Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
File: tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft (raw, json)
Hash identifier: 5aAzMLBCdAVoYdBaV4I2TLkB3OntRsblbZmDb7R6so8=
Subject key identifier: DA:59:D5:45:97:43:E3:A0:9E:C4:A1:08:C5:D7:0E:A2:59:5E:BB:F3
Authority key identifier: B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73
Certificate issuer: /CN=b443b3486de7826fd6b0e2aec026597b6207b373
Certificate serial: 019D26CD1133DA582A4039CE0C1855B825E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
Manifest number: 08EA
Signing time: Wed 25 Mar 2026 21:01:06 +0000
Manifest this update: Wed 25 Mar 2026 21:01:06 +0000
Manifest next update: Thu 26 Mar 2026 21:01:06 +0000
Files and hashes: 1: sy5oGQjck-d2g9h80CULm1W8bto.roa (hash: emX5coGh9f+3oxTyFscmv5YiBYISS6FAufBHJnJSvLA=)
2: tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl (hash: osf3YMYZ4mejLKqGnFh7J015pbvAr9JeGeUp3zIeI1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:11:33:da:58:2a:40:39:ce:0c:18:55:b8:25:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b443b3486de7826fd6b0e2aec026597b6207b373
Validity
Not Before: Mar 25 21:01:06 2026 GMT
Not After : Mar 26 21:01:06 2026 GMT
Subject: CN=da59d5459743e3a09ec4a108c5d70ea2595ebbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:41:93:94:59:5d:f6:7b:6a:ee:55:49:30:88:
5b:76:72:21:0f:f0:78:aa:31:f3:6a:96:41:10:23:
35:37:a2:e7:50:d0:ce:e6:8f:20:54:9b:c6:c2:f5:
d9:76:75:33:47:5e:ec:2e:3f:75:46:cc:2c:72:89:
08:81:46:a4:a9:1e:f0:08:c8:75:9b:03:d5:02:07:
59:cc:38:10:70:95:88:50:55:c9:09:8b:4a:92:f7:
80:0d:98:33:e2:3d:33:ff:5f:79:70:dc:31:82:07:
9b:e0:b1:33:52:cc:41:ff:8e:72:98:2f:83:f7:44:
25:7c:38:78:53:95:6d:96:ea:9f:f7:d0:c1:85:45:
b5:98:2c:b6:5e:ec:20:2a:b7:aa:ee:ee:79:51:83:
64:c4:3b:a1:c8:1b:ae:6c:79:51:da:f7:96:56:15:
95:58:34:e0:ec:36:89:6e:e8:7b:bd:32:d3:e6:c9:
73:1d:be:86:4c:62:43:ec:ad:dd:d3:be:d6:20:92:
02:b7:ce:50:a2:2d:f1:58:20:05:28:96:b5:69:47:
bb:d5:13:4b:ab:e1:73:7d:bb:32:5b:09:44:ae:01:
0c:27:7c:94:6b:81:3f:97:c4:92:be:f2:61:31:7a:
56:4a:47:ac:d1:fc:30:76:ae:4c:5d:10:cb:4f:47:
55:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:59:D5:45:97:43:E3:A0:9E:C4:A1:08:C5:D7:0E:A2:59:5E:BB:F3
X509v3 Authority Key Identifier:
keyid:B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:3a:72:f0:ec:9b:f5:03:ea:af:5a:55:53:e5:fe:74:4d:56:
47:67:9b:15:eb:5d:47:68:75:3a:f2:a0:5b:99:73:37:4a:c1:
e5:de:77:84:c2:98:d7:e4:38:d7:1a:b7:20:15:a9:9d:a8:fa:
a3:20:3e:45:40:67:3d:a6:fd:19:99:2c:13:c8:65:05:3a:04:
3e:8c:33:3c:7e:ea:ba:f4:b8:96:bc:6d:6c:15:51:90:80:59:
55:53:8e:d8:bb:c2:59:37:b3:4b:8b:6b:da:8c:ca:e0:ad:1a:
d8:95:a3:86:de:d8:28:5b:61:21:87:71:c2:fd:d6:23:ca:a7:
4f:63:dd:02:cd:02:92:1a:35:ab:3b:a2:b2:cd:6b:b7:11:68:
9f:da:d9:15:54:23:99:ed:d0:70:9b:63:a0:f6:08:1b:70:5b:
ba:30:8c:5f:05:1a:f0:38:df:cf:61:62:49:5f:1b:2d:04:6d:
8d:63:dd:f3:a7:a6:67:26:e9:26:34:19:4f:6b:0a:c5:d4:66:
22:7d:00:aa:f8:8b:e1:2f:9a:d1:6e:42:7f:e9:f5:5b:e1:7f:
1c:51:97:6b:e1:bf:26:03:85:61:ef:f7:93:76:30:40:1e:50:
99:e7:c3:de:be:cc:33:96:23:06:27:23:20:35:b6:59:e8:a9:
30:a5:80:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:49 2026 by rpki-client