Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
File: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft (raw, json)
Hash identifier: zjjDPcKYlYKgSP/qs2H+w/Y7M47Li8nI8a6qEyG29I0=
Subject key identifier: 24:04:0B:DE:90:E9:A3:AC:97:89:2A:B7:BC:F0:32:C2:B3:62:07:37
Authority key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
Certificate issuer: /CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Certificate serial: 019D270437412B228A1A1DCCF80C2188C705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 22:01:20 +0000
Manifest this update: Wed 25 Mar 2026 22:01:20 +0000
Manifest next update: Thu 26 Mar 2026 22:01:20 +0000
Files and hashes: 1: 1-871CmDX8fagFE4cCLtEOvFlaJk.roa (hash: XbD+Hd0tYqjM6KWUuuQ0xXPJOZgVOM/iQcoQQ4UP8I0=)
2: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl (hash: 2OX13XZyQFUh0hroy2ijlDfpr4HfEJQXgzh6tvIhuXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:37:41:2b:22:8a:1a:1d:cc:f8:0c:21:88:c7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Validity
Not Before: Mar 25 22:01:20 2026 GMT
Not After : Mar 26 22:01:20 2026 GMT
Subject: CN=24040bde90e9a3ac97892ab7bcf032c2b3620737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9c:d5:7a:3b:ce:4c:ef:c6:de:26:b1:32:86:
9d:43:a3:47:40:53:ac:cf:75:4a:8c:04:8c:e6:0c:
57:47:1c:42:4f:dc:ca:ee:2a:1f:0c:27:24:30:58:
46:75:6b:f3:ab:64:64:ad:aa:12:63:3e:19:72:20:
84:c3:1b:46:f0:7f:7c:ba:39:53:86:ef:a0:a4:dc:
76:95:4c:86:89:9e:9c:23:08:99:7d:1f:2d:62:ff:
4a:5a:cf:7a:4b:64:96:d7:63:81:e7:77:ab:4c:90:
67:0e:f7:2b:fd:4b:00:0f:20:4c:a0:c0:1c:7f:b1:
e1:1b:07:65:84:c9:5a:73:cb:44:e0:b4:45:d5:93:
80:3a:7b:03:af:7f:7f:1a:46:04:19:9d:86:b8:78:
bc:20:24:3d:9f:fa:27:c6:5b:e6:68:63:d1:a2:10:
d1:fb:49:ac:3a:46:c2:6f:e0:53:9f:5f:94:93:c7:
5d:3f:b0:63:03:2d:67:87:ad:78:13:93:45:2b:c9:
04:3b:fa:20:2a:e9:d5:ad:fd:26:9e:9d:b5:58:7f:
3e:42:3a:f9:6d:86:9e:a5:3c:37:11:1a:0d:26:2c:
e5:86:66:50:73:95:65:35:9a:b4:6b:72:14:04:96:
0a:ff:c3:34:40:4e:ec:3e:3f:6a:29:cf:8a:0f:30:
66:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:04:0B:DE:90:E9:A3:AC:97:89:2A:B7:BC:F0:32:C2:B3:62:07:37
X509v3 Authority Key Identifier:
keyid:12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:29:8c:31:6d:51:a9:e2:3a:cd:3f:62:25:1f:01:39:95:8f:
c1:1a:e1:46:a6:f0:b1:be:fd:c9:dc:80:f7:64:9c:dc:29:61:
e5:14:93:d0:1c:80:86:31:2e:96:43:ba:df:1b:5a:23:22:45:
fe:42:48:8f:4f:f4:e0:ab:c8:a5:56:b7:a2:f6:68:6d:bd:07:
d4:aa:a5:c0:08:6b:7a:ac:38:61:21:9a:33:0c:d4:3d:eb:b4:
13:6c:83:d2:01:ae:f0:02:89:11:94:27:b4:06:48:18:12:2c:
e2:36:33:d6:99:8d:e2:fa:51:d6:b6:ca:f6:83:e1:88:cb:9e:
84:ce:b7:14:b2:65:2b:f3:8e:2f:9b:44:f4:93:01:82:88:11:
18:8f:f0:e6:93:f9:86:7e:94:56:31:12:7b:ea:b6:ee:87:ca:
3c:85:e1:89:0f:d2:69:dd:0c:b0:9c:22:12:16:a2:26:50:ad:
cd:61:ad:97:46:89:b7:e4:1f:22:04:69:9d:9e:34:6d:2c:97:
25:12:bb:1c:2e:ac:6e:d1:87:01:29:91:d7:4f:d8:44:b3:de:
bf:3c:15:64:8b:c4:c9:09:9a:74:7d:14:11:02:97:6a:08:ce:
b8:b2:9c:15:11:61:e8:fa:9a:5a:7a:45:33:10:33:91:f2:73:
76:5f:57:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBDdBKyKKGh3M+AwhiMcFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyOGZkZTJiZmM2M2VmZTNkMTMyZGRhYzc4MzdlMTVjN2Y0
YjQ5ZjQwHhcNMjYwMzI1MjIwMTIwWhcNMjYwMzI2MjIwMTIwWjAzMTEwLwYDVQQD
EygyNDA0MGJkZTkwZTlhM2FjOTc4OTJhYjdiY2YwMzJjMmIzNjIwNzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5zVejvOTO/G3iaxMoadQ6NHQFOs
z3VKjASM5gxXRxxCT9zK7iofDCckMFhGdWvzq2RkraoSYz4ZciCEwxtG8H98ujlT
hu+gpNx2lUyGiZ6cIwiZfR8tYv9KWs96S2SW12OB53erTJBnDvcr/UsADyBMoMAc
f7HhGwdlhMlac8tE4LRF1ZOAOnsDr39/GkYEGZ2GuHi8ICQ9n/onxlvmaGPRohDR
+0msOkbCb+BTn1+Uk8ddP7BjAy1nh614E5NFK8kEO/ogKunVrf0mnp21WH8+Qjr5
bYaepTw3ERoNJizlhmZQc5VlNZq0a3IUBJYK/8M0QE7sPj9qKc+KDzBmgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQEC96Q6aOsl4kqt7zwMsKzYgc3MB8GA1UdIwQY
MBaAFBKP3iv8Y+/j0TLdrHg34Vx/S0n0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW9fZUtfeGo3LVBSTXQyc2VEZmhYSDlMU2ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hOWY4MWUtNzliMi00YzJlLTlmM2Ut
N2MyNGVmMDI1OWRiLzEvRW9fZUtfeGo3LVBSTXQyc2VEZmhYSDlMU2ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9hOWY4MWUtNzliMi00YzJlLTlmM2UtN2MyNGVmMDI1OWRi
LzEvRW9fZUtfeGo3LVBSTXQyc2VEZmhYSDlMU2ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSmMMW1R
qeI6zT9iJR8BOZWPwRrhRqbwsb79ydyA92Sc3Clh5RST0ByAhjEulkO63xtaIyJF
/kJIj0/04KvIpVa3ovZobb0H1KqlwAhreqw4YSGaMwzUPeu0E2yD0gGu8AKJEZQn
tAZIGBIs4jYz1pmN4vpR1rbK9oPhiMuehM63FLJlK/OOL5tE9JMBgogRGI/w5pP5
hn6UVjESe+q27ofKPIXhiQ/Sad0MsJwiEhaiJlCtzWGtl0aJt+QfIgRpnZ40bSyX
JRK7HC6sbtGHASmR10/YRLPevzwVZIvEyQmadH0UEQKXagjOuLKcFRFh6PqaWnpF
MxAzkfJzdl9X2Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:33 2026 by rpki-client