Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/0fad6f-e9d9-48b6-bd11-b0f5367c01f4/1/EQ_DrECkDY4ObxdbgrOP8fj4haA.mft
File: EQ_DrECkDY4ObxdbgrOP8fj4haA.mft (raw, json)
Hash identifier: YHvLbk7Q81ZsWB+vIMATJy6+q0jpbEA27Ap+sw92pvY=
Subject key identifier: CB:23:2E:22:08:18:C2:EA:B9:05:40:9D:3E:AE:B3:C2:16:EA:F0:E5
Authority key identifier: 11:0F:C3:AC:40:A4:0D:8E:0E:6F:17:5B:82:B3:8F:F1:F8:F8:85:A0
Certificate issuer: /CN=110fc3ac40a40d8e0e6f175b82b38ff1f8f885a0
Certificate serial: 01A12CFC20DD9CA0A3872E98C42301995B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ_DrECkDY4ObxdbgrOP8fj4haA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/0fad6f-e9d9-48b6-bd11-b0f5367c01f4/1/EQ_DrECkDY4ObxdbgrOP8fj4haA.mft
Manifest number: 7D
Signing time: Sun 11 Oct 2026 22:01:23 +0000
Manifest this update: Sun 11 Oct 2026 22:01:23 +0000
Manifest next update: Mon 12 Oct 2026 22:01:23 +0000
Files and hashes: 1: EQ_DrECkDY4ObxdbgrOP8fj4haA.crl (hash: tq9AUMkBVZHFycfMak4VvXHaY8pwadUMHr2aNvAyDIw=)
2: TUf12jhMmcLOANf7cgOVkVeYwW8.roa (hash: 7Fp06A3yhCRN7VwSugruMcOv/NybhwRNEN+T2UwHQGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/0fad6f-e9d9-48b6-bd11-b0f5367c01f4/1/EQ_DrECkDY4ObxdbgrOP8fj4haA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/0fad6f-e9d9-48b6-bd11-b0f5367c01f4/1/EQ_DrECkDY4ObxdbgrOP8fj4haA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ_DrECkDY4ObxdbgrOP8fj4haA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:fc:20:dd:9c:a0:a3:87:2e:98:c4:23:01:99:5b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110fc3ac40a40d8e0e6f175b82b38ff1f8f885a0
Validity
Not Before: Oct 11 22:01:23 2026 GMT
Not After : Oct 12 22:01:23 2026 GMT
Subject: CN=cb232e220818c2eab905409d3eaeb3c216eaf0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f8:17:96:49:ee:7d:62:e9:31:59:a5:18:ac:
69:9d:96:fd:01:09:59:85:b3:44:e6:fb:52:43:83:
c5:27:58:f6:4b:65:69:7b:b8:02:cf:13:ed:66:02:
da:c3:00:72:24:7d:d7:ff:d4:26:ad:34:99:f3:24:
12:a2:c5:81:02:fd:96:c7:a2:46:b4:e6:26:da:a3:
2e:91:47:20:f3:d4:20:4c:9d:60:af:5b:eb:b4:0d:
c2:77:d0:6f:0a:c4:69:2c:df:c8:da:e6:5c:38:4a:
75:39:1f:78:82:4c:5f:54:3b:96:ee:db:8b:f7:e9:
1f:c1:8f:11:4a:7c:36:9d:7f:8c:de:69:e1:53:80:
94:69:25:64:a2:e0:90:98:2e:03:62:58:7d:c6:2d:
b0:14:eb:79:e7:3c:7e:b5:a6:e6:9d:f1:c5:28:23:
a5:4f:01:d7:5d:33:52:c4:35:88:4d:79:7e:8b:58:
97:16:27:e2:e5:3d:5d:3d:83:09:c3:4a:9e:ae:55:
76:eb:e8:5f:bc:b7:b6:eb:69:c6:0e:ae:35:16:af:
8e:b8:0f:d3:51:72:9e:8c:47:81:d9:61:21:fb:f2:
63:a8:da:ca:14:94:91:48:22:eb:28:c9:4c:b7:54:
37:f3:91:5f:2d:cc:d2:34:fd:ad:2c:0a:2d:b4:2a:
0d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:23:2E:22:08:18:C2:EA:B9:05:40:9D:3E:AE:B3:C2:16:EA:F0:E5
X509v3 Authority Key Identifier:
keyid:11:0F:C3:AC:40:A4:0D:8E:0E:6F:17:5B:82:B3:8F:F1:F8:F8:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ_DrECkDY4ObxdbgrOP8fj4haA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0fad6f-e9d9-48b6-bd11-b0f5367c01f4/1/EQ_DrECkDY4ObxdbgrOP8fj4haA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0fad6f-e9d9-48b6-bd11-b0f5367c01f4/1/EQ_DrECkDY4ObxdbgrOP8fj4haA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:87:64:ea:b9:eb:e3:b3:c9:20:91:5e:2b:4c:7c:ed:85:c1:
7d:43:66:e5:4e:5d:e6:00:da:f8:58:f5:8a:a5:3f:fb:61:c4:
ad:18:b8:ae:99:e0:d6:45:90:b5:27:45:30:2b:53:64:15:59:
0b:bd:ab:8a:d7:2c:fb:2b:c0:6e:84:e3:9a:ae:e4:1e:75:90:
d6:5e:65:da:56:7c:a3:3c:71:f5:b7:44:33:17:fb:b2:45:21:
f4:ad:dc:db:3b:15:04:b6:6d:d8:ae:70:71:0d:8c:40:0c:51:
37:38:c0:1d:9f:c8:5e:0d:f7:e6:84:78:c1:5d:0d:ce:bc:d2:
86:5e:b3:e2:06:a0:86:12:9f:be:af:b9:c0:f6:9d:3a:1b:48:
70:11:ce:e6:6d:80:f5:1e:a0:d6:50:41:28:89:80:af:f4:c5:
96:00:ff:77:1f:c3:3f:01:a7:0b:7d:1f:74:27:da:f8:21:3f:
7b:3c:03:a1:c2:55:28:49:b3:47:24:a8:70:89:25:00:18:f1:
c9:8e:3b:6a:a0:60:bf:74:02:f3:4f:3e:37:0c:c8:51:a6:11:
fb:5b:ab:19:6c:a7:16:d4:a1:84:88:9a:70:59:d4:93:c1:b5:
81:f9:c4:75:90:b5:96:a4:3d:c5:cc:70:4e:ce:94:35:5b:31:
32:22:3b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:19:25 2026 by rpki-client