Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
File: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft (raw, json)
Hash identifier: DAxKK1HBqfjJ7222Purm+XgDGjMIwf1itf3Jdr8asXw=
Subject key identifier: CC:C1:BA:B1:58:70:E9:F7:77:B1:BC:66:96:73:87:8B:10:2C:B9:56
Authority key identifier: 12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
Certificate issuer: /CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Certificate serial: 019CAD59F95EC592E28AF534213CCD4C808E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
Manifest number: 02E0
Signing time: Mon 02 Mar 2026 07:01:20 +0000
Manifest this update: Mon 02 Mar 2026 07:01:20 +0000
Manifest next update: Tue 03 Mar 2026 07:01:20 +0000
Files and hashes: 1: ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl (hash: y2UNbnkMOuM9CaTR0zm68onsZPXtDXeKpwNMG4DgtV4=)
2: StENb4oXUe_gqEhZ_cRSGTbf9h0.roa (hash: jpZ/aosQxaXXNjBqwfCSJNayGEKyZap7VBjnyDJ/cIU=)
3: ustsKef3_kQrz_t0nmHTw0MaqT0.roa (hash: QAz/jM+TUevEvBm3ClnKE5FN9ZTcnHmV+8tjFLI7axU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:f9:5e:c5:92:e2:8a:f5:34:21:3c:cd:4c:80:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12520f8b2af8a1453089a620d2392f66b0a3ebf4
Validity
Not Before: Mar 2 07:01:20 2026 GMT
Not After : Mar 3 07:01:20 2026 GMT
Subject: CN=ccc1bab15870e9f777b1bc669673878b102cb956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:87:af:cf:6a:fa:28:e4:2f:f9:77:5e:97:5f:
69:8e:f9:32:7d:ec:7c:cf:c7:b9:23:df:26:d6:08:
55:53:04:e4:78:14:e6:b4:a4:a1:2d:48:ba:08:74:
dd:e0:30:d5:38:f5:fc:82:db:46:a3:9c:a1:d2:df:
f1:eb:5f:61:e0:d5:dc:06:4a:d7:4e:77:8d:b1:af:
ef:92:b4:db:57:67:80:0d:7f:92:0c:c6:c1:ee:dd:
c8:fb:23:9f:46:dd:fa:a0:58:fc:c4:e0:2d:ca:1f:
37:14:d1:4c:5e:55:db:59:78:98:9c:91:68:2f:b7:
58:de:ac:e1:dd:a5:39:19:8e:35:03:5e:c4:0d:3e:
da:41:7d:99:62:dd:ca:73:6b:a2:b5:11:7d:8b:7c:
1a:3f:f6:e7:cf:0f:d0:20:8f:68:4e:1f:7f:9c:92:
78:14:28:39:79:66:8a:e3:6c:d4:55:cc:bc:93:d7:
84:f6:51:a3:2a:0a:b3:c0:34:73:68:6d:c7:83:4b:
02:3e:4d:b3:f5:73:49:ec:64:59:1a:ee:21:f8:1d:
a1:1e:03:71:0c:4f:6b:01:f1:cb:37:2a:5d:81:26:
0c:32:f7:46:71:a2:cc:ff:a8:3c:a6:b1:4b:e8:fa:
b6:1a:5f:85:d5:11:b5:ee:1c:9a:40:fc:4c:e6:69:
c7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C1:BA:B1:58:70:E9:F7:77:B1:BC:66:96:73:87:8B:10:2C:B9:56
X509v3 Authority Key Identifier:
keyid:12:52:0F:8B:2A:F8:A1:45:30:89:A6:20:D2:39:2F:66:B0:A3:EB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/976565-a699-4d88-8117-3421ea41df36/1/ElIPiyr4oUUwiaYg0jkvZrCj6_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:45:1d:aa:ba:d5:c5:a6:13:f9:cc:74:91:82:0e:94:6d:e0:
7d:c0:37:44:82:dc:f5:81:fb:a9:13:33:8e:d3:b9:81:82:11:
e8:71:57:6c:90:68:21:f3:35:e9:a6:e5:70:6c:97:c7:9f:1f:
91:1f:f5:c9:c9:8e:40:9d:9b:8c:ba:54:30:14:26:77:1d:7b:
b7:2f:83:31:68:06:20:88:db:69:18:2b:c3:0a:19:5f:66:5e:
40:e4:ac:ef:9d:e9:f5:9e:6b:c0:74:af:82:0c:19:4b:3b:06:
fd:48:b0:91:15:cf:c8:08:fb:43:38:5e:1a:0d:7b:98:2f:77:
f2:1d:9e:f1:3a:62:67:30:46:65:2d:45:1b:3e:38:c9:af:d1:
ba:55:67:eb:55:c2:1c:80:26:07:75:e3:33:54:b1:78:4a:24:
e5:0b:7f:13:d2:21:c4:84:24:a5:8a:b2:3b:f4:2d:44:d8:54:
52:61:02:15:d7:60:7e:dc:cd:23:64:7d:b8:f4:93:f7:2b:a1:
d0:50:4b:bb:68:4c:ec:b2:fa:f7:82:7d:02:1a:a3:04:27:db:
2a:86:a9:6e:06:a8:d3:4a:3e:47:bb:aa:ab:cd:cb:0c:29:a5:
c5:cc:cb:9a:2f:7d:23:7a:65:8d:77:f7:b4:f0:92:c6:c6:c2:
4f:b9:d3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:31:32 2026 by rpki-client