Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft
File: ElaCoB4i5CM4yoXHJVubP54q6jA.mft (raw, json)
Hash identifier: QoS/3Bg3jsE3IQ9RQ5rWVWba7xgIoVWsDJzMnyo9ius=
Subject key identifier: 03:78:7F:E5:76:B3:8B:8A:7D:C5:E5:AC:62:B4:8C:F6:A4:1D:CE:C9
Authority key identifier: 12:56:82:A0:1E:22:E4:23:38:CA:85:C7:25:5B:9B:3F:9E:2A:EA:30
Certificate issuer: /CN=125682a01e22e42338ca85c7255b9b3f9e2aea30
Certificate serial: 019D9B50E31AA161C42EDBFDAEE0165C3773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft
Manifest number: 06F8
Signing time: Fri 17 Apr 2026 12:01:02 +0000
Manifest this update: Fri 17 Apr 2026 12:01:02 +0000
Manifest next update: Sat 18 Apr 2026 12:01:02 +0000
Files and hashes: 1: ElaCoB4i5CM4yoXHJVubP54q6jA.crl (hash: Wih+ID9Ff4RyGW2mg9lx91LUF8PHhVqtyyJIDvb18U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:e3:1a:a1:61:c4:2e:db:fd:ae:e0:16:5c:37:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125682a01e22e42338ca85c7255b9b3f9e2aea30
Validity
Not Before: Apr 17 12:01:02 2026 GMT
Not After : Apr 18 12:01:02 2026 GMT
Subject: CN=03787fe576b38b8a7dc5e5ac62b48cf6a41dcec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:bb:b2:3d:65:2b:cf:c1:0a:86:f9:63:0f:a3:
61:7f:e4:df:90:36:bc:28:57:08:e4:83:ee:34:8b:
48:5f:e4:1e:d9:40:3e:c3:ca:72:78:42:90:b9:1c:
29:e7:f6:ff:d3:ee:ce:44:50:74:72:99:9f:e1:bd:
a2:bb:a3:42:98:04:d9:e5:bc:dd:fa:61:dc:d8:1a:
07:bd:a4:88:51:2d:6d:7f:31:a2:82:a7:45:96:91:
fb:5e:13:be:1c:15:79:89:5c:e3:fa:48:ea:78:bf:
3e:a7:8e:be:1c:de:15:b1:24:e3:b6:ca:4a:0b:a5:
f9:12:18:6d:37:1a:41:e6:66:81:be:4d:68:d2:cc:
1b:7d:57:12:95:72:03:ed:18:c8:e2:ee:82:23:c4:
80:6b:fb:9c:aa:19:4f:dc:b9:66:41:8f:62:79:9c:
e2:11:66:5b:0c:c1:71:1f:bd:cf:f0:a3:e6:65:80:
24:54:44:a9:c5:49:27:59:5d:68:2f:5a:06:9b:21:
85:91:87:f1:15:a9:29:bf:c6:42:66:58:17:a8:2c:
55:b3:ed:92:60:ac:bd:c5:e4:d9:77:93:8a:17:5c:
97:cc:df:43:9c:af:e1:c5:5f:19:cc:a0:1c:d3:d1:
da:f9:48:78:0a:51:fc:b2:36:fe:ff:42:21:90:48:
91:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:78:7F:E5:76:B3:8B:8A:7D:C5:E5:AC:62:B4:8C:F6:A4:1D:CE:C9
X509v3 Authority Key Identifier:
keyid:12:56:82:A0:1E:22:E4:23:38:CA:85:C7:25:5B:9B:3F:9E:2A:EA:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:09:e1:c8:ef:2c:32:9c:0c:31:f1:b5:32:9a:67:68:92:d5:
3d:45:88:ca:a3:2f:65:24:13:26:6d:ad:08:b1:95:28:ff:ed:
75:4b:da:0c:4f:37:7d:98:d8:df:fa:25:5d:82:d3:89:83:0e:
fb:3a:34:8c:7d:4d:84:f5:36:bb:54:16:a1:8d:40:a7:ab:f0:
0f:67:15:6c:97:f6:45:f5:e9:77:d9:f9:a4:83:d8:bb:8f:13:
54:15:54:bd:cc:ef:75:b1:e0:7a:3d:05:6e:43:3e:c8:3d:f2:
db:ff:68:7c:66:30:8f:37:79:2b:fa:6e:24:e4:85:5d:32:fd:
02:f0:69:b6:d5:3f:c9:fd:be:a1:b8:23:a7:d7:7b:6b:ec:59:
a5:06:3c:1c:10:52:e6:7d:c4:3e:db:e6:2c:0d:39:4a:1d:1d:
0d:3b:a6:cb:1f:76:2b:51:f7:d1:0f:16:cc:ef:a6:b1:c2:1f:
f7:5d:db:a8:78:d2:76:f0:45:b8:56:23:f4:f4:7b:87:39:2a:
4f:24:fd:6e:41:2b:25:e7:35:b1:45:57:89:e9:08:6d:51:d6:
af:db:b7:53:e9:e2:db:54:65:a5:03:5b:61:c7:f9:11:8b:ea:
c5:f2:41:4b:3a:e6:c4:a7:87:8c:a8:a4:7c:c0:ad:41:c3:77:
9c:b2:0f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:37 2026 by rpki-client