Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
File: EdGfiLDcG4kCVNuUqbYgRta-eUs.mft (raw, json)
Hash identifier: ApvOhhFL8AWYYThTX1FCaW9cQIhBMq6LqRum5DHxneM=
Subject key identifier: 32:BD:D6:C9:94:E8:12:C3:1C:5A:2C:76:7D:5B:DD:0A:7E:C9:89:C0
Authority key identifier: 11:D1:9F:88:B0:DC:1B:89:02:54:DB:94:A9:B6:20:46:D6:BE:79:4B
Certificate issuer: /CN=11d19f88b0dc1b890254db94a9b62046d6be794b
Certificate serial: 019CAA21F5566F6E11CB37C0113AD0269287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
Manifest number: 0D92
Signing time: Sun 01 Mar 2026 16:01:18 +0000
Manifest this update: Sun 01 Mar 2026 16:01:18 +0000
Manifest next update: Mon 02 Mar 2026 16:01:18 +0000
Files and hashes: 1: EdGfiLDcG4kCVNuUqbYgRta-eUs.crl (hash: aS02aXx4mPg+4dthFQfGuLSDbxYQB6tnxCmhRdwN+5o=)
2: YLaRX-nsqRWCtPec2Dv5Q_k5OhQ.roa (hash: 5033rgrhup6n7WpdXD6+8ygWTQrZT3eRPIezPH3qoAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:f5:56:6f:6e:11:cb:37:c0:11:3a:d0:26:92:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d19f88b0dc1b890254db94a9b62046d6be794b
Validity
Not Before: Mar 1 16:01:18 2026 GMT
Not After : Mar 2 16:01:18 2026 GMT
Subject: CN=32bdd6c994e812c31c5a2c767d5bdd0a7ec989c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ef:9c:79:c0:27:93:78:6b:a1:bb:d2:5d:d5:
9a:0f:49:fb:e3:3f:39:ea:86:89:1c:38:27:02:3f:
98:2b:49:12:69:8a:7b:6a:9b:cf:cd:08:b7:73:a5:
1e:b4:9a:1d:90:76:28:df:45:1d:83:e8:57:1e:aa:
0c:6a:dc:11:1f:13:30:94:c8:cd:ca:a6:eb:aa:84:
b4:8e:e0:7c:78:0f:d9:11:13:39:07:a5:06:2f:1c:
5d:64:56:9b:62:18:a3:93:31:7d:61:28:c2:1e:e6:
03:91:05:5a:87:c1:44:12:67:88:25:3c:36:14:04:
70:6f:33:fd:a2:71:04:55:04:c2:72:d4:38:fb:bc:
51:64:19:01:03:36:aa:0a:2d:19:48:3e:6f:c0:2e:
94:84:ba:1a:ed:2b:5e:af:a4:54:41:9a:ba:0c:ab:
44:3e:ea:7f:39:76:94:43:e0:83:e9:ac:47:f7:be:
1f:42:e7:f6:84:f4:14:a4:2a:af:7e:c7:eb:8d:f9:
0f:09:46:02:9f:62:85:21:39:28:68:3b:70:b2:74:
fe:44:e4:8e:1d:98:4c:8e:03:e2:06:0d:3c:bb:35:
5d:14:6e:1d:8e:34:3a:d4:27:ad:86:be:32:d2:a5:
8f:7a:12:a5:33:bb:31:ec:79:f6:56:69:a5:f1:7e:
23:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BD:D6:C9:94:E8:12:C3:1C:5A:2C:76:7D:5B:DD:0A:7E:C9:89:C0
X509v3 Authority Key Identifier:
keyid:11:D1:9F:88:B0:DC:1B:89:02:54:DB:94:A9:B6:20:46:D6:BE:79:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ea:d7:8a:b2:09:7a:fd:47:2d:a5:ba:08:5e:4f:fe:63:11:
6d:cb:32:72:a8:86:b8:8a:e9:41:1e:e3:5b:3f:c9:22:dc:8d:
ac:c6:2b:61:87:b3:91:90:2b:fe:4f:84:a1:c4:0d:d1:fd:96:
64:aa:e2:c7:a6:66:8c:a1:9d:83:93:f3:eb:4b:82:94:94:bb:
2f:e4:62:3a:97:8f:6f:4f:95:d2:0e:ba:0c:9f:7b:a0:f7:e2:
35:c4:4a:67:f2:4f:d7:de:9f:30:31:54:16:eb:ac:84:ed:2d:
0a:46:0f:1a:a2:cd:ea:49:63:9f:7e:96:47:5b:74:1e:c4:f2:
b9:1a:00:b7:73:0d:56:97:e6:7f:23:1b:9c:01:d7:be:70:f5:
47:25:cc:5b:5a:b7:11:3b:95:04:3c:fc:66:ca:a6:4b:94:66:
4f:10:35:8a:fc:76:15:9e:93:97:b0:bd:71:77:d0:3d:a9:7a:
11:13:38:2b:fe:e5:e4:06:b3:6b:8d:dd:d9:f6:00:4a:29:31:
00:70:83:a1:51:dd:39:8c:fc:e3:69:ff:c0:28:95:aa:76:bf:
ca:12:9f:68:20:39:b1:5d:19:e7:f7:73:aa:6d:0d:ee:df:04:
3c:c2:88:48:b1:9a:1a:77:e6:93:75:53:8f:78:21:17:e1:32:
5c:8b:38:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:42 2026 by rpki-client