Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
File: ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json)
Hash identifier: Y/SplemsGpxPScj1ZDP4Lt7mzDFvwMEHYrylaz84Tk4=
Subject key identifier: BA:E3:B7:E6:CC:BB:74:FB:D8:40:56:B8:FE:CC:1E:1E:BD:43:8A:D8
Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
Certificate issuer: /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Certificate serial: 019D2771F1F42363CFE63B5FB6978212861A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
Manifest number: 1748
Signing time: Thu 26 Mar 2026 00:01:11 +0000
Manifest this update: Thu 26 Mar 2026 00:01:11 +0000
Manifest next update: Fri 27 Mar 2026 00:01:11 +0000
Files and hashes: 1: Ala0VEiwCJ-XgbkKMuOQm4WQGUM.roa (hash: kHPaxmGFnvypL4VtsE3od5qxMzTcY3hqjMVSes+1x+o=)
2: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: tU3Bbb8mTTtzB3s6BN4J0Wybn1g004oEp3XOfQ2CDPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f1:f4:23:63:cf:e6:3b:5f:b6:97:82:12:86:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Validity
Not Before: Mar 26 00:01:11 2026 GMT
Not After : Mar 27 00:01:11 2026 GMT
Subject: CN=bae3b7e6ccbb74fbd84056b8fecc1e1ebd438ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5a:43:4c:10:05:ab:8e:cb:dc:06:8f:bf:dd:
9f:d4:c7:85:17:e0:0f:75:72:c0:6a:30:d0:8f:87:
b7:09:a6:39:6e:09:21:14:0d:c6:01:a2:88:fb:70:
12:68:d3:50:05:fb:17:b8:05:f9:35:9a:a2:c5:3e:
a6:be:a3:da:c6:b7:da:ce:15:a6:d8:b3:4a:eb:31:
d0:ab:58:52:2a:d6:82:2e:02:ff:95:bf:f0:fb:81:
33:4c:0a:0d:e3:3a:81:e9:a0:13:4e:8a:00:79:eb:
04:5a:cc:58:4e:d8:bb:20:77:84:6c:f3:73:7f:01:
68:ed:01:2f:94:24:43:7b:93:80:d3:a0:74:a5:07:
b2:46:70:62:45:b3:22:02:ec:18:12:b8:0c:6a:92:
14:59:6f:44:7c:31:f0:11:42:63:b3:25:ec:e6:25:
00:e0:2a:ad:84:ca:99:4d:3c:c3:f2:4e:a6:d3:e3:
08:28:36:cf:55:9a:97:a1:4f:49:bd:55:9b:60:1b:
43:65:3f:71:8c:41:ee:14:5c:ef:a2:49:03:ae:52:
7e:ea:11:aa:57:58:13:f0:94:f6:7b:c4:df:1a:03:
b0:50:b6:a6:fd:8d:57:17:86:1e:08:0f:b3:b3:40:
bd:2f:b1:25:3a:7c:47:66:95:c9:e1:cb:f1:c8:3c:
83:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E3:B7:E6:CC:BB:74:FB:D8:40:56:B8:FE:CC:1E:1E:BD:43:8A:D8
X509v3 Authority Key Identifier:
keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:81:35:ed:44:06:60:3b:79:6b:88:4c:41:78:ab:c2:40:5e:
a7:f3:3b:bb:ed:be:d9:5c:59:31:2c:e9:54:cc:68:04:e5:65:
9a:cc:e0:f4:b4:e8:e1:06:1a:97:b0:70:52:98:e0:9c:d6:31:
e5:bb:9a:25:46:7c:bb:93:98:40:48:1c:43:c0:6f:71:26:ea:
ab:ae:e2:19:1e:94:40:6d:af:da:69:67:66:43:ca:ba:89:1e:
3d:98:45:d3:f2:cc:c0:75:db:18:20:cc:eb:1e:71:94:e4:03:
01:4f:19:62:89:d2:83:47:1b:79:7d:ca:27:1d:0d:fa:bb:0b:
8d:b7:ef:e1:7a:70:44:67:4e:3e:e1:1d:62:79:19:e3:3d:0e:
35:a0:db:15:eb:46:46:10:f4:58:b0:18:e0:e6:1d:51:07:a3:
05:86:60:0f:82:d4:1a:c1:ca:79:b9:6f:53:28:66:db:8a:b2:
bd:b6:32:fa:1b:25:d9:02:0f:37:d2:ac:ce:83:28:bf:1c:4d:
ca:5b:5b:ac:45:08:e8:22:3f:f6:03:cf:88:c8:55:c4:54:19:
51:fc:0f:27:4e:c1:dd:48:37:05:1b:32:d5:cd:ae:bc:61:ed:
d8:e6:18:05:28:b7:75:b0:d5:f7:ae:92:5a:5a:a7:a8:54:96:
25:3f:c6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:22:38 2026 by rpki-client