Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
File: EA5EySrUkxGKStK6gRRfHTShi8o.mft (raw, json)
Hash identifier: vBNPNKFpohpCTWL1kleh9E5X/K9HgCKmJY+Zhx7XoAk=
Subject key identifier: 1F:F9:6B:45:AC:26:29:68:04:83:66:D2:8A:4C:71:D2:B0:13:5C:C6
Authority key identifier: 10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
Certificate issuer: /CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Certificate serial: 019D26CD47D1F0C2CEE9C9A813B32EBD0D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
Manifest number: 124E
Signing time: Wed 25 Mar 2026 21:01:20 +0000
Manifest this update: Wed 25 Mar 2026 21:01:20 +0000
Manifest next update: Thu 26 Mar 2026 21:01:20 +0000
Files and hashes: 1: EA5EySrUkxGKStK6gRRfHTShi8o.crl (hash: byQGg2l0uHHaEXiWFR8Cicw5IgIS72hj6Ib1qqAKlQg=)
2: bttqOJvjdl84KdYPjPqF6BIYkr0.roa (hash: pBThqHeKOS0Gks/36PiEC85JnL2dOeWyKsS2nm104jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:47:d1:f0:c2:ce:e9:c9:a8:13:b3:2e:bd:0d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Validity
Not Before: Mar 25 21:01:20 2026 GMT
Not After : Mar 26 21:01:20 2026 GMT
Subject: CN=1ff96b45ac262968048366d28a4c71d2b0135cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:fb:8b:07:cc:45:ba:a0:60:e0:51:ff:25:
a8:58:97:ca:fc:80:0f:7b:b0:3d:30:43:af:bd:1d:
4d:c7:31:2e:66:9a:9c:44:43:9b:ec:60:9c:47:06:
6c:32:65:86:ee:ce:e8:9c:86:9a:86:78:94:25:ef:
9a:84:72:84:1e:5e:10:bd:be:a9:6d:05:96:d7:25:
6b:d3:0d:8d:3b:84:48:0d:69:1c:8b:b4:78:a5:a4:
2d:e5:5b:c0:6e:34:2d:78:65:36:86:58:07:13:50:
9e:d7:91:0b:03:51:56:42:12:e8:6a:b0:c9:cf:60:
c8:84:13:50:05:4a:8a:2a:7c:20:bb:ed:24:2f:c6:
f7:b0:b7:01:b7:8a:a7:b5:41:b2:b4:4c:6d:00:46:
82:9a:c8:f4:a3:26:b4:95:e3:e2:4a:b7:7a:c6:7d:
2c:bc:c3:93:21:1e:ba:6d:50:b6:2d:4c:dc:54:7f:
f5:5c:ac:23:c3:7e:70:0c:e3:29:4a:c6:44:40:47:
2e:09:66:f6:33:f6:c0:dd:1d:13:79:d6:b9:cb:3f:
96:df:65:a5:12:30:33:1c:e8:7d:c7:c6:09:ef:26:
28:dd:64:56:30:d0:e7:32:e2:e7:2c:8f:69:60:77:
f0:42:f8:9b:c8:47:e2:75:62:8e:d5:4d:dd:fb:4c:
97:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F9:6B:45:AC:26:29:68:04:83:66:D2:8A:4C:71:D2:B0:13:5C:C6
X509v3 Authority Key Identifier:
keyid:10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ac:22:27:0c:84:6d:c2:c0:91:07:12:9e:2f:a1:42:7e:b9:
64:95:35:9d:0b:fc:44:a7:9d:86:b1:ae:09:15:5f:f4:48:45:
dd:21:13:9f:c7:6e:41:36:49:51:9d:1c:19:a5:57:b7:47:1c:
2a:22:27:50:11:a0:22:08:4d:82:75:e7:6b:53:57:b9:ca:6d:
5d:07:91:b6:6e:4b:2f:77:5f:f1:df:90:eb:8c:22:a6:ba:cf:
8a:d4:51:ba:f4:59:80:b1:4e:72:45:ba:21:8c:1f:52:6a:ac:
7a:8f:f4:bb:88:c1:a6:4c:e8:27:bc:bb:28:9e:c3:9f:af:27:
9a:18:a3:f5:44:0e:be:15:fe:11:fb:b3:56:b7:a6:fd:fb:8e:
44:3e:92:b2:70:56:6c:30:f2:c6:bf:90:2a:11:78:92:68:3d:
4d:6e:04:c9:dd:39:71:0e:25:6e:9e:d9:6e:e0:f3:34:bb:62:
01:90:b1:30:f3:d7:0e:ee:ab:f0:53:dd:fc:24:5a:95:b6:b0:
59:f9:e3:44:39:81:af:98:58:b1:93:da:41:f4:bb:59:f2:4c:
83:21:55:0d:4c:d0:01:33:34:1a:b8:d6:87:34:4f:c2:7f:77:
29:b2:98:87:b7:5a:a8:ea:c6:4e:de:62:81:7c:f9:93:3c:7e:
01:8d:f7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:44 2026 by rpki-client