Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
File: edFXhuZE1JfLeisyU71D2S5Jxas.mft (raw, json)
Hash identifier: UOa683SXd5Axw0V6EjuiXj5Yp1DXtwUz4Aft2y0csxg=
Subject key identifier: 94:57:2D:7F:EC:92:FE:1F:F6:EF:01:77:4D:A2:8F:1D:DE:48:8E:69
Authority key identifier: 79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB
Certificate issuer: /CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
Certificate serial: 019CAE6BEE6DCCD8CA5B754FFEADEA49BC72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 12:00:34 +0000
Manifest this update: Mon 02 Mar 2026 12:00:34 +0000
Manifest next update: Tue 03 Mar 2026 12:00:34 +0000
Files and hashes: 1: 1oQnHtziYZUN1dZc7QkQQyuqMPE.roa (hash: j6nJzk5ZsSd6XpFmMvEADhEDlPdaRY5G9ebbRW3253M=)
2: edFXhuZE1JfLeisyU71D2S5Jxas.crl (hash: QOuQPJpuejaGW2cwQKqR3M+1F2N0ijxD5slKM1uLdQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:ee:6d:cc:d8:ca:5b:75:4f:fe:ad:ea:49:bc:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
Validity
Not Before: Mar 2 12:00:34 2026 GMT
Not After : Mar 3 12:00:34 2026 GMT
Subject: CN=94572d7fec92fe1ff6ef01774da28f1dde488e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:29:3a:8c:76:60:ca:87:e1:b4:7b:21:90:6c:
99:5a:78:36:39:75:33:8f:08:8e:a5:c1:62:0b:ed:
dc:de:55:e3:37:9e:73:4c:86:e4:d9:65:72:eb:34:
11:67:7f:82:b6:ac:47:f2:f5:02:f0:92:a1:e6:af:
d6:3d:49:9d:d2:38:a3:23:40:6e:1b:dc:44:f9:cb:
39:81:59:ca:1e:7b:d0:f6:ab:81:d7:59:59:eb:13:
37:ea:3b:d4:cd:67:f3:a4:2e:74:ca:c3:e6:65:6e:
66:e6:38:2a:4f:28:77:e3:76:f3:22:a5:0b:31:ea:
7a:b7:79:f1:1f:90:62:ab:21:83:b3:b8:b8:fe:54:
01:4c:d8:a6:94:d9:da:1b:bd:26:54:e9:26:7c:84:
37:63:a5:e1:10:25:9f:b9:91:cd:40:36:2c:2e:06:
43:bc:05:9d:68:01:f0:5e:d8:f1:3a:b3:c4:87:4d:
86:03:3f:17:c4:d4:0f:77:18:73:88:cf:3e:13:b9:
d2:79:eb:96:e9:cc:d8:8c:a7:8b:33:9f:4c:65:a3:
54:04:95:1e:92:8f:47:ed:00:ab:12:9a:b0:bc:df:
df:22:ea:20:38:a9:56:18:e6:79:26:d5:73:75:23:
92:7b:af:9e:85:bb:9a:a1:60:fc:9e:45:75:27:ce:
d6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:57:2D:7F:EC:92:FE:1F:F6:EF:01:77:4D:A2:8F:1D:DE:48:8E:69
X509v3 Authority Key Identifier:
keyid:79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e4:92:b0:fa:45:f1:0b:5e:98:36:03:d0:f0:89:af:c2:1f:
8d:07:40:92:cf:75:d3:6e:71:26:c9:f5:92:06:da:3c:6c:b0:
19:1d:82:20:6e:3c:de:cd:e2:2d:73:04:06:c6:4d:e8:cd:42:
85:83:44:19:ce:42:e1:e6:ac:96:4d:c2:2c:2f:96:63:07:e7:
b5:a2:20:ba:55:2f:53:98:4a:a3:de:0b:29:fb:b2:f9:57:a0:
e4:ed:db:9d:12:02:87:cd:20:5e:24:76:17:15:84:f1:10:af:
cb:a4:64:61:d5:9d:3d:fb:b0:4e:dc:17:f0:33:3a:7d:1b:f7:
d5:3b:a8:65:87:4c:ef:2c:fb:56:42:a5:63:d4:9e:e2:7a:14:
67:99:78:7a:2a:13:72:41:63:32:0c:93:e5:55:a0:58:dd:c9:
e4:bf:f4:db:5a:fe:b9:4c:67:3a:86:2c:ee:06:6c:eb:89:05:
54:55:2d:20:12:03:3d:fe:d2:93:c6:24:e2:a5:da:95:91:81:
88:2d:55:29:c1:a4:2e:1c:f7:f0:1b:e0:7f:2d:0c:55:0f:53:
18:45:d1:6b:00:0e:d8:25:10:4a:24:9b:e6:22:39:1f:36:33:
99:46:f8:1c:05:31:f8:19:23:ed:fe:0a:64:5b:49:0c:97:00:
bb:63:1b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:25:11 2026 by rpki-client