Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
File: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft (raw, json)
Hash identifier: 4G1uvyQsVDgkJ+J1Q1paKfjIN4b39fidoxfA7IF6q5E=
Subject key identifier: 8A:33:9C:53:DA:95:9C:E9:55:95:52:AB:0A:D8:0D:5A:E3:D6:4D:64
Authority key identifier: 12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
Certificate issuer: /CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Certificate serial: 019D9CD16D83E9C4340D32CE6A4AF4B4F8E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
Manifest number: 035C
Signing time: Fri 17 Apr 2026 19:01:03 +0000
Manifest this update: Fri 17 Apr 2026 19:01:03 +0000
Manifest next update: Sat 18 Apr 2026 19:01:03 +0000
Files and hashes: 1: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl (hash: m3OlYy69GSMdI1c9zOVp5Cz11NUaTOBazdtLLviPU1I=)
2: StENb4oXUe_gqEhZ_cRSGTbf9h0.roa (hash: jpZ/aosQxaXXNjBqwfCSJNayGEKyZap7VBjnyDJ/cIU=)
3: ustsKef3_kQrz_t0nmHTw0MaqT0.roa (hash: QAz/jM+TUevEvBm3ClnKE5FN9ZTcnHmV+8tjFLI7axU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:6d:83:e9:c4:34:0d:32:ce:6a:4a:f4:b4:f8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Validity
Not Before: Apr 17 19:01:03 2026 GMT
Not After : Apr 18 19:01:03 2026 GMT
Subject: CN=8a339c53da959ce9559552ab0ad80d5ae3d64d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:7d:70:0f:9b:92:82:e0:f6:a4:88:c4:9c:
1c:09:be:77:28:74:29:4e:31:0c:aa:37:aa:66:fa:
98:aa:c9:0f:2e:7f:a6:6c:6a:a7:ed:5b:8e:03:8b:
3a:71:05:51:3d:be:39:5e:6f:dc:cc:ca:15:0a:4b:
4a:44:ad:b7:13:39:7e:0e:8d:b9:6e:fe:d7:da:df:
e6:05:1f:f5:9e:14:0c:a7:8b:cb:db:80:64:ee:92:
3b:5d:d3:6a:19:f7:89:c0:06:07:66:3e:af:7c:29:
7a:8b:c0:09:b2:a4:76:ab:80:98:8f:84:11:05:7d:
5d:d1:79:3b:b7:e7:0d:e5:e7:4d:c5:52:d5:3e:ec:
b1:7e:2a:d7:7b:a6:94:a4:e2:f8:30:97:0b:3a:77:
f2:24:d5:3e:31:b3:96:c6:30:52:cc:05:e2:bc:80:
01:29:50:92:72:df:38:b8:07:21:03:48:80:c2:eb:
6a:50:c1:65:5a:a0:32:9d:86:4a:ef:e1:89:e1:17:
51:de:78:56:bc:05:23:a1:d1:fb:7d:46:8a:45:28:
4a:66:b5:62:ae:51:48:af:eb:72:5a:93:20:57:24:
a0:38:45:35:8f:bb:d6:ca:89:1c:e9:bf:da:2c:ae:
80:97:d1:99:0d:4b:7c:25:b2:82:e1:48:57:64:41:
59:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:33:9C:53:DA:95:9C:E9:55:95:52:AB:0A:D8:0D:5A:E3:D6:4D:64
X509v3 Authority Key Identifier:
keyid:12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d7:2a:57:48:bb:90:14:5d:9b:46:b4:e7:c9:d1:75:98:23:
1c:b2:94:96:8b:79:69:73:d6:11:b8:27:23:ea:da:11:be:1b:
23:73:9b:e8:39:0a:fb:1a:50:35:e2:cc:ed:4b:53:07:30:c7:
15:4b:50:17:81:9f:e3:5f:b4:c3:9e:2a:2e:4c:da:e2:df:03:
c1:13:26:d7:3a:9e:c4:7c:ae:2c:74:7d:20:2a:8d:0a:49:38:
f6:c7:a5:0c:88:64:c3:9f:14:2f:7b:ac:0c:b9:ee:dc:9f:01:
4a:d3:a2:45:d6:12:4b:84:c7:b8:2f:e7:61:13:3c:14:30:53:
3f:00:9b:ea:37:ba:d1:21:8f:e1:f0:db:63:8c:9f:d8:97:e7:
7c:47:73:ff:f1:36:f7:1a:2b:63:99:93:01:07:c3:ac:62:62:
c4:f9:a6:e5:7b:5a:ec:96:6a:65:37:93:0b:b6:49:12:b7:e6:
e1:fd:6a:74:31:e9:1a:df:6c:a3:86:32:93:53:ee:1a:79:fe:
6d:ed:e0:a4:1d:ee:e7:b8:f2:06:10:3b:a2:64:94:64:58:22:
d7:59:b1:85:4e:4e:40:ab:ad:8f:64:d0:23:37:a9:c5:5b:a9:
d8:79:eb:68:d5:9c:ec:db:e2:68:56:b5:f4:8b:3a:73:45:4a:
22:22:94:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:26:23 2026 by rpki-client