Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
File: EdnXl1uM2pIypCR8yd6abf28YGk.mft (raw, json)
Hash identifier: Ych2/YZUny1wQ8Ybo8DpGPFgd8Jl5o2gDQll3yTDHMI=
Subject key identifier: 81:6C:A5:40:6B:AD:49:E8:FF:34:6A:70:66:E2:E4:B6:AE:C9:99:BB
Authority key identifier: 11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69
Certificate issuer: /CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
Certificate serial: 019D9B5048752911E7321F0A352B9C06C406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 12:00:22 +0000
Manifest this update: Fri 17 Apr 2026 12:00:22 +0000
Manifest next update: Sat 18 Apr 2026 12:00:22 +0000
Files and hashes: 1: EdnXl1uM2pIypCR8yd6abf28YGk.crl (hash: dI7NBSZGYBYnTYsi04MDH7sGSwozShWSMHb8mAZ9CiM=)
2: yYuc2YO9JtZZoH5XkuKsidq7BX4.roa (hash: HNsng+bOFwiIt3gy2qY4s78ZjR+RCoMxwOTIMZ72g50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:48:75:29:11:e7:32:1f:0a:35:2b:9c:06:c4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
Validity
Not Before: Apr 17 12:00:22 2026 GMT
Not After : Apr 18 12:00:22 2026 GMT
Subject: CN=816ca5406bad49e8ff346a7066e2e4b6aec999bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c1:e3:5c:c6:a5:87:a5:fe:d8:94:76:b6:3a:
bb:7d:d5:af:65:f4:af:b4:fd:17:98:98:c8:20:60:
a3:64:93:34:fd:7d:a5:33:91:d0:f8:cc:7f:a6:a5:
eb:2d:5f:97:71:dd:81:03:74:36:59:04:4b:cf:7b:
c0:56:49:c4:37:5d:d2:76:fc:e6:df:7b:4a:31:8e:
2b:9b:7f:e9:7f:40:17:04:95:56:7c:52:34:a4:b6:
52:95:72:ba:c1:cc:0b:5b:6d:16:e3:05:84:95:fc:
71:85:79:cf:2e:98:58:3b:cd:77:42:5e:c2:bb:b0:
a8:10:5e:1b:0e:d1:6e:54:fc:5a:6b:35:c5:75:d0:
85:da:4b:ae:af:9b:fa:8a:49:30:bb:f6:d8:46:9e:
0e:50:61:0c:57:34:59:b4:c1:06:ab:f9:d8:2e:a6:
be:ba:e0:05:4e:ab:8b:4a:5e:64:7a:a3:47:d8:e3:
e4:d7:0d:d4:c4:17:b4:b8:f3:a4:a3:e8:c7:78:67:
3d:96:af:26:31:fe:16:10:16:db:71:79:7f:6a:c0:
86:98:b1:30:a1:86:90:3e:52:d0:a3:f6:24:19:49:
7f:95:45:f5:42:36:ff:53:5d:5d:2e:4d:2d:6c:8a:
49:d3:ae:37:6c:d8:f5:15:43:cf:e2:fb:e1:87:71:
e8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6C:A5:40:6B:AD:49:E8:FF:34:6A:70:66:E2:E4:B6:AE:C9:99:BB
X509v3 Authority Key Identifier:
keyid:11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0a:d6:27:45:e5:0f:db:b9:08:82:41:41:91:56:01:3b:e4:
e1:c9:52:5c:ac:bd:13:16:ab:f8:92:68:43:b9:67:6e:6d:4f:
fb:a3:db:d1:9b:3d:79:95:2b:65:c9:86:ac:5f:05:74:26:b5:
1e:45:b2:7b:b1:36:e4:48:be:a3:14:82:57:fd:d4:99:c9:98:
76:33:e7:fa:60:58:3c:f4:06:a7:9e:09:74:9d:a3:cd:e5:dd:
a7:30:a7:5e:ac:c0:94:38:6c:52:a1:7d:d5:a1:35:98:f0:c2:
03:0f:73:70:e1:32:bc:1d:7e:b5:de:8c:de:f4:66:85:65:fd:
06:7f:13:d2:d5:37:02:3b:11:ba:1d:cd:d9:f5:93:d7:ef:e4:
1d:59:0b:22:fa:61:03:b3:50:51:c4:05:08:20:fb:2a:b5:65:
1a:45:9d:82:dd:f6:95:81:a2:44:0c:e1:f7:55:d8:1e:2b:75:
b2:77:d4:1b:fe:2f:b6:38:ee:2c:6c:4f:4a:c7:fe:98:7a:4b:
f3:16:b1:fd:0a:e4:e0:d3:a2:88:68:89:01:15:ee:0b:ad:5d:
05:12:ad:be:7e:80:2f:fc:11:93:4a:f4:8c:36:e0:11:38:00:
77:df:72:ea:0f:bf:db:5d:42:b1:1c:50:1c:61:8c:15:63:fe:
8c:fc:29:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:05:59 2026 by rpki-client