Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
File: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft (raw, json)
Hash identifier: qXjtO0dVOu1isuad8cadCEXp3pjgErOdUwfyexnnH8M=
Subject key identifier: 43:65:C8:A7:D8:65:7C:0E:37:7C:88:F4:57:17:A8:F7:EB:58:57:AE
Authority key identifier: 10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
Certificate issuer: /CN=10515090f850e337eb3b118a157e4e39083b77a6
Certificate serial: 019CAC474308D228877415D911888904EBE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 02:01:17 +0000
Manifest this update: Mon 02 Mar 2026 02:01:17 +0000
Manifest next update: Tue 03 Mar 2026 02:01:17 +0000
Files and hashes: 1: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl (hash: gq0DvLZAsMssOQYrSY6z4eDwWC57wBOBFWU2EW512fQ=)
2: kKlXzTXjueD4aV2RPewpgcu-BS4.roa (hash: o9M2DvXmpV9HLolJqNlhrCOdw2MyjQNTI+g5HIxVra0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:43:08:d2:28:87:74:15:d9:11:88:89:04:eb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10515090f850e337eb3b118a157e4e39083b77a6
Validity
Not Before: Mar 2 02:01:17 2026 GMT
Not After : Mar 3 02:01:17 2026 GMT
Subject: CN=4365c8a7d8657c0e377c88f45717a8f7eb5857ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:21:93:c4:63:20:b7:08:79:6b:80:0b:b9:cb:
32:85:9e:83:cd:23:97:b6:cb:78:60:05:23:02:3d:
b4:1e:b6:cf:c4:a3:e7:b3:49:77:15:50:bb:1e:7d:
d5:47:cd:9c:7c:54:62:f8:a9:72:63:e4:0a:e3:d6:
b0:42:f4:73:4f:4b:80:e3:bc:fa:c4:45:0d:fa:9f:
a9:9b:1b:46:78:26:13:b4:29:c9:7d:fe:8a:3e:c0:
cc:46:1a:67:9f:50:bc:33:4c:a8:2e:9c:ec:0d:dd:
50:15:f1:79:3d:b8:37:13:c3:4d:46:aa:82:9e:9e:
79:67:22:22:f0:4f:6c:84:a6:2a:80:fe:f0:88:63:
89:96:e1:23:64:2c:46:b4:e8:54:1c:53:5f:92:28:
83:cb:66:7a:91:29:9d:29:ee:fd:75:63:8d:cd:47:
f8:99:6c:4e:c1:ab:2b:90:a0:f7:4c:a9:41:a9:79:
f5:41:a3:62:0a:d7:05:aa:c2:bb:f3:52:89:d9:76:
88:c4:94:81:e8:bf:35:b3:e5:1f:a0:8c:5d:67:1b:
94:b0:4d:b7:15:f1:22:86:f1:3b:25:26:bc:5b:cc:
e8:87:77:07:6f:26:e6:f5:ce:b8:0a:60:2e:70:05:
9c:dc:76:59:c7:99:a8:cd:3d:02:7b:9f:d3:71:dd:
df:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:65:C8:A7:D8:65:7C:0E:37:7C:88:F4:57:17:A8:F7:EB:58:57:AE
X509v3 Authority Key Identifier:
keyid:10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f3:22:4f:bb:ba:91:ce:b9:e8:65:f7:86:2a:4a:45:b5:46:
29:00:7b:61:70:0e:c1:da:ed:26:17:01:59:1f:e6:b8:6c:ce:
1e:00:69:50:e6:fb:de:74:28:20:e7:c8:9b:7d:7f:bf:f1:52:
87:17:b6:58:30:62:ab:9e:f0:a4:52:a0:3d:85:d1:f1:66:af:
34:02:c9:63:a8:42:69:db:ed:28:dc:da:3a:49:b8:31:82:ff:
9a:0e:80:71:45:55:4a:51:a3:df:88:a9:37:73:97:c7:50:70:
3a:b1:ef:b7:4a:bd:47:af:c9:a1:da:88:b9:7c:73:14:f7:cd:
21:1a:97:d8:90:76:69:b7:ac:7d:46:c9:56:0f:c3:9d:14:93:
ca:4c:32:d8:41:c3:74:b7:8b:e1:f8:bc:eb:aa:1e:c2:f1:6a:
89:2a:84:4a:96:d1:f2:3d:97:50:8a:ed:c3:18:7d:3d:f5:2b:
60:cf:f2:a8:24:35:e6:75:ea:6a:7f:2b:2c:86:a6:29:12:de:
0b:4c:d8:c4:cc:8f:54:90:b7:8f:0a:17:18:b7:a2:c3:6e:00:
d8:2d:87:04:2c:41:64:54:fb:47:97:94:2f:fe:c9:f0:ea:ac:
f3:05:62:0d:55:d0:8f:f3:64:92:56:8e:82:5d:83:e7:e6:6e:
22:23:f9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:45 2026 by rpki-client