Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
File: EBIhZFi9dgX_lVQP0gTrk6R385M.mft (raw, json)
Hash identifier: 1oonWw3EcmqMdu5H68HEtFXEO2uGRYaoDS2akxBc5hk=
Subject key identifier: EA:9A:B9:8F:8B:9D:52:91:41:F9:C5:3A:89:59:F4:FA:30:99:BD:05
Authority key identifier: 10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93
Certificate issuer: /CN=1012216458bd7605ff95540fd204eb93a477f393
Certificate serial: 019D27049C13D2C63B5458BD71A807A72FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
Manifest number: 0E3C
Signing time: Wed 25 Mar 2026 22:01:46 +0000
Manifest this update: Wed 25 Mar 2026 22:01:46 +0000
Manifest next update: Thu 26 Mar 2026 22:01:46 +0000
Files and hashes: 1: EBIhZFi9dgX_lVQP0gTrk6R385M.crl (hash: B84nLcviwYZxLXPAlwZafnF4PKE7Kz21YkbrNaoxStI=)
2: pdO2f_0-TednGBjVCw96KQJOAEQ.roa (hash: kVqemUa01+t3sS70xHfRu7UweHBrH2bnhmrHrJ9ewxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:9c:13:d2:c6:3b:54:58:bd:71:a8:07:a7:2f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1012216458bd7605ff95540fd204eb93a477f393
Validity
Not Before: Mar 25 22:01:46 2026 GMT
Not After : Mar 26 22:01:46 2026 GMT
Subject: CN=ea9ab98f8b9d529141f9c53a8959f4fa3099bd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:82:45:1f:24:2b:9b:99:a0:40:47:91:78:9c:
9a:f6:f5:60:1b:18:86:1f:b9:8d:a0:ea:9d:fc:78:
ff:7d:3e:79:22:f5:b3:45:97:df:58:10:fe:b8:72:
39:3c:87:bd:49:b7:65:95:04:c3:d8:47:a3:96:4c:
49:86:4d:0a:a3:26:bd:96:23:fc:e9:44:7e:d1:59:
19:ce:94:51:93:89:bc:c9:49:0b:f5:9a:bb:37:c2:
3d:13:24:05:8a:34:41:7f:6a:43:fc:e7:ee:e5:09:
57:2d:11:ef:61:02:51:f6:a1:9d:5e:b1:57:7c:93:
fb:b2:a5:6e:1b:96:40:a4:22:46:96:c6:5b:72:1e:
12:01:2b:e0:94:3d:e7:57:2e:1f:f8:cf:4b:0e:35:
d7:83:07:9e:a3:cd:29:48:fa:ce:3b:17:fb:93:7b:
48:9a:bc:d8:df:bc:c5:6a:9a:d6:9a:a2:e0:4f:59:
cb:06:a1:21:0d:74:12:b7:67:2a:a2:e0:f6:87:2a:
d1:49:c5:23:86:21:41:05:51:d0:60:8a:c2:9f:63:
c1:dc:cf:f0:81:97:3d:b0:1d:96:e8:d4:1e:1e:9a:
c6:b4:ce:20:a7:24:8c:80:18:7f:ef:2d:2d:84:18:
6f:ac:ed:0f:60:da:e2:61:24:d3:7f:25:f2:f3:0f:
b4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9A:B9:8F:8B:9D:52:91:41:F9:C5:3A:89:59:F4:FA:30:99:BD:05
X509v3 Authority Key Identifier:
keyid:10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f8:5c:6c:44:9d:28:d0:11:f5:66:59:f4:86:67:c6:d1:51:
9b:63:9f:80:26:32:92:13:26:95:1e:ce:ff:f6:5a:05:e8:62:
cd:e8:4d:59:d1:68:77:cf:49:fe:48:3e:cf:8a:be:df:9b:ae:
a8:90:28:90:51:b1:93:8b:aa:64:5d:16:82:ed:78:c1:7d:7b:
5b:9c:24:aa:a0:85:85:a6:ae:3b:fe:e5:73:fd:35:63:18:cc:
de:32:eb:68:f9:c8:5a:e7:c5:4e:01:63:b3:4d:1d:75:c0:4d:
5d:d6:eb:cc:ae:43:b0:22:f1:8e:6c:95:a6:3b:a9:76:0d:b7:
87:a2:cb:a6:f7:57:36:c3:d0:ba:20:4d:2a:36:ef:b7:5a:9c:
24:b1:c3:dd:45:e5:a2:89:59:b9:4e:b2:47:0e:1f:10:d0:4e:
cd:3e:55:4e:37:00:b2:4e:80:ca:56:07:39:5c:dc:15:e9:4a:
8a:15:d0:ac:29:3a:32:9c:ad:50:f9:c7:af:a3:56:29:e0:0d:
a5:c8:c1:f8:5f:b2:19:6d:84:75:dd:ea:25:42:d3:c5:0c:d6:
d2:f4:90:b5:bc:50:fc:59:81:8a:ac:04:95:37:31:19:9b:20:
64:d7:b4:87:52:0a:2f:51:a8:9d:eb:6d:4e:3a:b9:53:f2:be:
e6:b0:28:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:22 2026 by rpki-client