Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
File: ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft (raw, json)
Hash identifier: 0KkguSWqJSurmRLsDLTA+/kisruxZlmhyj/uKX8oF8s=
Subject key identifier: CB:28:F9:F8:B1:D9:3C:8D:18:A5:84:03:C0:6D:C9:2E:B3:B0:F3:C0
Authority key identifier: 10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
Certificate issuer: /CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Certificate serial: 019D9A749C3D0EA7BBA0A7BF4B31846E718B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
Manifest number: 099B
Signing time: Fri 17 Apr 2026 08:00:26 +0000
Manifest this update: Fri 17 Apr 2026 08:00:26 +0000
Manifest next update: Sat 18 Apr 2026 08:00:26 +0000
Files and hashes: 1: 7CSVGtYUX5r3HPpcYYedHjS20IQ.roa (hash: hzzOsdStylJXNXeCzZeL6+XDTe9J82yzkNqZCVPm+lM=)
2: ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl (hash: BEpILRHeHYXf88lnYV7PRX5sOtdQNW4U8uy+jh7/IGk=)
3: nQENJbRz1W0WhBM6EIeWbWaXGe0.roa (hash: XnC7G+pMyq9QIiJSY8PXtmwY2A35n+casWMMCOJ/vOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:9c:3d:0e:a7:bb:a0:a7:bf:4b:31:84:6e:71:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Validity
Not Before: Apr 17 08:00:26 2026 GMT
Not After : Apr 18 08:00:26 2026 GMT
Subject: CN=cb28f9f8b1d93c8d18a58403c06dc92eb3b0f3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cf:5e:59:b6:57:61:b2:c7:aa:6c:59:3f:5a:
fb:76:9b:29:0c:98:ae:bd:49:0d:03:19:a3:cd:cc:
f7:77:47:2d:2d:3e:88:94:d3:03:39:10:04:41:73:
82:d8:45:b2:33:e3:98:a5:18:7a:ec:4e:cc:cd:60:
44:d7:41:9f:51:cd:e7:42:a2:22:f4:ff:5a:ca:9e:
6a:80:ea:40:3a:27:cb:a8:85:ac:ec:bd:4c:fa:01:
93:7c:67:36:c1:d2:79:ad:f4:d0:9e:4e:44:f2:b4:
c0:5d:04:6d:6c:18:2f:48:f7:d2:22:9e:13:dd:22:
ac:02:7c:4a:1b:4f:cb:35:94:2e:99:c1:18:83:d0:
e3:6e:c9:48:b1:c1:95:17:a6:d1:c1:ec:b2:4b:7b:
e8:32:f5:8c:ae:25:be:2f:85:79:dd:1c:e1:e8:ba:
78:ae:43:81:63:69:e5:d5:e1:18:85:c1:69:04:a7:
b5:87:6b:f4:42:71:e4:e6:d2:f5:fe:54:ba:29:fc:
0c:03:b6:b4:42:2d:75:16:19:ab:de:e5:fc:f0:d5:
40:7c:ff:e4:66:cc:ea:b7:de:71:6b:5f:f9:b4:82:
74:cb:01:ee:84:43:21:c7:94:1e:bc:78:80:54:17:
4e:8c:ed:50:c6:d0:10:09:df:72:ec:f7:d8:6b:b3:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:28:F9:F8:B1:D9:3C:8D:18:A5:84:03:C0:6D:C9:2E:B3:B0:F3:C0
X509v3 Authority Key Identifier:
keyid:10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c0:78:3a:e5:2e:7a:2a:1a:66:56:fd:af:d6:84:f3:f6:44:
7d:8e:eb:80:54:fe:95:82:3e:fc:4f:5e:a3:2f:c7:a1:84:e8:
cb:5b:ce:62:47:e0:42:fe:f2:4d:6b:d7:dc:6b:47:e5:f8:e2:
8f:15:b0:0b:83:a4:69:1c:93:12:94:d9:6b:bb:76:30:2d:52:
22:68:48:7b:89:6a:c7:ed:c5:1d:d6:ae:c6:93:2a:82:51:94:
87:80:9c:7f:32:a4:84:54:7a:fe:75:e5:2a:66:02:9c:8e:a5:
6f:85:3e:87:6d:8f:41:35:cc:25:ff:22:27:76:8e:dc:79:16:
4f:1c:18:75:01:2b:52:b9:66:84:47:11:be:87:1f:b1:c0:a8:
78:4a:61:a6:ba:c2:80:87:e4:15:9c:fd:51:13:e6:87:92:44:
af:f1:89:f1:5e:8b:ab:65:58:1f:67:6e:c1:b8:a1:24:0b:46:
d6:56:a8:b3:db:2b:91:d1:f3:39:9e:87:a0:bf:a0:33:d3:18:
9c:90:cb:18:90:b2:e8:08:80:e3:9a:0a:be:65:95:a7:90:70:
13:ae:e8:8e:3b:c2:ae:9e:94:2c:46:74:aa:e5:2d:c1:4b:35:
15:1b:33:14:47:c2:d3:ca:c7:a0:41:7f:36:00:94:8a:13:4d:
1b:27:33:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:02:57 2026 by rpki-client