Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
File: EfLjWzxVm22ENmfK1drGdOAblsM.mft (raw, json)
Hash identifier: sx6EwEBJ2f581BWJk3trnuXXcVoI5gFyDo+YiV6TwSk=
Subject key identifier: 5C:4E:26:67:36:30:D3:5D:EF:7F:67:82:11:A3:5E:81:BC:84:13:36
Authority key identifier: 11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
Certificate issuer: /CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Certificate serial: 019DA3E669F94F7C6A5B384833183B8FAFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
Manifest number: 10BC
Signing time: Sun 19 Apr 2026 04:01:19 +0000
Manifest this update: Sun 19 Apr 2026 04:01:19 +0000
Manifest next update: Mon 20 Apr 2026 04:01:19 +0000
Files and hashes: 1: EfLjWzxVm22ENmfK1drGdOAblsM.crl (hash: 0+uEXT9O1XYMky7+zqTinZxkVHd6EyyoLjVy+ydarB0=)
2: PbU9H76uPCLlqOQ-86yXlS220dw.roa (hash: V4GbhAZFv6aWhq1lviPUINhL7BoSID+QsQjoj/+8n6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:69:f9:4f:7c:6a:5b:38:48:33:18:3b:8f:af:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Validity
Not Before: Apr 19 04:01:19 2026 GMT
Not After : Apr 20 04:01:19 2026 GMT
Subject: CN=5c4e26673630d35def7f678211a35e81bc841336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:35:58:92:81:8b:66:ac:92:97:06:39:bd:
25:e8:f0:73:7f:f1:72:97:bc:bb:4b:4b:8b:73:31:
48:08:17:75:69:1b:c6:38:37:c1:0e:0f:aa:d0:3a:
29:0f:0c:a5:ba:50:4a:ae:e5:d5:61:25:69:40:31:
ca:62:02:3f:9f:a7:05:a8:3d:60:d6:7c:3f:34:6a:
3f:9b:a7:eb:82:57:2c:61:7a:6b:29:71:f9:a9:de:
03:9a:2a:9d:fb:dc:e8:9d:8d:e8:08:7f:e0:6e:c6:
ca:f3:a6:a6:60:b4:71:d3:30:65:f2:99:00:1d:ca:
aa:19:47:6a:c0:92:f1:92:e0:93:39:5d:5b:f6:76:
04:a5:59:59:e0:8f:b7:0f:64:7d:d4:a1:a7:13:24:
1f:28:b8:8b:1d:af:1e:25:4a:05:97:fa:7b:fa:d8:
9c:78:3e:fb:89:9c:1e:1b:65:d8:48:0a:2b:a1:7f:
38:39:dd:1b:d3:1b:75:5a:65:85:a5:6a:f6:5b:ba:
55:25:c7:c6:48:ef:20:e6:94:48:c1:f4:03:8f:f2:
6f:dc:02:99:02:cf:5b:83:be:80:c4:07:c6:35:df:
07:b6:97:10:a8:ac:6f:60:e5:13:9c:32:b3:8c:24:
ce:f1:08:17:5b:40:d8:bd:0d:ae:10:3b:cb:d7:d6:
fe:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4E:26:67:36:30:D3:5D:EF:7F:67:82:11:A3:5E:81:BC:84:13:36
X509v3 Authority Key Identifier:
keyid:11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c5:c3:d5:c8:a1:88:39:44:a6:85:66:d1:05:61:33:1b:61:
88:c2:f2:9d:51:53:1f:be:d9:46:30:6e:bc:f2:64:60:fb:7c:
ed:12:72:2b:a0:a2:02:b0:be:44:b2:b9:44:5e:e7:b4:e6:af:
c5:c3:7f:7c:8c:79:0e:8a:eb:42:ff:67:6d:b6:de:fc:a0:51:
43:86:ed:13:5f:67:df:69:7c:72:f9:0d:20:23:73:f6:d1:5e:
36:a6:b5:c9:44:f4:21:5f:b4:e6:bf:44:29:13:74:40:d6:db:
d7:f6:35:22:a6:ec:8d:13:53:06:bd:60:fb:56:d6:0e:b1:45:
3b:84:38:d8:d4:ee:b8:40:25:a0:2a:e5:d4:78:10:d9:ff:62:
2c:51:c1:53:62:37:a2:66:af:e1:ab:8f:aa:49:5f:6b:36:a2:
82:6e:76:41:93:6a:dc:4a:8b:4f:4b:98:81:14:95:3f:81:dc:
5b:eb:4b:56:6d:93:09:0a:43:9d:d1:f0:e0:18:4a:0d:48:9e:
52:5a:3c:83:91:f1:6d:af:05:ef:06:69:79:a0:09:6f:b0:7e:
7d:16:01:36:f9:05:38:ec:dc:8b:43:43:6b:67:dd:c6:2c:d9:
3f:a0:41:45:87:fe:c8:77:96:88:2f:21:45:15:33:33:f5:3d:
e1:6d:db:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:41 2026 by rpki-client