Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
File: ENSbc8raAe6FGBLsRAt6HsmGSLM.mft (raw, json)
Hash identifier: tDAZYfoqCasrQ391pRZ8WgWqgWgD4eaMrTcKbo5+WfI=
Subject key identifier: E8:51:DC:88:AE:DD:E1:03:F2:2F:BA:39:3E:F6:8B:0F:4C:14:55:41
Authority key identifier: 10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3
Certificate issuer: /CN=10d49b73cada01ee851812ec440b7a1ec98648b3
Certificate serial: 019CAAFD248905D59AA4F386D0ADF5E631E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 20:00:42 +0000
Manifest this update: Sun 01 Mar 2026 20:00:42 +0000
Manifest next update: Mon 02 Mar 2026 20:00:42 +0000
Files and hashes: 1: ENSbc8raAe6FGBLsRAt6HsmGSLM.crl (hash: NhhyNgbaOdhVP4Wj+OMMbH8sUHcUDMevm2nVrcwzwr4=)
2: eSrmop84goo0iEWfYlqPX_ANRJ0.roa (hash: ztPjyknlOnXPUcaGUj1KAhGBxdHzv46hT4CpZXwcNUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:24:89:05:d5:9a:a4:f3:86:d0:ad:f5:e6:31:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d49b73cada01ee851812ec440b7a1ec98648b3
Validity
Not Before: Mar 1 20:00:42 2026 GMT
Not After : Mar 2 20:00:42 2026 GMT
Subject: CN=e851dc88aedde103f22fba393ef68b0f4c145541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:02:86:cf:37:02:99:4e:43:3b:3a:f3:40:
e0:5e:be:29:74:04:e4:09:c7:b6:b4:fe:a7:a2:92:
7c:80:44:a7:9f:b2:66:20:27:10:05:6a:dd:f5:66:
78:0e:75:47:35:2c:74:57:13:20:42:57:7f:be:15:
3c:ff:8a:ce:85:03:ab:36:23:d8:2a:ee:92:16:4d:
26:65:84:03:c6:ba:43:46:88:40:88:5d:3d:95:47:
37:66:99:3a:e0:eb:71:f1:88:2a:88:ed:16:b0:58:
ad:3e:35:b9:82:e1:e2:3c:ef:9e:72:f3:29:aa:b1:
b0:18:9f:7a:c1:9a:3a:37:45:d7:b0:52:af:ef:a3:
27:0e:d3:9c:63:f0:df:a6:2f:5a:9b:68:6f:fc:1f:
c3:55:2b:0e:f8:77:74:9a:eb:8f:6c:f7:9c:c1:78:
29:fd:51:38:c8:f8:c9:9f:8f:76:89:84:34:49:fe:
3f:e0:ad:71:04:59:4a:35:72:e7:c5:53:df:e6:6c:
6f:61:19:1c:5a:09:81:a6:a8:96:94:66:7c:0c:7c:
82:85:1a:37:68:5b:cc:e6:84:2f:7c:af:8f:4c:9a:
b3:d5:58:e4:d7:17:d7:d9:b6:1c:b2:0e:a2:3b:84:
f6:87:d3:f1:7e:d6:13:51:30:bd:73:9c:d6:0d:15:
b2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:51:DC:88:AE:DD:E1:03:F2:2F:BA:39:3E:F6:8B:0F:4C:14:55:41
X509v3 Authority Key Identifier:
keyid:10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:9c:2b:ca:64:44:df:d7:28:67:b4:19:00:7f:e8:48:c2:e9:
cc:fe:8b:4a:c5:14:15:8a:90:49:83:a9:b3:8b:cf:39:15:28:
d7:0c:12:24:72:ae:ae:25:dd:94:8a:e9:ec:62:7f:56:59:f9:
01:17:8e:07:36:31:51:09:db:c3:5e:14:a3:51:eb:ee:4e:aa:
da:c7:32:22:a6:9e:7e:a7:53:55:51:6e:57:93:6a:90:de:e2:
39:ff:74:77:57:57:50:54:21:a1:ed:39:b3:6d:58:f3:e5:ef:
18:92:b2:88:14:87:2f:0a:d4:50:3e:49:8b:7c:44:27:13:aa:
51:92:25:d3:c9:66:ba:ff:3c:20:11:6d:cf:4b:07:66:54:31:
02:d9:61:70:e0:46:cf:3b:07:e1:cd:d2:08:b6:92:41:90:7b:
76:cd:27:26:1b:d0:b1:02:fa:ef:f8:01:92:cb:fb:90:a3:ac:
ca:69:74:98:9f:0d:5f:a8:85:ba:4a:20:bc:49:c7:1b:d4:a5:
a1:01:aa:17:28:76:24:1d:68:75:81:63:be:da:a1:81:27:24:
e9:3a:ec:6e:e6:d1:5d:40:b2:8e:d3:5f:0a:b7:a6:39:29:91:
f4:78:36:fe:5d:8d:34:22:81:bf:58:6b:07:b8:54:bd:30:c6:
88:44:d4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:46 2026 by rpki-client