Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
File: ENJnhg06QDsA4aYcVDSs_265c5Q.mft (raw, json)
Hash identifier: Uuam2zq7lH0vY1ZMON4l6WrerJQ616/I98E2rjYuG/U=
Subject key identifier: A5:C8:CC:CE:6B:CC:4E:4E:1B:A5:FD:8C:03:EA:7B:3C:9F:E9:24:E4
Authority key identifier: 10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94
Certificate issuer: /CN=10d267860d3a403b00e1a61c5434acff6eb97394
Certificate serial: 019CAB3447926CB96E474CD307F9F18A0A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
Manifest number: 17D9
Signing time: Sun 01 Mar 2026 21:00:55 +0000
Manifest this update: Sun 01 Mar 2026 21:00:55 +0000
Manifest next update: Mon 02 Mar 2026 21:00:55 +0000
Files and hashes: 1: 8AFAw8J8BylZNxkuCYZxLwFMDu4.roa (hash: rqqV4vNuT7ox7Umt3jz1Rj0aoR+gnpbzztReONXP05Y=)
2: ENJnhg06QDsA4aYcVDSs_265c5Q.crl (hash: fMnF7H+/0EyCSR+kiulAh+yUPTxLGi9SLo6kxwLSywo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:47:92:6c:b9:6e:47:4c:d3:07:f9:f1:8a:0a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d267860d3a403b00e1a61c5434acff6eb97394
Validity
Not Before: Mar 1 21:00:55 2026 GMT
Not After : Mar 2 21:00:55 2026 GMT
Subject: CN=a5c8ccce6bcc4e4e1ba5fd8c03ea7b3c9fe924e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2c:58:2f:51:d4:07:f5:cc:3b:b7:9f:81:25:
5e:f1:84:0d:d6:da:19:8e:d0:24:a7:aa:25:b0:f1:
3b:e1:49:6e:14:84:71:07:82:c7:53:2b:36:04:92:
b8:3c:4a:1f:db:20:d9:a0:9f:55:38:30:b8:50:2d:
c1:72:05:7e:a1:03:88:4b:27:44:27:38:72:81:44:
0f:2c:67:36:d7:9e:75:02:8c:8b:a9:00:f6:14:a9:
c4:4b:33:dd:88:5c:89:67:a8:48:4c:ee:9e:13:9e:
58:eb:72:4c:9e:71:8c:ee:80:98:1b:53:a2:e5:36:
e9:74:59:c0:44:3f:98:10:ee:83:42:b2:c5:6e:10:
b0:2d:1f:b8:0c:bb:76:48:b8:1f:8b:8e:c3:72:39:
97:b5:77:3f:70:7e:4e:7f:84:8e:49:cd:7e:9e:51:
17:f2:07:a9:9e:0f:17:67:9f:8e:66:e2:ce:10:bc:
2f:2b:cf:8e:96:54:f9:cc:7c:f6:de:af:8e:73:00:
f5:b9:6d:00:b5:35:2e:c4:1c:09:5f:19:41:77:78:
88:0d:66:ce:38:b5:c7:1f:3b:93:83:8e:4a:10:df:
43:3a:4e:af:c7:6a:57:87:23:20:ca:89:c9:00:7b:
51:21:36:d1:1d:22:ae:32:73:bc:3d:3a:5f:39:65:
9c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C8:CC:CE:6B:CC:4E:4E:1B:A5:FD:8C:03:EA:7B:3C:9F:E9:24:E4
X509v3 Authority Key Identifier:
keyid:10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0f:f2:dd:49:66:a9:65:0e:42:55:97:97:0d:82:29:bb:5d:
d0:9d:12:8a:3c:5d:2e:c8:2d:d9:7f:87:65:90:22:0d:a1:8c:
91:6f:f8:3a:a4:e5:c6:99:66:b6:e1:90:13:a0:5b:c0:d2:b6:
c6:03:a0:3a:9e:5e:ba:3c:ac:3a:b3:16:91:85:fd:b7:88:17:
0e:17:84:cf:0e:c8:ec:6c:c2:88:24:2e:28:33:56:87:cf:f4:
fb:a6:a5:3b:8e:9e:be:b6:73:40:8b:9c:d3:68:cb:29:e5:87:
24:12:1a:cb:6d:e9:94:fb:03:e6:9a:7f:1b:e3:9c:6d:f9:b3:
48:b7:ac:26:bb:c2:39:c7:65:8f:fc:2f:24:37:b1:bb:ec:df:
26:b9:6d:70:b2:9e:ba:ca:12:4e:43:b0:15:de:dc:88:cf:2b:
e5:84:f2:98:2c:84:de:0c:f2:91:e7:bb:6f:b5:86:80:c7:72:
23:a6:e8:a1:44:67:f6:64:16:c6:99:04:a6:9d:d6:ea:ca:a3:
25:c8:1f:4a:ed:71:d7:48:91:9e:eb:a1:23:f0:8f:6c:00:bd:
66:49:2b:bc:d1:e8:51:f3:2f:4b:16:56:e2:fc:12:4c:b2:e1:
f2:05:97:e7:ef:09:eb:cf:cb:27:6a:67:1f:17:38:89:3d:41:
ac:a1:1c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:41:03 2026 by rpki-client