Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
File: ECgK10HnIygIXV-leXqEUfX7Ajg.mft (raw, json)
Hash identifier: xhTtVcfvXRnc5EykgfjazqSp76nMest01SKAa8ys16w=
Subject key identifier: 34:7F:D0:AC:FF:59:30:59:DA:22:DD:9A:59:88:5E:40:DF:C3:6A:2E
Authority key identifier: 10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38
Certificate issuer: /CN=10280ad741e72328085d5fa5797a8451f5fb0238
Certificate serial: 019CAE34F0E60253436BD6FD90CB024B4327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
Manifest number: 083C
Signing time: Mon 02 Mar 2026 11:00:30 +0000
Manifest this update: Mon 02 Mar 2026 11:00:30 +0000
Manifest next update: Tue 03 Mar 2026 11:00:30 +0000
Files and hashes: 1: ECgK10HnIygIXV-leXqEUfX7Ajg.crl (hash: CkJEWzLx42J8kL4xqrHNesjSSkmXubPxzrnH6mE0fCo=)
2: cFBz2VwRtAE7Ewcz64ZDacXfB5Q.roa (hash: 8S34S+6olNesEjRXQB7m9lNGl0nTPvWZwfDko3leMVc=)
3: f4YlcOOq_31WT7fc27bbteRGEMw.roa (hash: E8VFyjnJbu0a/NApI535E/vwvrXP+nlwEeePdVD35Jo=)
4: ylp5NiXG-DWol4IjywEA3MrLU5k.roa (hash: ev143/+cymXpiGa9zVi8mgdvQUw00MuKnS6trW4s38w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:34:f0:e6:02:53:43:6b:d6:fd:90:cb:02:4b:43:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10280ad741e72328085d5fa5797a8451f5fb0238
Validity
Not Before: Mar 2 11:00:30 2026 GMT
Not After : Mar 3 11:00:30 2026 GMT
Subject: CN=347fd0acff593059da22dd9a59885e40dfc36a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:11:72:ce:14:35:19:b0:ee:7f:ef:b0:cb:
66:4b:b6:f9:82:f9:47:df:9e:45:14:f4:16:e6:56:
e0:9c:61:3e:a0:df:55:62:91:73:7a:ec:4a:00:d0:
94:1e:ad:f8:52:f4:07:84:18:1a:f4:45:03:73:29:
cf:5f:63:5f:72:b7:14:d2:1c:7e:6f:1a:50:9d:38:
3f:b1:04:ff:c9:a5:05:b3:af:b7:da:f7:3c:d8:b9:
d5:f5:72:f1:63:5d:5b:03:d2:e2:aa:6d:26:d2:fe:
6e:09:53:a8:d5:78:c6:35:f3:38:d8:c5:73:82:ee:
8f:1b:7f:cb:01:3b:c8:35:2d:fd:e5:9c:84:13:83:
ff:3b:20:d7:1d:b8:20:38:b4:6e:5b:d0:18:eb:8e:
9a:27:e1:24:17:97:21:a1:a4:d2:70:ad:9e:79:44:
a3:34:5d:ba:f2:21:07:c2:5b:ea:c4:0a:e7:0a:3b:
55:27:7c:53:67:6c:db:06:c9:a7:5e:50:52:32:62:
e1:98:69:1a:b2:a5:96:0d:40:fc:01:f9:45:d3:a4:
66:e0:52:c4:86:91:68:60:a4:b1:46:29:99:26:f1:
b3:ee:81:9a:e0:5b:a3:d0:92:ca:69:71:77:34:3f:
8c:38:35:ff:86:a7:e0:ff:83:61:c0:b7:7b:d3:0d:
25:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7F:D0:AC:FF:59:30:59:DA:22:DD:9A:59:88:5E:40:DF:C3:6A:2E
X509v3 Authority Key Identifier:
keyid:10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:2c:46:f0:b8:a9:37:13:d9:55:8b:e3:cc:d5:ba:9c:04:b6:
14:7d:9b:8f:da:ff:c1:4c:89:77:f2:14:59:df:1c:65:64:37:
c5:b3:14:23:40:9f:d1:58:14:10:b2:81:d1:bd:c8:95:36:db:
9b:17:48:6a:7f:f7:83:22:0b:fe:72:8b:79:42:02:f7:7d:8b:
e5:ec:24:e5:7b:8d:79:35:b1:36:65:55:5e:bf:96:de:d2:8e:
bf:c3:f8:4c:00:c6:f3:bf:6c:9d:d6:2e:9c:38:a4:fa:7f:ef:
c3:74:22:a8:9b:98:40:9a:a0:72:96:bc:24:e6:34:d6:68:ce:
8b:76:38:cf:86:e5:3c:22:f8:33:ba:3f:d9:43:eb:8d:0a:bf:
0b:2d:cc:35:81:7a:2a:29:b7:de:b9:c8:28:71:3d:3a:2c:80:
c3:34:db:78:b0:ef:f7:a9:94:f4:5f:81:2d:99:25:03:71:e1:
15:b5:39:9f:5a:23:6c:3c:d7:59:a5:f3:c9:98:09:b8:19:42:
14:2b:68:4d:67:cd:67:88:a1:43:b2:41:f0:ff:ef:3b:34:0d:
01:a7:7e:0c:e2:f1:7d:48:ed:a1:d3:86:f4:c2:79:ff:47:f5:
2e:65:41:b7:bf:c0:b1:1e:47:47:e5:04:dc:98:dc:89:8e:84:
b8:e4:0d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:07:24 2026 by rpki-client