
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
File: EAcdqxaOjlPjzX31244PBCQukIY.mft (raw, json)
Hash identifier: C6eXiwVj+0LbLdbYCWY0Q7V0+zpZCUS0hgoJtfN7vHs=
Subject key identifier: D0:DF:10:9C:6A:62:F0:A5:F1:71:43:18:8E:FD:11:08:FC:7B:55:6D
Authority key identifier: 10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
Certificate issuer: /CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Certificate serial: 019CABA1FE14B5E60BC604529BA4081548DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 23:00:46 +0000
Manifest this update: Sun 01 Mar 2026 23:00:46 +0000
Manifest next update: Mon 02 Mar 2026 23:00:46 +0000
Files and hashes: 1: EAcdqxaOjlPjzX31244PBCQukIY.crl (hash: RmJE9qQA21UXG8Q90qK4ks7PTswLU+uvIJwBp3Ol1T8=)
2: TehJaUKE7-UYVJg4qzcGnHF4gEE.roa (hash: g9yiDNMzuqT4Xury4y9vb4TVbFovThME/EkaBOlvwI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:fe:14:b5:e6:0b:c6:04:52:9b:a4:08:15:48:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Validity
Not Before: Mar 1 23:00:46 2026 GMT
Not After : Mar 2 23:00:46 2026 GMT
Subject: CN=d0df109c6a62f0a5f17143188efd1108fc7b556d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:01:6e:5b:14:b8:1a:3a:0a:0a:f7:5b:ba:
c7:08:1c:2f:5e:67:e6:42:4d:1f:e3:dc:36:91:e9:
17:95:5a:03:3c:d8:0f:02:bd:b8:65:1a:a5:d3:37:
d2:ec:e8:90:26:b3:e8:c5:9a:02:b6:1b:38:78:d5:
f4:b3:52:b0:1a:68:71:d4:7d:09:6c:59:82:2b:73:
76:38:fa:9d:00:5a:91:4d:4a:c0:19:1b:c9:01:1d:
61:fe:06:9c:98:3a:d4:8e:ed:20:5e:4f:67:7d:a9:
1b:74:3d:a3:ee:56:ba:21:57:3b:05:a9:3f:d6:50:
05:17:f4:c8:74:d5:16:02:c6:af:d2:65:74:a1:7f:
20:21:ac:38:a0:0f:06:a2:5f:53:8d:ed:dc:b4:9e:
1c:84:31:ae:f8:ae:ec:29:a0:12:87:60:63:77:ce:
37:78:86:d5:18:c8:95:52:64:c0:17:73:d3:f9:b4:
7d:50:37:3c:35:11:9b:68:9b:fa:b2:07:73:41:36:
cd:98:8c:e7:09:b8:97:35:0a:68:71:1e:be:b6:ca:
26:7f:97:74:6f:36:8a:c7:ae:99:22:16:78:8f:cb:
03:65:3a:87:db:7b:19:52:00:c5:c5:dc:4a:1c:72:
94:90:86:00:28:88:b5:16:70:61:fa:ad:4f:d1:7d:
c4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DF:10:9C:6A:62:F0:A5:F1:71:43:18:8E:FD:11:08:FC:7B:55:6D
X509v3 Authority Key Identifier:
keyid:10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d2:40:eb:95:d6:3c:83:ff:33:42:90:d0:69:3a:0e:17:1c:
a1:3c:32:67:ed:ba:2b:82:13:fa:3f:d4:0b:45:fc:5c:b9:8e:
4e:97:ae:4c:45:73:c2:d6:28:73:39:a3:84:a9:12:0a:e8:cc:
1e:e7:65:62:d8:04:ac:f3:38:ec:29:5a:c5:65:ad:68:85:42:
29:e8:3d:fe:a0:47:07:5a:26:a6:cc:41:87:ba:01:b0:05:91:
9e:ef:dc:e8:74:54:01:05:7a:1d:68:78:e8:4d:dc:9f:e4:37:
25:cd:12:4c:47:b0:df:6c:ed:b8:6f:33:c1:f7:50:39:ca:e0:
34:dc:66:f3:b5:a4:b4:49:ed:d1:76:5f:ef:a2:5f:11:1f:f1:
14:a0:ec:00:d6:ea:58:89:08:ad:b7:b8:bc:2a:50:e2:db:bf:
2b:96:29:a8:73:0e:a9:d5:d5:34:d8:21:60:7c:e9:ce:cd:b6:
21:81:40:a0:71:a8:cf:ca:7f:b7:ff:c6:da:aa:15:5e:07:41:
80:3e:52:dd:94:39:a9:52:28:1c:fd:ce:8b:ca:ef:aa:9f:17:
73:9f:a7:62:c2:fe:9c:61:83:4c:62:0e:55:d9:85:7d:bf:0f:
fc:d9:b7:45:84:9b:33:6d:16:74:5c:57:ad:67:30:76:c7:e3:
7c:b1:a6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:54 2026 by rpki-client