Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
File: EdnXl1uM2pIypCR8yd6abf28YGk.mft (raw, json)
Hash identifier: /emDK9v3wtBN+70xnMMp/eLjTiRasxLIUk/CRVEV724=
Subject key identifier: FA:8B:D5:B2:57:F5:84:51:79:34:80:3E:92:97:8B:B1:AF:44:66:6F
Authority key identifier: 11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69
Certificate issuer: /CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
Certificate serial: 019CA9EA89A1B38A9B409BDECEE93A8EA977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 15:00:45 +0000
Manifest this update: Sun 01 Mar 2026 15:00:45 +0000
Manifest next update: Mon 02 Mar 2026 15:00:45 +0000
Files and hashes: 1: EdnXl1uM2pIypCR8yd6abf28YGk.crl (hash: xKv5DpMy3F5DqZWoPXUrrtlGph+yo3OSiasxlu2j4Zs=)
2: yYuc2YO9JtZZoH5XkuKsidq7BX4.roa (hash: HNsng+bOFwiIt3gy2qY4s78ZjR+RCoMxwOTIMZ72g50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:89:a1:b3:8a:9b:40:9b:de:ce:e9:3a:8e:a9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
Validity
Not Before: Mar 1 15:00:45 2026 GMT
Not After : Mar 2 15:00:45 2026 GMT
Subject: CN=fa8bd5b257f584517934803e92978bb1af44666f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:89:bc:57:cb:7f:c5:30:b5:81:bc:2a:37:
b8:42:f2:ec:9a:84:cf:c7:ee:ed:11:00:8c:36:b0:
a8:81:ed:7b:94:e8:d6:24:a9:5b:d2:ec:68:cc:c1:
dc:6e:f3:62:5a:2c:c9:2e:75:33:86:8a:f8:99:02:
ef:d0:73:b4:b2:1c:4a:ae:7f:a5:ac:fa:59:74:27:
64:bf:d8:e6:f7:11:97:2e:5f:0a:01:3b:bf:5f:2a:
48:99:28:8c:df:1b:d5:85:2c:91:13:8f:18:d5:28:
4e:58:45:6a:cd:5f:f5:27:e9:4d:99:ff:78:69:ee:
e0:0c:0f:a0:27:55:d1:d2:b7:a9:28:94:27:ab:03:
20:b2:94:6c:fb:9b:47:21:22:d1:fe:93:20:b7:fa:
7e:bc:4a:21:4d:69:1b:0a:ba:3c:4e:02:1f:bb:65:
5b:a3:b1:25:7c:0f:46:e1:5d:c3:71:e0:cb:60:71:
ad:a2:ef:a3:57:9b:7f:d0:ba:31:82:ec:9b:c3:39:
f8:4c:5b:99:8a:a8:d8:1f:ad:20:7e:33:df:63:b6:
15:a7:fa:a8:18:02:eb:c4:6f:d1:db:ba:06:32:0b:
ef:05:01:97:4a:2d:ea:60:d4:bd:f2:c1:1c:4d:0d:
34:b0:2a:4e:75:39:eb:67:65:69:eb:43:02:ae:b2:
fb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8B:D5:B2:57:F5:84:51:79:34:80:3E:92:97:8B:B1:AF:44:66:6F
X509v3 Authority Key Identifier:
keyid:11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:93:c2:00:65:d8:1a:f4:24:5c:71:2f:2a:d9:32:07:e2:45:
d1:4a:ae:2c:71:8f:63:d3:83:0a:56:ef:c1:db:14:00:08:0d:
95:45:c9:61:40:eb:8f:83:18:90:95:90:12:e0:d8:40:90:dc:
7b:61:69:ab:ab:e1:89:60:79:0a:bf:16:e4:9a:eb:37:94:df:
76:3e:08:27:8a:b8:04:6b:3f:43:58:ba:81:42:db:3d:c2:66:
3c:5b:2e:c4:75:83:34:94:01:ca:b4:e5:48:d7:e5:5e:a4:5d:
ce:e1:55:1b:55:1c:35:06:01:a9:ad:02:5b:96:71:58:c2:91:
eb:a2:cc:b7:3b:3c:97:8a:f9:4c:4a:28:8e:16:a8:c3:c2:4c:
2e:f6:4a:32:08:02:e0:ea:f8:1a:f3:52:26:e7:42:95:a4:a4:
c9:5a:a7:a3:71:48:ba:78:22:90:17:9b:0b:d2:02:b1:51:df:
c9:20:1b:01:31:7a:d8:20:e8:c6:ca:1a:de:cc:63:5a:6d:35:
da:83:3f:c6:12:4b:cf:f2:13:13:62:14:12:9b:56:8d:70:2f:
c9:b4:98:09:9c:60:84:d9:6e:d4:4c:50:ce:84:96:e7:c8:c2:
86:c9:e2:3e:de:d6:7f:d2:f0:ad:4a:c4:02:09:dc:50:d6:96:
e0:f6:cb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:47 2026 by rpki-client