
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
File: EAcdqxaOjlPjzX31244PBCQukIY.mft (raw, json)
Hash identifier: NDrQt0mN2SNdZVAs+jFJK06bfPp4rGb8LcDaw3U0iwI=
Subject key identifier: 3F:06:11:07:32:5A:F3:D0:B7:A3:34:9C:57:43:EA:7C:B1:03:55:D0
Authority key identifier: 10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
Certificate issuer: /CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Certificate serial: 019EBEB5B8A72FBAC9C824DE342856E53AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
Manifest number: 1957
Signing time: Sat 13 Jun 2026 02:00:40 +0000
Manifest this update: Sat 13 Jun 2026 02:00:40 +0000
Manifest next update: Sun 14 Jun 2026 02:00:40 +0000
Files and hashes: 1: EAcdqxaOjlPjzX31244PBCQukIY.crl (hash: uBCkpOeYF2hmtNLKvoEDtbXUGbK5Iv1lrMM++mvgLG8=)
2: TehJaUKE7-UYVJg4qzcGnHF4gEE.roa (hash: g9yiDNMzuqT4Xury4y9vb4TVbFovThME/EkaBOlvwI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b5:b8:a7:2f:ba:c9:c8:24:de:34:28:56:e5:3a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Validity
Not Before: Jun 13 02:00:40 2026 GMT
Not After : Jun 14 02:00:40 2026 GMT
Subject: CN=3f061107325af3d0b7a3349c5743ea7cb10355d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:bd:09:67:06:5a:6b:8e:c8:d4:38:45:9b:
30:02:cf:cc:9a:e7:7f:f4:10:a9:57:b2:5d:d6:3d:
1a:fa:f3:26:c6:b8:7b:97:28:a1:81:af:73:00:ab:
40:d8:06:73:d8:de:d1:f8:4d:a4:c4:9b:0d:e5:13:
b9:b2:b4:ed:8c:58:7f:ba:18:69:d4:1b:37:f1:4e:
8d:d3:05:b1:75:b2:00:33:e9:d4:e1:1e:b5:70:37:
86:c9:dd:3e:f7:cc:62:e3:d2:70:54:03:cf:ed:4b:
19:74:2a:89:35:ef:4c:2e:b9:19:ef:e5:32:64:f6:
3e:f6:34:23:3a:23:c0:e2:3c:87:b0:9b:51:41:ea:
dd:2c:b2:14:6a:aa:7f:bc:bf:27:d7:0c:1b:f9:8d:
5e:6f:7f:d7:38:48:71:f7:ee:9c:08:b7:e7:10:66:
9c:28:95:95:0c:a2:bf:cd:48:50:cc:57:33:07:b2:
6e:ba:b4:f0:f7:e2:98:4e:36:02:2f:17:d4:d6:8c:
f7:ee:0d:60:ef:32:ec:ce:c3:7a:e6:d9:9a:df:cd:
5c:f7:8b:2b:d2:c4:95:40:07:85:8f:52:51:27:cc:
a7:df:4e:97:7c:e9:25:f1:56:3e:36:22:ae:80:c7:
e9:4d:98:04:5b:5d:0c:1e:5c:54:e6:27:b7:58:e8:
8e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:06:11:07:32:5A:F3:D0:B7:A3:34:9C:57:43:EA:7C:B1:03:55:D0
X509v3 Authority Key Identifier:
keyid:10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:37:02:fd:16:c4:ba:51:c5:81:3f:7d:54:b7:fe:6a:89:0e:
bf:2d:0c:07:88:92:89:f8:58:bb:21:d8:da:16:85:55:e0:ab:
0d:10:bb:02:76:17:93:da:86:a8:b4:e9:e7:69:b7:78:19:a7:
37:f6:61:44:ff:f0:1e:ec:61:45:d9:f1:f2:cd:6e:e5:13:9e:
aa:75:38:ba:8a:d3:10:b7:21:d0:65:b2:53:38:7f:00:f4:90:
70:c9:15:b1:b5:bb:98:45:76:ba:34:31:4e:d4:b3:08:a8:7b:
71:36:19:52:55:d6:ee:ca:54:d1:a9:f8:71:81:9a:5d:83:02:
a3:05:87:82:2a:29:8c:28:19:80:bc:d0:e6:62:da:52:2b:b8:
26:bf:49:b7:fa:ee:f6:6a:60:d9:d9:78:f6:05:15:94:85:9f:
82:aa:04:d4:b4:fb:26:ed:60:cb:da:33:48:fe:67:9c:59:57:
dd:9b:e4:5a:18:95:6f:ee:37:27:96:5b:18:38:a3:75:13:fb:
1d:95:97:e1:46:64:1f:66:75:de:c1:84:73:2a:2a:6a:6f:13:
20:90:26:62:0b:79:f7:d4:eb:a8:aa:99:f1:ac:9b:98:29:0b:
3e:4d:43:db:bf:90:94:2b:70:a7:ed:f5:e4:92:09:af:71:6c:
61:8a:82:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:59:17 2026 by rpki-client