Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
File: elJNrL4CqVkxyh1u4ps8iVek7L4.mft (raw, json)
Hash identifier: FFLYwCNLK5cpaAYErjOdwUd+dJJ7NjkviXC0wXurGOQ=
Subject key identifier: 98:DC:C6:B5:AB:98:2C:1A:36:FC:02:87:53:1C:32:74:7B:2B:79:A9
Authority key identifier: 7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE
Certificate issuer: /CN=7a524dacbe02a95931ca1d6ee29b3c8957a4ecbe
Certificate serial: 019D3865EAA0CD0B88D428D0D2547D325A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
Manifest number: 069E
Signing time: Sun 29 Mar 2026 07:01:36 +0000
Manifest this update: Sun 29 Mar 2026 07:01:36 +0000
Manifest next update: Mon 30 Mar 2026 07:01:36 +0000
Files and hashes: 1: elJNrL4CqVkxyh1u4ps8iVek7L4.crl (hash: zdRl2lchpSIz9XeB42Nr3quNMs67hZ7anX/iLgsoS04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ea:a0:cd:0b:88:d4:28:d0:d2:54:7d:32:5a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a524dacbe02a95931ca1d6ee29b3c8957a4ecbe
Validity
Not Before: Mar 29 07:01:36 2026 GMT
Not After : Mar 30 07:01:36 2026 GMT
Subject: CN=98dcc6b5ab982c1a36fc0287531c32747b2b79a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:52:8e:4c:91:10:47:2f:66:78:57:b5:3d:6e:
ca:62:05:51:c2:73:4d:47:86:8f:85:40:50:c0:61:
57:d8:2f:6c:87:06:b2:c1:00:bd:e2:95:1a:50:48:
9b:11:ba:bd:a2:39:22:8b:da:97:a9:52:0d:aa:9e:
6f:e8:5b:fd:75:03:87:f4:68:35:69:6f:fb:c6:9b:
9a:0e:f5:da:9a:18:57:d7:72:3e:eb:0c:d0:16:72:
21:51:dd:2f:e6:09:b9:e2:40:76:2b:88:7e:ef:0b:
2d:bc:61:9f:77:3a:c0:fd:c5:03:9e:ca:d0:be:ff:
c4:84:60:2a:d1:91:8a:73:1a:79:72:5e:15:8b:3b:
0e:34:56:e3:51:b5:8b:72:a0:ef:4a:43:a2:28:79:
b9:10:63:88:09:bb:e6:86:a9:ad:86:68:bd:c6:bd:
97:fd:dc:4d:84:69:a8:c6:a9:36:12:54:91:2a:36:
93:2b:ee:04:ab:13:42:89:9c:2a:53:87:d8:0b:12:
0b:50:a6:ed:bd:92:4b:f7:bc:5f:2c:66:de:33:bf:
5c:e6:38:5c:e5:cb:bc:6e:3b:70:5c:6c:8c:82:27:
7a:57:4e:b0:58:23:4c:18:ed:e5:22:ef:7c:31:ce:
3b:4e:20:51:2e:19:e8:70:34:bd:5b:a9:9c:84:51:
7f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DC:C6:B5:AB:98:2C:1A:36:FC:02:87:53:1C:32:74:7B:2B:79:A9
X509v3 Authority Key Identifier:
keyid:7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2a:d6:aa:5f:c0:a1:1c:7f:f3:bf:5f:f0:39:04:4d:df:14:
71:c1:4f:4d:29:65:2c:7f:79:aa:e3:33:98:9e:81:f6:fb:42:
64:50:ad:70:d0:7e:27:b6:76:77:8e:fc:e1:2a:9d:0a:1a:6c:
88:fb:dd:2f:57:e1:0d:34:7a:2b:47:a7:42:73:74:b4:c8:2e:
4b:6b:75:2a:79:19:7d:bc:06:b7:2f:25:ab:f6:f7:91:2b:f7:
31:93:0e:52:46:79:78:57:6d:05:f6:38:cb:6a:99:29:91:35:
aa:83:f7:24:88:4f:b9:2f:2e:80:d3:0e:49:01:04:50:e0:99:
05:a0:da:cd:d6:45:9f:46:b5:d6:18:ac:8d:ef:7f:c4:c5:8b:
96:2c:83:35:40:e9:6e:81:06:31:90:59:0a:ed:c7:e7:b3:f2:
a1:55:77:4b:e1:dc:fc:f5:36:03:81:99:f3:47:8b:f6:f8:5c:
9c:dc:b1:9b:8b:bb:a7:89:20:4b:3e:a4:e8:a1:a1:a9:a0:67:
cb:4b:0a:33:96:f1:2f:74:fd:ab:c4:16:c5:87:27:b1:d0:45:
86:6f:86:16:48:37:dc:76:5d:b1:44:45:a4:39:fb:f6:14:32:
f1:06:a0:07:64:e3:fe:1c:6a:30:a1:78:7c:0e:51:09:17:a9:
a0:38:c1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:03 2026 by rpki-client