Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
File: egadopx7Yd3rzAUk_QjlTf80wWg.mft (raw, json)
Hash identifier: HFrkUUk9RtVE9YK9FxOq5bqd2Wu4leOPVx/BLsN6f48=
Subject key identifier: B5:B2:C4:56:C6:CB:AE:6B:E5:61:42:88:0E:67:29:3E:9C:23:69:F5
Authority key identifier: 7A:06:9D:A2:9C:7B:61:DD:EB:CC:05:24:FD:08:E5:4D:FF:34:C1:68
Certificate issuer: /CN=7a069da29c7b61ddebcc0524fd08e54dff34c168
Certificate serial: 019CAD59EE9878CAE4E17994795A30223D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 07:01:17 +0000
Manifest this update: Mon 02 Mar 2026 07:01:17 +0000
Manifest next update: Tue 03 Mar 2026 07:01:17 +0000
Files and hashes: 1: egadopx7Yd3rzAUk_QjlTf80wWg.crl (hash: qR84k19gpfIFOQWEofHY66c061BYOLvd3y2RM68EQYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:ee:98:78:ca:e4:e1:79:94:79:5a:30:22:3d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a069da29c7b61ddebcc0524fd08e54dff34c168
Validity
Not Before: Mar 2 07:01:17 2026 GMT
Not After : Mar 3 07:01:17 2026 GMT
Subject: CN=b5b2c456c6cbae6be56142880e67293e9c2369f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b4:f8:fc:05:a9:42:44:89:f6:09:eb:5e:f5:
28:95:d3:36:15:d5:80:ea:fa:3b:4e:05:22:ce:ef:
18:99:08:18:a8:86:00:c4:91:78:99:92:9a:f5:1a:
41:5a:e6:0a:a4:13:2d:28:b2:b9:d5:f3:76:74:da:
4e:20:fd:87:5c:6a:07:26:4f:78:d8:66:68:7f:2b:
9c:d7:1f:04:8f:be:b0:3a:4d:28:d7:7e:6d:61:9c:
3e:57:fa:00:ed:09:25:6c:9b:32:02:50:05:3d:d0:
fd:1b:de:94:b2:90:6a:82:ee:c8:6f:d7:b7:62:fc:
ba:fe:ba:47:35:bc:9e:7f:b7:e0:aa:12:e4:b2:1a:
2f:b8:25:47:cf:ce:bb:91:92:b1:d6:9a:61:08:69:
e5:14:21:1a:73:73:75:4f:e5:2c:c7:32:38:30:ae:
36:b5:8c:b0:1f:9e:70:86:d7:da:1d:5c:4c:ec:cc:
6c:76:33:df:45:45:57:c9:4f:76:ce:a3:2f:49:38:
a6:7a:16:cb:8e:43:4b:2b:0e:41:50:3c:a3:3b:f1:
2d:51:53:ed:a6:41:5c:71:76:4c:a5:18:61:e6:da:
24:2e:45:cd:ba:fa:4d:bb:48:b8:c4:9e:21:eb:a0:
41:b2:12:8a:25:ef:48:dd:66:08:69:b2:ff:3e:c9:
49:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B2:C4:56:C6:CB:AE:6B:E5:61:42:88:0E:67:29:3E:9C:23:69:F5
X509v3 Authority Key Identifier:
keyid:7A:06:9D:A2:9C:7B:61:DD:EB:CC:05:24:FD:08:E5:4D:FF:34:C1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:48:b5:b2:b0:fc:bc:30:62:9a:d9:77:dd:4c:88:0c:98:2a:
ed:50:ad:aa:56:1d:f6:3b:77:29:e1:cd:32:eb:df:40:40:fc:
68:6c:f3:24:93:dc:8e:11:43:82:11:5a:5a:ad:f3:b4:0d:74:
4c:72:fa:42:b7:66:6f:5f:0d:78:1d:7c:b3:39:1b:8e:c9:25:
ec:06:28:e6:37:05:25:01:1f:73:a6:e6:d3:e7:d6:21:3e:cf:
d4:cd:55:83:b2:fd:71:93:79:03:55:7e:d6:fe:b8:30:05:f3:
91:09:52:92:66:ac:b7:e7:c4:b5:f6:75:7b:55:0c:92:d8:c0:
79:29:53:62:d3:a8:41:41:aa:97:c6:0b:16:45:3e:a1:de:c3:
39:55:d1:15:16:0c:21:6b:78:96:6a:fa:f1:6f:6c:07:3e:7e:
2b:45:39:b5:fb:53:7f:f9:81:a9:b0:f7:41:fd:0a:4b:89:93:
61:4e:4f:48:28:f6:9a:9a:0c:42:0f:34:19:79:10:8a:8d:71:
8e:7e:96:c5:3e:b0:e8:a9:93:bb:9f:ca:a4:c0:fc:78:eb:95:
12:81:b7:16:89:36:66:1b:60:b5:c7:7e:5d:5d:99:ca:f6:d7:
30:8e:b2:06:f2:c8:3a:23:e2:54:6e:8e:23:6b:82:6e:c3:cb:
38:83:17:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWe6YeMrk4XmUeVowIj1aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMDY5ZGEyOWM3YjYxZGRlYmNjMDUyNGZkMDhlNTRkZmYz
NGMxNjgwHhcNMjYwMzAyMDcwMTE3WhcNMjYwMzAzMDcwMTE3WjAzMTEwLwYDVQQD
EyhiNWIyYzQ1NmM2Y2JhZTZiZTU2MTQyODgwZTY3MjkzZTljMjM2OWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bT4/AWpQkSJ9gnrXvUoldM2FdWA
6vo7TgUizu8YmQgYqIYAxJF4mZKa9RpBWuYKpBMtKLK51fN2dNpOIP2HXGoHJk94
2GZofyuc1x8Ej76wOk0o135tYZw+V/oA7QklbJsyAlAFPdD9G96UspBqgu7Ib9e3
Yvy6/rpHNbyef7fgqhLkshovuCVHz867kZKx1pphCGnlFCEac3N1T+UsxzI4MK42
tYywH55whtfaHVxM7MxsdjPfRUVXyU92zqMvSTimehbLjkNLKw5BUDyjO/EtUVPt
pkFccXZMpRhh5tokLkXNuvpNu0i4xJ4h66BBshKKJe9I3WYIabL/PslJGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWyxFbGy65r5WFCiA5nKT6cI2n1MB8GA1UdIwQY
MBaAFHoGnaKce2Hd68wFJP0I5U3/NMFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWdhZG9weDdZZDNyekFVa19RamxUZjgwd1dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82MDM5ZTgtMmQ2OC00MzEwLWEzYWMt
NGJmZWZlNDE2ZjI2LzEvZWdhZG9weDdZZDNyekFVa19RamxUZjgwd1dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82MDM5ZTgtMmQ2OC00MzEwLWEzYWMtNGJmZWZlNDE2ZjI2
LzEvZWdhZG9weDdZZDNyekFVa19RamxUZjgwd1dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUi1srD8
vDBimtl33UyIDJgq7VCtqlYd9jt3KeHNMuvfQED8aGzzJJPcjhFDghFaWq3ztA10
THL6Qrdmb18NeB18szkbjskl7AYo5jcFJQEfc6bm0+fWIT7P1M1Vg7L9cZN5A1V+
1v64MAXzkQlSkmast+fEtfZ1e1UMktjAeSlTYtOoQUGql8YLFkU+od7DOVXRFRYM
IWt4lmr68W9sBz5+K0U5tftTf/mBqbD3Qf0KS4mTYU5PSCj2mpoMQg80GXkQio1x
jn6WxT6w6KmTu5/KpMD8eOuVEoG3Fok2Zhtgtcd+XV2ZyvbXMI6yBvLIOiPiVG6O
I2uCbsPLOIMXCQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:55 2026 by rpki-client