Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
File: ELZc9vpeH8roz4TJcB44vftjqrM.mft (raw, json)
Hash identifier: /y+WvEF1GeRvuPhohXSkD+s/9LC1eE0ZLIdnHtK75Rw=
Subject key identifier: 70:FD:8F:DD:1E:AC:02:B3:B1:63:A5:2E:82:64:C7:3F:89:77:9A:28
Authority key identifier: 10:B6:5C:F6:FA:5E:1F:CA:E8:CF:84:C9:70:1E:38:BD:FB:63:AA:B3
Certificate issuer: /CN=10b65cf6fa5e1fcae8cf84c9701e38bdfb63aab3
Certificate serial: 019D9A3F0DC352664DDD96BC42A5E23C5C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
Manifest number: 116E
Signing time: Fri 17 Apr 2026 07:01:56 +0000
Manifest this update: Fri 17 Apr 2026 07:01:56 +0000
Manifest next update: Sat 18 Apr 2026 07:01:56 +0000
Files and hashes: 1: ELZc9vpeH8roz4TJcB44vftjqrM.crl (hash: e6IBnBor8cP6za0YxQe+VDRC+2O2p9C93dwmj9WevyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:0d:c3:52:66:4d:dd:96:bc:42:a5:e2:3c:5c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10b65cf6fa5e1fcae8cf84c9701e38bdfb63aab3
Validity
Not Before: Apr 17 07:01:56 2026 GMT
Not After : Apr 18 07:01:56 2026 GMT
Subject: CN=70fd8fdd1eac02b3b163a52e8264c73f89779a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:2e:6f:30:9a:9b:c3:22:87:5a:e0:24:cb:
ac:4b:e3:e8:01:b1:8b:8f:c8:a4:df:c6:69:2c:e7:
b8:0b:76:a0:81:6c:e3:7c:8b:34:19:54:87:43:29:
bf:aa:05:31:f0:88:ba:91:8e:f2:eb:b8:94:09:17:
c4:ad:11:af:e4:b4:9e:f6:aa:f5:a2:a9:b9:14:54:
35:d6:34:81:d8:24:5a:13:07:a0:18:20:0e:bc:6f:
d2:16:64:25:c0:8d:e7:fc:a7:c9:27:cb:94:de:24:
d6:9e:e8:11:2a:cb:36:db:38:83:1a:07:40:bd:37:
c4:b8:30:46:12:eb:c6:0c:0a:be:91:65:3c:77:5e:
67:39:51:d5:93:5d:b9:80:34:bf:c1:b4:d2:22:f6:
ec:81:3f:62:cc:ca:2d:86:1f:84:98:02:c6:04:43:
40:3c:c7:e5:78:3a:b9:cc:f6:1f:97:91:de:6f:42:
d1:6c:21:f9:34:22:23:ca:b5:0b:45:7a:d5:67:09:
83:0f:66:e9:32:65:80:44:d3:47:d1:2e:26:38:5c:
9f:19:f0:5a:7c:63:6f:e9:d6:8a:a6:51:81:04:c1:
cb:30:3d:8b:60:16:69:cc:d4:3f:69:ca:2f:ed:aa:
b7:4e:7d:f2:77:a6:7a:00:e3:ac:ae:07:02:71:dc:
0b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FD:8F:DD:1E:AC:02:B3:B1:63:A5:2E:82:64:C7:3F:89:77:9A:28
X509v3 Authority Key Identifier:
keyid:10:B6:5C:F6:FA:5E:1F:CA:E8:CF:84:C9:70:1E:38:BD:FB:63:AA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:24:f6:0a:45:b8:01:72:6e:1e:0b:a5:c5:93:84:7c:cd:5e:
a4:f3:d8:56:23:72:f1:af:36:a4:c3:95:c8:b4:86:a0:8c:32:
bb:6e:d1:05:2d:c3:be:9e:9d:30:eb:4c:44:32:b4:08:ae:f2:
de:e7:f7:13:60:a0:67:d5:ae:34:f8:76:1e:12:48:fe:fc:9a:
6e:73:99:b5:2d:df:cc:a3:87:2f:c4:dd:22:75:e5:f3:90:09:
0e:60:a2:f5:2a:69:71:fb:e9:bc:b4:be:0e:2a:93:b8:32:07:
e5:bf:12:98:00:2b:cf:ca:60:c0:b5:41:c0:09:5e:e0:28:2b:
30:63:c8:60:5e:ba:6b:0a:03:41:0c:76:94:5a:97:b0:f7:66:
75:0d:17:20:d8:7c:5d:69:92:fa:25:cc:86:2b:af:85:11:fc:
3e:9a:59:48:80:b1:11:cc:36:5c:11:a4:8b:4f:c4:41:59:93:
c3:1a:f0:d7:aa:36:36:eb:a7:6b:37:46:1e:c9:46:39:2e:f8:
9d:55:d9:9a:c4:16:8f:eb:0a:25:28:b3:b3:27:e9:ce:6e:d0:
cf:38:0a:74:f1:ef:2e:8b:00:3d:bd:9e:ac:d2:bf:22:6e:05:
15:59:ea:1d:ec:e4:01:db:d5:c6:22:5d:5d:0b:bd:05:15:80:
63:98:90:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:39:51 2026 by rpki-client