Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
File: EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft (raw, json)
Hash identifier: DKsWjERixM6OerK8iS2Ag24bGN0Uhmq3WCYPVMFAe1Y=
Subject key identifier: BB:89:53:A0:72:67:82:6D:30:4A:17:3F:8D:E8:A3:00:E7:1E:A3:77
Authority key identifier: 10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93
Certificate issuer: /CN=1038d7a2954a32d2afd16b88b363b390681cd593
Certificate serial: 01A001018A16842E9F72D7C7ED42EC03F900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
Manifest number: 12D3
Signing time: Fri 14 Aug 2026 16:01:13 +0000
Manifest this update: Fri 14 Aug 2026 16:01:13 +0000
Manifest next update: Sat 15 Aug 2026 16:01:13 +0000
Files and hashes: 1: EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl (hash: PBIJv6kozRshNG6OXMNxCwVRjOwlEmKBb+fEB6kMMWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:8a:16:84:2e:9f:72:d7:c7:ed:42:ec:03:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1038d7a2954a32d2afd16b88b363b390681cd593
Validity
Not Before: Aug 14 16:01:13 2026 GMT
Not After : Aug 15 16:01:13 2026 GMT
Subject: CN=bb8953a07267826d304a173f8de8a300e71ea377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6f:dc:98:29:a7:ef:03:d3:ed:0f:24:78:75:
a7:2d:a7:c3:b5:0f:f3:4d:50:89:6c:ab:2e:d9:c3:
09:b3:20:c2:20:b1:71:70:0b:d3:18:18:15:44:d1:
24:8a:24:74:f8:7c:67:6c:f2:50:39:d6:de:ab:e3:
8f:8a:95:3c:c1:20:f0:b8:5a:3e:a8:34:ee:88:3e:
a8:63:50:76:59:8c:14:d1:e8:52:86:98:18:03:51:
a0:0e:ad:99:bc:29:9d:cc:b3:57:bc:85:b5:46:7a:
c4:dc:8d:33:22:1b:61:eb:8e:92:e8:b0:cb:d2:3a:
d1:a7:6c:99:a4:dd:ff:af:00:2d:b7:04:76:f1:3d:
8d:8e:59:f0:6d:5f:cb:d5:2c:08:c3:c2:73:27:bd:
c4:c7:cd:48:3f:69:61:0f:b6:9c:3e:39:63:98:ea:
15:8d:68:5a:43:ab:b8:2d:8d:48:55:1f:2a:2b:b2:
19:2b:27:5c:41:7f:bc:37:96:e1:79:ac:b5:01:22:
e3:c0:c6:b5:35:f1:6f:29:41:be:d3:8f:63:10:09:
7f:63:9b:57:e3:20:9e:ca:01:36:aa:f9:fe:8b:7c:
0c:6c:a4:d2:54:c9:a3:67:de:40:ca:57:75:4c:66:
3e:4e:36:0e:87:69:e0:97:48:05:37:61:65:10:d6:
3a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:89:53:A0:72:67:82:6D:30:4A:17:3F:8D:E8:A3:00:E7:1E:A3:77
X509v3 Authority Key Identifier:
keyid:10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:09:91:f1:c4:b2:d3:80:4e:38:10:c4:d2:4f:74:c4:f2:02:
a1:36:90:54:49:3e:81:4c:db:c3:cc:97:76:ca:79:d4:df:a2:
ae:a3:f9:73:91:35:e6:1a:e8:d5:d8:22:23:c2:61:55:29:b0:
73:a8:78:5a:31:6b:8c:76:4d:c5:e2:ac:52:d7:17:d4:9c:be:
04:5b:ad:c3:62:03:1e:34:dc:95:99:7e:23:7e:82:4b:d8:95:
f0:be:3f:ce:e2:db:37:e4:b2:cb:d1:58:67:7f:28:46:84:92:
a6:4b:e4:34:34:d5:6d:27:4f:ab:c9:75:c4:83:ad:16:3c:a2:
87:ed:2a:94:6d:f0:6b:3c:ba:21:1f:06:19:a6:33:5c:36:f5:
e9:ca:4c:44:a9:d1:86:58:cb:58:9b:47:b8:3c:8d:29:5a:52:
67:40:1e:3d:4a:43:e0:2f:e2:d1:74:8c:aa:55:41:30:99:b6:
88:bb:8c:dd:8b:de:34:d6:33:e4:d3:e8:b6:8e:8b:9e:f3:76:
67:76:f9:d1:13:fa:a7:6f:f4:33:2a:bc:20:4b:ac:4d:d1:e5:
ac:d6:a6:70:f3:40:cb:e5:77:d8:c3:47:4f:58:e9:a8:6b:26:
31:dc:2b:82:78:a5:14:36:39:d9:3e:65:d9:8b:51:77:3e:b0:
98:ce:8f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:25 2026 by rpki-client