtMmQ2OC00MzEwLWEzYWMtNGJmZWZlNDE2ZjI2
LzEvZWdhZG9weDdZZDNyekFVa19RamxUZjgwd1dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjxFoipr
ErnorCxqly4u7GYvVuAMmtHdKSol2vyqA2XnNZj6beczpV00lyldyJ8F1g3g7iID
f9lZmge7/6oXXye1apNm5YVEdu4Icg1GuubPgg4tAVYrAyLR6OvQmO+64/y9EGit
KwtHlPHcGk+Qp6we6QnN7fSQLfu+4CDaNam9PkXnH49hYxAySL962Fnil0IGpig8
+d5/47LUNng96OnicwjuMQmHkhT4hy+b2+0TO88SqYZTc7RSCYEZz+UQ5SKwEVd2
zpbDWjFgxSDlJQHJIb2u7NBTiLLD2zi03390GlIVFXXP0kGshDO5XV+OImPeovqR
FBZoZxJqSvX1wg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:22:11 2026 by rpki-client