Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
File: ekQ0Re8M2qdnJh9OCxILvj_OByc.mft (raw, json)
Hash identifier: LRj7geleMg4aR7B4GqiikzGLRwlgegjY0vbcZkBaDME=
Subject key identifier: FD:46:44:6F:AA:82:FB:0A:58:BD:5C:CF:7E:37:6F:4B:A1:10:80:E1
Authority key identifier: 7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
Certificate issuer: /CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Certificate serial: 019CAD59AD353664BB88F62400877DA326C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 07:01:01 +0000
Manifest this update: Mon 02 Mar 2026 07:01:01 +0000
Manifest next update: Tue 03 Mar 2026 07:01:01 +0000
Files and hashes: 1: ekQ0Re8M2qdnJh9OCxILvj_OByc.crl (hash: +v+6MZ+2FAIlFonxjZ8YGPOD9VDABUSO4IW24PeiuiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:ad:35:36:64:bb:88:f6:24:00:87:7d:a3:26:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Validity
Not Before: Mar 2 07:01:01 2026 GMT
Not After : Mar 3 07:01:01 2026 GMT
Subject: CN=fd46446faa82fb0a58bd5ccf7e376f4ba11080e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:97:68:b9:ef:01:eb:3e:7f:c4:99:86:48:26:
d7:35:31:09:d2:84:45:62:75:88:31:50:73:9c:da:
53:30:f2:0c:1e:35:83:31:02:84:9b:5c:63:2c:5b:
02:65:c9:e5:8d:c3:86:52:26:21:d2:da:d2:4c:9a:
29:fd:50:9a:26:bf:81:86:2e:ef:7d:a5:46:35:f8:
9e:c7:da:b4:21:a5:2e:b1:a6:31:f6:63:b1:4f:42:
ee:90:8c:3c:8f:45:4a:34:73:4b:15:20:a0:89:d0:
0b:02:63:ae:19:47:30:77:11:47:08:d9:e7:ef:a7:
73:63:aa:ba:b1:c7:65:56:e4:0f:6c:c4:13:36:7b:
b6:1f:25:c1:50:e2:a6:05:c4:78:f1:f1:40:a0:56:
f0:7d:16:bc:22:4f:82:47:8d:62:43:84:bc:22:0a:
51:bf:e0:ad:48:0b:58:1a:76:29:bd:f2:ef:dd:49:
ce:50:cf:1f:e8:0d:f7:5a:9a:ff:88:d2:38:89:de:
f1:c9:12:df:bb:63:c5:d5:71:38:8e:ea:2b:31:e7:
90:cd:a8:4c:eb:e2:db:25:18:ef:27:5e:79:7b:95:
c5:4d:02:33:8c:a1:d4:09:f1:84:a4:cc:66:a3:f0:
71:8d:42:19:0f:14:01:04:a4:fc:2f:c7:ea:02:a6:
32:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:46:44:6F:AA:82:FB:0A:58:BD:5C:CF:7E:37:6F:4B:A1:10:80:E1
X509v3 Authority Key Identifier:
keyid:7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:a1:db:bb:a3:3b:73:1d:ea:b9:6d:84:3f:e3:49:c3:44:72:
c1:b9:a4:d6:36:90:cc:dd:96:8a:9e:27:f1:c7:50:b8:a8:e6:
2a:6e:79:93:e2:ee:e3:46:0b:70:de:55:5a:97:48:ce:82:94:
0d:fa:cc:95:79:ab:24:a9:35:9f:4b:49:c5:68:ee:98:17:38:
0d:da:03:f4:55:c2:2d:0a:f1:82:71:6a:ba:af:39:fe:97:7c:
cf:ab:85:c4:60:d6:3a:67:32:17:25:98:e1:87:6e:fd:df:6a:
2a:56:58:bb:22:9b:bc:29:59:b1:1c:f2:fc:31:8a:54:be:18:
01:7e:df:68:46:d8:6d:6b:0e:d2:fc:57:f2:2d:b8:a6:bd:a2:
e8:00:9f:c4:6b:45:57:9e:cd:e1:f5:fe:84:14:13:ad:ba:ac:
82:78:59:43:19:24:41:b0:e5:bf:9d:5f:dd:9d:ae:ab:fa:77:
2b:86:75:d9:c8:39:20:91:3d:be:a0:47:26:54:8b:0c:9d:c6:
47:47:f9:fa:ef:84:5f:a7:56:be:ff:91:be:9f:ac:7c:c1:75:
8e:ed:d3:06:cb:f1:ea:22:4d:e9:12:54:b0:61:28:3f:dc:be:
00:b9:07:7b:63:f5:c9:3f:dc:58:25:33:da:d7:27:13:a1:84:
26:61:92:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:40 2026 by rpki-client