Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
File: Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json)
Hash identifier: MkvQ68AzWeZspN7lhnYeTYz7caRz8/GDX2bfNJEQzek=
Subject key identifier: 5A:24:FD:FE:21:00:90:93:E0:A0:97:AC:81:A7:A4:12:99:C4:D2:23
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 019D299792B78C41090CAB10822BF594D8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
Manifest number: 14AE
Signing time: Thu 26 Mar 2026 10:01:32 +0000
Manifest this update: Thu 26 Mar 2026 10:01:32 +0000
Manifest next update: Fri 27 Mar 2026 10:01:32 +0000
Files and hashes: 1: 4eHXKjznACVbndG6iFpTFVUVkDU.roa (hash: OQWOo0J8qNH07VKmKOXFET9I4K0zlOhgBlJo3WSTOP8=)
2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: uQO1w0TxG4V7ozwz0XrvDP5mz6jKpaiVgIdM8OErs4U=)
3: uRQkD95GTfY6rjF1uHaPVB0eyic.roa (hash: DCYgdJ7UhUeMQMpapAAECzMIhYagZDmIZ36JKYt3YbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:92:b7:8c:41:09:0c:ab:10:82:2b:f5:94:d8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Mar 26 10:01:32 2026 GMT
Not After : Mar 27 10:01:32 2026 GMT
Subject: CN=5a24fdfe21009093e0a097ac81a7a41299c4d223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:b9:24:b5:4f:70:43:a5:a6:6d:41:53:32:
1e:32:be:9a:09:74:98:60:96:b5:03:d1:92:e2:d1:
e6:f1:79:20:05:ec:c4:9a:4d:b4:0c:e1:f5:79:5f:
0e:44:e7:b2:93:a8:62:96:83:d0:b2:96:21:7a:bb:
c6:1c:f0:ef:c5:47:cc:a7:11:df:a9:41:89:bc:6f:
9f:33:4b:e9:80:ff:46:29:16:7d:59:30:4a:ee:41:
2b:88:4c:b8:11:da:71:ae:05:d7:b8:88:98:35:94:
1a:86:20:7f:d6:c0:b4:b7:ce:bd:7d:43:08:82:d9:
cc:41:0e:9d:6b:dd:63:cd:7f:07:19:c9:d0:98:a9:
ee:3a:b7:01:08:bf:70:47:3f:f0:1d:9c:1a:22:5e:
b3:a8:88:b3:81:70:96:7f:bb:95:87:f7:3c:23:89:
4a:9c:1c:65:38:4b:2b:c2:cc:b4:53:b7:97:6f:16:
20:6b:e1:56:94:81:99:8a:03:c4:76:48:3a:43:cd:
01:6a:9a:19:26:6c:8e:e3:91:50:3d:51:f5:c9:a8:
76:55:a0:cc:35:bd:c3:ad:b7:a4:a0:b1:d9:2d:59:
02:a5:6e:2a:fb:ab:72:40:e1:28:96:af:9a:e0:ca:
69:a6:6f:89:9d:c7:7c:db:7d:48:33:6a:d0:da:d0:
aa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:24:FD:FE:21:00:90:93:E0:A0:97:AC:81:A7:A4:12:99:C4:D2:23
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8d:2b:17:32:56:78:0d:50:6b:91:db:4e:89:5b:05:13:39:
ac:b4:e7:64:cb:36:3f:53:d3:ef:13:43:0e:c6:20:c4:f0:23:
4f:df:df:21:a0:2c:3a:cb:84:60:cf:a5:f0:3d:0b:63:21:6a:
06:50:1f:8b:4f:29:5a:f9:00:6f:0e:7a:fd:07:ab:94:0a:1c:
03:bc:e7:b0:b4:b5:af:f0:5e:64:df:94:72:f4:17:32:92:a7:
cc:70:7f:14:90:be:51:fc:71:50:32:7f:d8:76:f6:8d:a0:c9:
d8:e9:cc:2b:d9:06:41:39:96:c0:ad:f5:2c:f9:b3:b3:24:ac:
81:43:a6:05:8c:9c:6a:4e:39:5a:47:38:eb:53:2c:1a:95:b0:
7b:b9:04:8b:81:65:d1:55:bb:dd:a0:9f:1a:44:bb:52:8b:38:
6e:ba:2f:9c:39:ec:ad:ae:59:f2:75:ec:f3:ef:d8:60:f8:19:
bf:1e:ff:47:f1:a6:db:4e:ce:d8:d0:9d:8c:35:ed:31:fc:57:
2c:88:61:01:5d:3a:2b:77:24:51:07:03:31:ec:a1:cc:5a:6f:
c2:4f:c7:7a:be:33:a1:3f:3e:11:a4:bf:fa:34:94:5e:45:97:
fe:48:3d:66:94:ab:10:c6:65:3f:b6:b6:5f:05:52:dd:c6:ad:
eb:83:a2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:36:52 2026 by rpki-client