Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
File: EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft (raw, json)
Hash identifier: CSzSFBayTdWXBk0MlSTW3MA18Gh126S9Pp6+m1EN3Ak=
Subject key identifier: CE:C9:5E:5E:9C:5A:9F:8F:84:8D:45:3F:CA:D9:05:53:23:F7:92:14
Authority key identifier: 10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93
Certificate issuer: /CN=1038d7a2954a32d2afd16b88b363b390681cd593
Certificate serial: 019FAA19F1C228FFA5F963D3C960C1154D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
Manifest number: 12A6
Signing time: Tue 28 Jul 2026 19:00:54 +0000
Manifest this update: Tue 28 Jul 2026 19:00:54 +0000
Manifest next update: Wed 29 Jul 2026 19:00:54 +0000
Files and hashes: 1: EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl (hash: /UvQC5EnGLSaoxiwE63iDg6FiSHyce98s7UlLzu4T4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:f1:c2:28:ff:a5:f9:63:d3:c9:60:c1:15:4d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1038d7a2954a32d2afd16b88b363b390681cd593
Validity
Not Before: Jul 28 19:00:54 2026 GMT
Not After : Jul 29 19:00:54 2026 GMT
Subject: CN=cec95e5e9c5a9f8f848d453fcad9055323f79214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5e:42:80:ff:d7:2e:78:3f:01:01:aa:4d:11:
62:47:a1:78:b6:46:36:4c:f9:4d:21:01:cf:3e:a3:
39:65:92:e7:07:85:31:83:7c:1b:33:fa:7b:c2:6d:
2c:47:07:30:32:4a:69:08:11:00:58:50:8b:a6:1e:
c4:d0:78:e6:15:0e:ad:43:09:65:f5:3c:a2:67:8e:
cd:7e:ca:e2:ad:b5:bc:eb:b9:3c:a0:5f:d0:4a:d9:
c0:f0:cc:85:88:57:d4:92:fe:57:8e:26:3a:84:09:
0a:18:9a:55:72:0d:8c:71:4e:cc:79:80:05:ab:89:
5d:03:1b:95:ce:d9:4d:78:0c:23:24:4b:21:91:6d:
42:fa:8b:5c:54:50:34:b3:c6:21:3d:0a:52:6d:07:
d8:c4:62:17:46:23:5b:31:56:fd:c5:b2:de:11:86:
ea:0f:90:a7:8f:e8:60:e9:1f:e8:4b:f1:26:96:97:
e0:59:58:95:2e:db:4f:5e:df:a3:08:59:01:45:a2:
93:9f:e7:1f:d6:02:1e:1b:aa:65:8c:f0:9c:a1:2d:
bd:1b:3d:c8:5c:11:b9:15:56:c4:97:63:68:35:1c:
2a:5b:05:19:83:1e:97:b0:1a:a5:02:92:63:97:e6:
ad:eb:7d:38:17:7b:b2:f0:61:6f:24:86:0c:9d:2c:
4d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C9:5E:5E:9C:5A:9F:8F:84:8D:45:3F:CA:D9:05:53:23:F7:92:14
X509v3 Authority Key Identifier:
keyid:10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7a:99:f8:81:88:34:99:b7:10:b1:d8:c7:23:c5:3b:37:17:
40:29:94:f4:eb:11:0c:e3:04:5b:af:94:a7:eb:05:73:22:1a:
2d:f8:c1:be:16:87:d0:63:13:71:19:de:3a:10:66:63:3b:78:
3c:38:44:1f:85:47:a1:3b:68:c3:73:dc:34:ae:8d:7b:c6:ad:
92:63:de:38:98:0a:93:76:c6:3c:70:a4:1a:9c:6c:ae:ec:08:
e1:f5:50:95:ff:ae:c3:77:64:6b:36:df:be:54:8a:73:d9:05:
57:d3:e5:c2:34:d9:dd:a9:7e:c1:88:a1:86:ea:98:06:db:67:
68:55:8f:74:44:43:93:5b:6c:42:28:24:8f:bb:b1:f3:31:20:
f0:e2:30:97:89:fe:34:64:67:b3:83:50:7e:c3:d3:ce:30:91:
46:3a:1a:c9:9e:36:8b:20:e5:6b:c1:cb:d5:0f:f9:44:86:fb:
59:7f:f4:83:6f:30:5a:a7:fb:08:19:b5:80:e8:70:69:cf:9e:
b5:4d:d4:c9:57:e6:fa:76:3f:a3:ed:37:7d:f1:9c:c8:29:40:
20:25:be:ab:7d:cc:b6:d1:46:8e:5f:2a:b2:a9:e8:95:a8:77:
97:45:86:c9:07:85:67:f5:fa:9e:b8:42:c8:2a:2c:39:07:42:
5b:dc:a0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:05:54 2026 by rpki-client