Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft
File: ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft (raw, json)
Hash identifier: yRp6eqUSu19HZnduh/sC/Ct6XgIo1K7IGfDCCM9l1FQ=
Subject key identifier: 4E:42:94:5A:3F:34:58:08:E8:15:E2:96:92:0F:7F:18:39:65:46:FC
Authority key identifier: 79:DF:50:E2:68:94:BB:0E:81:35:96:06:D8:2B:71:90:C1:75:98:CC
Certificate issuer: /CN=79df50e26894bb0e81359606d82b7190c17598cc
Certificate serial: 019CABA1C241756A99BF6B4FE229003A8D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 23:00:30 +0000
Manifest this update: Sun 01 Mar 2026 23:00:30 +0000
Manifest next update: Mon 02 Mar 2026 23:00:30 +0000
Files and hashes: 1: EhG-iYZNFoJEhs2X2OptzmxOfqw.roa (hash: aCu6x2h9aVNHZRLsGFz7tjoYTapCoh/tz4jAafHyEh0=)
2: ed9Q4miUuw6BNZYG2CtxkMF1mMw.crl (hash: s3LVfBHuXkR6r+acAaAgiyxJcsnMIg22fgbiU0dXC1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:c2:41:75:6a:99:bf:6b:4f:e2:29:00:3a:8d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79df50e26894bb0e81359606d82b7190c17598cc
Validity
Not Before: Mar 1 23:00:30 2026 GMT
Not After : Mar 2 23:00:30 2026 GMT
Subject: CN=4e42945a3f345808e815e296920f7f18396546fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e5:f5:d6:0e:4d:b4:79:ba:99:d0:1a:9a:6d:
19:db:68:63:2a:5f:90:84:f4:bf:f8:95:6c:f4:87:
67:63:c7:b8:4d:1b:8a:91:af:be:02:41:3b:66:9d:
50:80:22:89:7e:bc:07:25:3e:36:3f:02:9a:0f:40:
91:85:94:b7:8c:e5:8a:61:2f:c0:ff:b5:08:df:40:
33:f3:84:84:ce:81:1b:80:06:32:c7:b5:62:0b:c9:
7f:aa:ac:58:5d:a4:98:1e:f3:5c:d5:b4:ab:58:72:
01:e6:2b:87:3c:01:91:dc:99:b6:a4:53:36:52:07:
1f:83:ef:5f:6b:9b:96:1a:e5:c5:45:90:50:97:ec:
02:da:98:01:75:f2:2a:0c:e0:d0:d6:ee:30:6d:db:
24:2b:4e:f4:d1:87:65:8c:03:b1:40:d2:f5:60:96:
3c:76:76:ca:bf:4b:60:9d:5f:07:71:62:22:c6:09:
6c:3e:8e:8f:a7:7a:47:c8:ad:d3:22:68:cb:a0:ef:
d5:14:b6:63:17:73:4b:11:71:46:aa:b8:ff:34:1e:
1b:57:04:80:88:fa:a9:0f:39:d5:1c:d8:f1:19:56:
ba:84:8d:84:f0:20:02:c8:44:38:12:da:2f:39:ea:
1b:b0:40:b0:32:e0:c7:6f:5f:fb:6b:d5:d0:8d:69:
4f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:42:94:5A:3F:34:58:08:E8:15:E2:96:92:0F:7F:18:39:65:46:FC
X509v3 Authority Key Identifier:
keyid:79:DF:50:E2:68:94:BB:0E:81:35:96:06:D8:2B:71:90:C1:75:98:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:85:d8:4d:bb:16:32:22:f3:a2:bd:39:6f:fd:b1:90:fe:1f:
01:d7:de:b3:6e:01:9e:33:c3:ea:64:72:ef:96:27:82:d1:cb:
66:3b:82:08:22:81:34:95:41:c1:df:0c:b7:cb:83:66:e3:f0:
b6:15:5e:c2:0b:b6:5c:b7:04:f8:f3:20:95:9b:93:ca:2a:c8:
aa:22:f8:99:c0:55:e6:01:b7:f0:62:98:e3:71:56:2c:fe:c0:
b5:d9:31:89:cd:8e:e5:6b:c2:94:20:ca:d5:7c:77:99:99:cc:
6a:6a:6d:e3:6e:8e:38:f0:cc:c1:67:de:c6:c6:07:06:f8:11:
18:3a:93:0e:2f:34:5a:92:5f:bd:13:4f:74:64:4f:c0:10:96:
7c:60:77:03:c7:f5:02:94:c1:0e:40:85:f9:a5:e6:dc:f7:32:
9f:71:35:27:0c:87:35:12:1c:83:86:9e:79:c6:25:4d:c1:81:
be:d6:ab:4a:65:09:44:d4:a8:b5:2a:28:61:ca:f5:ea:5c:6f:
cb:37:70:b4:ab:f9:47:ff:7f:5d:6a:99:31:4c:8a:d6:88:5c:
47:64:62:c3:91:1a:e9:c9:a0:64:de:5c:4a:09:ff:32:16:4a:
4d:75:58:76:c4:63:6b:f6:4d:11:b2:7d:f0:c7:18:ae:15:b1:
46:7f:11:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:36 2026 by rpki-client