Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
File: EQhLfTeLmTxfXnSfajRN4j5FrQA.mft (raw, json)
Hash identifier: U+Zv4aVtGEJX4YzvfTOK9gG6au73wYiLDPeMu91FeRc=
Subject key identifier: 20:10:9A:59:17:B9:F7:39:0D:4C:9A:50:50:76:33:D7:DE:27:58:9C
Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
Certificate issuer: /CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Certificate serial: 019D29CEBCBC8E36F97D0604C4DC5646C434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
Manifest number: 0F66
Signing time: Thu 26 Mar 2026 11:01:47 +0000
Manifest this update: Thu 26 Mar 2026 11:01:47 +0000
Manifest next update: Fri 27 Mar 2026 11:01:47 +0000
Files and hashes: 1: 0QygA5EjmnNvfod7LRYIvHW6VOU.roa (hash: 9mJbNM5RFQ2gh5+u4PI5yU3lzfK+jzemRH8Ny/3lnYI=)
2: EQhLfTeLmTxfXnSfajRN4j5FrQA.crl (hash: ednT8XXw2sFQpMUw0dioPRjo3FFmkrlLB6g6OLg25Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:bc:bc:8e:36:f9:7d:06:04:c4:dc:56:46:c4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Validity
Not Before: Mar 26 11:01:47 2026 GMT
Not After : Mar 27 11:01:47 2026 GMT
Subject: CN=20109a5917b9f7390d4c9a50507633d7de27589c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:87:ae:f8:fa:6f:2b:fb:6a:0e:7f:5d:60:b3:
17:b6:ba:9a:98:60:af:25:c1:fb:03:79:a5:2f:eb:
c3:75:c3:ff:5d:67:7b:fc:cb:a1:78:08:06:72:05:
d9:ce:b7:9a:28:ad:49:ce:68:13:cc:19:e2:66:f8:
45:ed:34:e6:db:97:a5:70:c3:4e:d4:f0:9b:d9:f0:
7d:fa:f5:3a:c9:32:2f:c3:b0:3c:cf:9d:c9:4a:a0:
49:ad:40:45:9c:fb:63:ca:1f:7b:9e:ea:5e:a1:29:
be:58:e0:95:36:b1:28:95:5a:11:f3:c7:6a:dc:2c:
c5:d2:12:e1:ce:b1:57:f8:16:f5:f7:55:59:c0:02:
42:57:7a:bc:96:a3:9f:e0:17:a7:e2:f7:b9:90:28:
0c:28:c6:fc:e5:94:85:a7:ac:c0:da:51:34:b2:6a:
e4:8d:9a:e7:3c:3a:53:d5:40:5e:d3:dd:04:cd:40:
36:7d:b7:dd:e0:1e:b6:79:63:82:4b:38:11:1c:2e:
4d:9d:55:fb:30:5c:37:01:05:00:d1:29:ac:c7:cc:
3a:91:b3:b8:6f:64:ee:06:2f:e6:b2:e3:b6:b5:71:
b1:77:72:76:0f:2b:08:8d:2c:ac:95:df:dc:9f:fe:
3a:1f:cc:2e:8f:88:03:4f:1c:b6:5c:8b:d8:9c:34:
78:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:10:9A:59:17:B9:F7:39:0D:4C:9A:50:50:76:33:D7:DE:27:58:9C
X509v3 Authority Key Identifier:
keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:eb:88:94:2d:f2:23:5a:57:bc:e6:78:ed:e9:b7:55:50:45:
cd:5c:e5:d1:30:58:b0:8b:e9:a7:5b:29:40:e5:c0:e3:70:ba:
73:40:05:06:fc:55:17:42:97:d3:07:e7:f6:4e:d0:10:f8:c7:
8f:81:fa:de:5c:9f:90:51:77:98:c6:11:4e:5c:dd:78:b7:c3:
89:b6:6c:33:d8:85:a3:5b:ec:50:eb:96:0b:30:31:a9:da:9a:
b6:62:37:5c:10:f6:85:e2:55:ac:b0:b2:a2:3e:bc:e3:8a:6c:
be:92:37:3f:58:e9:04:0a:4b:5d:f0:9d:28:af:86:cc:b4:c3:
95:1f:57:c4:c3:f1:10:3d:be:04:02:89:aa:5e:04:78:fc:55:
8e:5e:93:2d:da:eb:b1:65:52:6c:53:f3:74:ce:d7:67:17:9a:
3f:bc:f3:a7:9e:16:d0:ac:29:2e:e8:f2:06:50:99:a9:11:36:
f4:aa:7f:7a:d5:ae:29:f8:a4:03:bd:32:b2:91:3f:9a:ee:f5:
47:66:59:c2:8c:89:c0:cb:45:37:41:1d:ff:af:60:d8:d4:aa:
f4:11:d1:db:e5:37:ae:71:60:c9:7d:91:32:bf:73:74:3c:b0:
ee:06:2c:d0:ac:6d:65:ce:8f:cc:f2:cb:18:b0:fa:38:c3:7d:
90:b7:e8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:24:06 2026 by rpki-client