
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
File: EIPENieVN9T3JtIxDO8UpC8bK4o.mft (raw, json)
Hash identifier: PWB9tjzkOUyokrKlMGjJYO7pSTXzc5IEsPWuUDRaHWE=
Subject key identifier: BC:7A:5B:0D:75:C7:15:D0:79:22:67:FA:FE:73:9D:B0:BB:47:1F:87
Authority key identifier: 10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A
Certificate issuer: /CN=1083c436279537d4f726d2310cef14a42f1b2b8a
Certificate serial: 019D25F1B6B3EBBB054C52B3DB00EF980591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
Manifest number: 05A1
Signing time: Wed 25 Mar 2026 17:01:31 +0000
Manifest this update: Wed 25 Mar 2026 17:01:31 +0000
Manifest next update: Thu 26 Mar 2026 17:01:31 +0000
Files and hashes: 1: BRc2c3EDcZakZfA0W_dY8bIp5oc.roa (hash: 8BEI3S2LfJbhhRBz8Cr9mCLe0EnYlfgBmkbf0JQfcno=)
2: EIPENieVN9T3JtIxDO8UpC8bK4o.crl (hash: sYzgP1vTqreVRf8WdHlUtoKoN6VgLrSFfKoJGa9zSCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:b6:b3:eb:bb:05:4c:52:b3:db:00:ef:98:05:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1083c436279537d4f726d2310cef14a42f1b2b8a
Validity
Not Before: Mar 25 17:01:31 2026 GMT
Not After : Mar 26 17:01:31 2026 GMT
Subject: CN=bc7a5b0d75c715d0792267fafe739db0bb471f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:25:6f:82:8f:1c:dc:66:14:17:5b:e7:a7:08:
97:c6:34:2e:77:1a:a2:5a:2d:2e:b9:e9:89:c2:ef:
31:66:54:be:1c:83:7f:b2:3d:c3:ba:c9:54:46:15:
ca:ab:30:f9:98:74:8c:ff:32:da:f7:d7:1a:3e:d7:
44:9c:2a:8c:2a:9f:28:eb:d9:87:3b:0d:29:a5:bb:
b1:fa:7b:a7:3d:cf:ea:af:df:6f:9a:53:c6:07:ce:
31:3c:65:51:6d:f6:59:26:57:5d:10:85:db:9f:12:
03:1f:63:56:41:9a:d0:07:7e:15:40:ee:28:d5:5a:
0f:fa:c6:cf:8a:91:19:7b:23:63:b2:c7:72:56:c2:
39:60:27:e2:56:32:1d:b9:08:68:2e:ea:41:ba:98:
18:e0:eb:f0:3d:19:1d:5f:9c:67:66:e1:01:98:41:
ef:4e:49:e1:ef:d0:78:c3:df:0e:b7:7f:9b:74:66:
34:1c:a3:c1:ba:80:6c:3e:e4:b7:01:76:76:a9:e3:
33:7f:c5:cf:58:6a:95:ea:75:c9:8a:4d:f7:32:85:
bb:18:4e:2a:3d:be:d1:c9:84:b7:3e:3e:1a:cd:ae:
62:23:77:6b:cd:77:23:81:8a:68:e6:35:2c:69:83:
99:9d:fd:79:7d:26:84:da:77:ee:26:85:f9:3d:20:
96:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7A:5B:0D:75:C7:15:D0:79:22:67:FA:FE:73:9D:B0:BB:47:1F:87
X509v3 Authority Key Identifier:
keyid:10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d0:5b:de:31:c1:78:41:60:74:45:74:ce:cd:f4:03:76:3a:
ab:4a:58:77:2e:fc:b4:3d:b7:a3:78:fa:f9:88:c6:40:0f:1f:
83:ee:e4:7f:3a:0c:77:34:40:dc:3d:eb:63:69:c5:00:67:f2:
5b:e3:9c:b8:9f:99:3f:30:c3:ad:67:6b:c6:18:e5:91:08:c9:
eb:3b:d6:89:ef:7b:40:59:8f:81:01:80:af:d7:3d:e5:3f:68:
67:32:53:59:73:f9:d1:6d:7f:41:aa:9c:ad:74:89:e5:08:d5:
17:1d:cb:95:89:d1:1f:51:93:65:31:cd:7e:10:8f:1d:e1:ed:
10:43:d9:d1:4e:4e:96:dc:bf:af:4c:cd:db:bf:88:dc:cc:9d:
bc:64:8c:3f:18:68:33:1c:ba:ed:ed:d1:24:35:0c:55:aa:81:
44:c5:75:56:f1:74:52:34:21:a2:d0:a5:a5:3e:cd:cc:ad:77:
a5:b5:9c:35:fc:a5:9e:0d:dd:38:7a:72:18:25:46:43:a3:1f:
a3:66:d1:2f:0d:5f:a3:eb:64:b4:b0:c1:9c:6e:45:5e:03:f1:
7a:eb:1a:4b:65:b1:92:73:4f:fa:2a:39:dd:67:74:97:e3:c2:
11:f6:bb:08:e5:66:09:9f:d4:d9:16:f3:0f:3a:0e:fc:fb:58:
9e:aa:fb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:49:08 2026 by rpki-client