Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
File: EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft (raw, json)
Hash identifier: 4Pe0kKOvONWR/0yzHQ0U7gk3zIdec9uKNJqFTs+1XJY=
Subject key identifier: 85:E4:FD:C3:03:ED:74:FA:D9:CF:ED:BC:A4:91:21:0E:A4:90:E9:81
Authority key identifier: 10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93
Certificate issuer: /CN=1038d7a2954a32d2afd16b88b363b390681cd593
Certificate serial: 019F1943E0C58A327243477AE3BEA24B0A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
Manifest number: 125B
Signing time: Tue 30 Jun 2026 16:01:46 +0000
Manifest this update: Tue 30 Jun 2026 16:01:46 +0000
Manifest next update: Wed 01 Jul 2026 16:01:46 +0000
Files and hashes: 1: EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl (hash: u5f94V5oRLVXBhG4KU3q9iKo/IQxe8yoaI5ZxyohD+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:e0:c5:8a:32:72:43:47:7a:e3:be:a2:4b:0a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1038d7a2954a32d2afd16b88b363b390681cd593
Validity
Not Before: Jun 30 16:01:46 2026 GMT
Not After : Jul 1 16:01:46 2026 GMT
Subject: CN=85e4fdc303ed74fad9cfedbca491210ea490e981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e6:26:4e:10:09:b4:f9:0e:95:94:9b:14:36:
a9:20:2d:14:5c:72:9f:03:3a:d0:c7:c9:ec:4f:42:
ab:be:82:e7:be:e2:3f:1d:88:03:c4:c3:29:3e:d2:
93:22:bc:78:27:0f:cb:5a:08:a8:42:2a:dd:e2:53:
a1:8f:33:98:20:0d:d1:5e:92:af:c7:25:37:62:ff:
5a:b9:17:ef:c7:ee:06:2d:09:41:6a:90:1b:8a:7c:
10:c0:16:ff:14:11:2e:bd:dc:6e:06:83:14:57:42:
1b:11:1e:78:92:17:1c:0b:85:66:8a:e2:50:66:a0:
c2:79:04:b6:7f:02:d9:55:4d:3d:6c:1e:4c:93:76:
7a:ae:79:ae:de:41:da:1a:8a:c3:3d:73:0f:c2:bc:
41:d4:b2:ae:c6:04:27:cb:ae:46:34:d1:95:0a:11:
77:a2:6b:a3:dd:b0:6a:a9:f9:99:bf:75:8c:72:8e:
c4:85:6d:08:1e:6b:16:14:00:49:d2:3c:4d:a8:c9:
a2:1f:0c:21:11:a8:0f:9b:b0:0a:18:1a:cd:c4:b6:
07:ed:1d:83:8a:c8:33:24:d8:28:71:98:29:0c:5e:
51:b4:c9:b3:89:d7:d0:15:02:a6:8f:3e:43:43:4d:
ba:01:d6:cb:d1:08:74:b8:11:0f:17:89:c8:fe:bb:
ed:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E4:FD:C3:03:ED:74:FA:D9:CF:ED:BC:A4:91:21:0E:A4:90:E9:81
X509v3 Authority Key Identifier:
keyid:10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:28:cb:47:34:8f:4d:7f:a0:0a:bb:12:63:ad:26:04:c9:0f:
c2:12:d2:9b:21:1c:92:1a:39:70:9f:7f:5b:22:79:c8:e3:9a:
14:3f:01:a2:0d:d3:21:4b:32:00:f1:3a:c6:74:e7:54:e0:9f:
7d:49:50:10:de:20:95:fa:3a:67:a8:13:33:57:22:80:d1:a1:
05:fa:b3:b9:86:5a:36:1d:ed:f1:b8:e5:7b:a1:44:4d:f1:10:
3f:ab:52:71:c4:bf:63:50:04:b8:19:79:8f:be:c0:f2:54:8c:
82:26:71:89:43:97:ed:6e:bc:10:20:1d:4f:2b:05:b8:ae:df:
8f:23:ac:b9:fd:b0:eb:8a:71:fe:0f:c2:a5:1e:d0:b0:5b:01:
37:04:7f:7e:eb:09:bc:6c:9f:e7:48:18:1e:ff:97:8e:05:84:
08:08:66:34:8b:ff:75:0f:86:a7:80:a3:34:35:56:4d:00:c5:
ed:36:52:c8:0d:4a:74:61:0d:8d:24:28:63:49:e6:c8:29:03:
cb:2c:07:0b:f4:62:bc:48:7c:64:20:45:75:d1:6f:9d:91:97:
aa:b7:37:50:60:b3:85:25:21:22:7b:41:0b:50:33:5e:a8:f8:
22:0b:0d:0d:ce:41:11:13:15:2c:cd:6a:8a:71:b6:99:1f:1f:
26:4e:5b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:31:34 2026 by rpki-client