Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
File: EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft (raw, json)
Hash identifier: GiO1lNql+z3SgekOIQGxBNw4Pc6u/CdJyRmI2f2HewI=
Subject key identifier: 0D:6E:FD:07:37:B2:68:7A:BD:84:6B:F7:B8:FA:28:0F:BA:EC:A2:AC
Authority key identifier: 11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3
Certificate issuer: /CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
Certificate serial: 019D2AA9B2B31561C6AB9FDAF93B29B34CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 15:00:57 +0000
Manifest this update: Thu 26 Mar 2026 15:00:57 +0000
Manifest next update: Fri 27 Mar 2026 15:00:57 +0000
Files and hashes: 1: EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl (hash: zp8syYlqbd1P85p1VPF7Pfykgo3bNyLaoa+qlqC+Vpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:b2:b3:15:61:c6:ab:9f:da:f9:3b:29:b3:4c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
Validity
Not Before: Mar 26 15:00:57 2026 GMT
Not After : Mar 27 15:00:57 2026 GMT
Subject: CN=0d6efd0737b2687abd846bf7b8fa280fbaeca2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fe:35:d3:a9:ff:4d:aa:7c:7a:35:05:a8:69:
a3:2e:9b:96:4d:73:02:2d:dd:5b:bd:5d:42:15:26:
61:99:ad:69:08:9e:f7:6f:b2:28:04:8d:60:92:a6:
db:9a:b9:f0:83:fd:44:5c:20:af:d1:54:29:92:1b:
c6:9f:f9:2b:a6:27:5a:07:3e:ea:3c:9a:42:c5:55:
a6:99:c3:75:cf:b6:06:8d:d3:64:55:95:20:cd:be:
41:2b:ae:a6:4a:df:da:a9:9b:f5:46:8e:15:7c:f3:
25:7b:65:a2:61:90:cf:47:cd:1d:6b:56:76:a5:db:
fc:33:b3:2e:59:20:23:2f:b1:48:49:6b:95:bc:0b:
ca:bb:cf:8b:6d:6e:77:04:01:30:1e:4d:bd:b0:a8:
da:33:b9:aa:77:cb:ce:cb:ab:3d:eb:e0:09:6b:1f:
09:4f:11:43:55:99:52:07:e6:ba:d0:28:08:3c:5a:
fe:42:f8:e4:38:30:c3:d3:a4:d3:74:86:d1:0e:19:
2a:28:d5:c2:3d:46:20:20:a2:25:89:ed:fd:ed:2a:
ef:c1:6d:4f:16:f8:2f:fc:56:35:cd:7d:55:b1:cc:
2e:33:6a:a1:62:41:a4:f2:f8:d1:1f:2b:5d:80:07:
f1:55:6e:84:ca:46:0e:72:a0:ef:db:27:86:4c:59:
7d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6E:FD:07:37:B2:68:7A:BD:84:6B:F7:B8:FA:28:0F:BA:EC:A2:AC
X509v3 Authority Key Identifier:
keyid:11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f2:dc:45:83:23:1b:df:6a:4b:7c:34:83:19:95:02:0b:7f:
44:a9:8d:48:d9:d6:6f:b3:ae:7c:30:0e:8d:77:08:8f:6d:a5:
fe:96:eb:e2:81:43:3d:93:ce:2e:9f:e8:aa:bc:03:b0:02:83:
71:1a:36:b3:fe:5b:68:e6:f7:7e:93:70:2d:95:77:53:16:a4:
50:23:a1:1f:81:14:06:6f:07:6f:66:27:73:ec:17:c7:bb:23:
af:4e:5e:4d:80:cf:72:c6:31:14:03:a4:8c:68:b3:bc:3b:3a:
c2:78:af:80:54:81:6a:a0:67:6e:75:82:21:78:a3:63:7e:10:
22:89:d7:fc:eb:1b:2b:08:5c:38:b4:a4:6c:92:67:b1:91:b0:
ae:1a:e3:c2:85:fe:15:fa:0a:0b:46:d8:41:a4:82:60:bc:11:
ba:52:b7:a3:3b:0f:cb:50:27:9e:c8:bc:99:e2:5d:0d:35:2d:
0c:cc:f1:37:65:92:68:4b:6c:fc:22:07:bc:62:9b:ff:3c:ad:
e5:01:8c:26:24:db:24:15:97:3c:b8:f7:89:70:43:24:cd:ed:
58:30:5f:d5:67:27:b0:ec:fa:f7:c7:0e:27:db:cd:27:67:8a:
83:17:fb:f5:05:31:bb:10:ee:e1:21:be:c1:ec:05:d0:f5:16:
82:0c:bf:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:46 2026 by rpki-client