Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft
File: EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft (raw, json)
Hash identifier: jfDsS4+Ms7H5zdRlGb7ZsVTbPBuX5HtAZV3xZ66ZcxE=
Subject key identifier: 1D:F8:90:4D:2C:77:4A:A0:84:80:B3:20:FF:6D:F6:77:E3:7A:31:67
Authority key identifier: 10:83:F3:F1:95:97:4F:0E:90:08:4E:0E:32:7F:F5:B6:67:E6:FD:90
Certificate issuer: /CN=1083f3f195974f0e90084e0e327ff5b667e6fd90
Certificate serial: 019D28BB1E58A902C3E47ABA99B2E635841C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft
Manifest number: 0821
Signing time: Thu 26 Mar 2026 06:00:44 +0000
Manifest this update: Thu 26 Mar 2026 06:00:44 +0000
Manifest next update: Fri 27 Mar 2026 06:00:44 +0000
Files and hashes: 1: EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.crl (hash: OB4CDZF6bdRw4VRaQmtWGfQyT4gUQkJ0BKJV2gL9V3Q=)
2: mFyMx5ZIFOiSbuI1MNn2-mZXld8.roa (hash: AzwHXOKxziHRT6MyBbYL5hwDOFonBhr6YG4FbSU0MzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:1e:58:a9:02:c3:e4:7a:ba:99:b2:e6:35:84:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1083f3f195974f0e90084e0e327ff5b667e6fd90
Validity
Not Before: Mar 26 06:00:44 2026 GMT
Not After : Mar 27 06:00:44 2026 GMT
Subject: CN=1df8904d2c774aa08480b320ff6df677e37a3167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:7f:8b:08:d5:88:92:45:41:aa:a5:74:cf:
0c:bd:72:e1:ce:ad:c6:d0:60:dc:68:3d:46:fb:9e:
a7:6c:07:f1:11:b0:d0:1b:eb:f6:d0:73:69:f1:3c:
fa:15:3f:ec:f3:eb:c3:48:6d:28:07:82:f0:93:eb:
2a:9e:91:6e:66:50:78:ec:64:31:db:8f:c3:db:85:
77:3c:fb:77:41:4f:8c:93:48:fa:15:95:ad:a0:38:
1d:0e:56:10:67:4b:eb:9f:e2:ce:f8:5d:8d:f3:de:
4e:e9:54:41:5b:f4:06:ab:68:a6:be:05:97:64:e4:
0e:57:58:41:ad:dc:fa:2c:25:4b:89:02:75:77:7c:
41:48:b6:b2:19:f3:33:b9:6b:d5:8c:fa:9d:7e:ab:
f0:25:de:96:ef:37:ad:d3:cd:e0:cc:81:9c:40:7c:
10:a2:41:1c:9f:66:18:1b:28:1e:96:21:6c:41:e8:
fd:c7:61:ee:02:17:6b:33:d3:83:e6:39:9a:0c:5a:
4d:85:1b:3a:97:a7:5a:dc:ec:c5:1e:50:3d:d3:49:
39:6a:41:b4:b2:26:8a:d7:d5:1f:01:ea:df:b9:97:
d9:64:8d:c6:08:50:d4:29:5b:f8:32:5d:01:d4:e6:
a4:0f:87:7a:ed:c1:5e:be:13:ff:d8:46:05:43:f3:
37:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F8:90:4D:2C:77:4A:A0:84:80:B3:20:FF:6D:F6:77:E3:7A:31:67
X509v3 Authority Key Identifier:
keyid:10:83:F3:F1:95:97:4F:0E:90:08:4E:0E:32:7F:F5:B6:67:E6:FD:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:08:bb:85:4d:89:fc:0b:fd:f8:d3:34:e0:1b:d8:a7:db:85:
b6:70:60:bc:8e:f4:5f:83:f4:29:04:f9:d6:7d:fa:78:9c:8e:
f5:86:cf:24:46:ce:4b:77:c0:62:bb:75:19:9c:db:9a:04:6c:
0a:fc:de:31:f0:bb:4e:1c:53:70:57:89:90:6b:8d:72:4b:71:
f3:c4:23:a1:5d:9b:d8:dc:3e:df:81:da:98:2a:4f:4c:d4:19:
a6:6c:66:3f:b6:9f:f7:d2:7c:a1:07:51:0f:49:f3:48:8a:0e:
2a:e4:0a:40:5c:8c:81:f3:c4:05:8b:10:ed:3f:b2:f2:f4:63:
de:a0:c2:0e:65:00:61:6d:87:92:06:f6:36:1c:80:b0:51:f9:
f4:87:ea:25:59:4f:77:3f:e2:8d:a7:e9:39:f9:6f:00:cf:6a:
7a:c8:5e:de:ef:6e:17:52:13:b6:7d:5b:60:49:41:45:2e:1b:
73:e9:bd:09:d5:11:2f:f7:56:e8:d7:1b:fa:7b:fa:fe:04:97:
37:f6:e9:df:78:ad:fb:98:2c:e9:cb:d1:35:1f:31:38:ae:58:
41:2b:c9:71:76:41:76:8a:df:f5:a1:f8:f9:eb:82:dd:7f:b3:
2b:34:50:63:e6:bc:ee:e4:13:1e:d2:54:3b:7f:07:26:59:4d:
ba:5d:6d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:55:56 2026 by rpki-client