Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.mft
File: EkQqmE1AazYwQ34q7JxTDQ4blcg.mft (raw, json)
Hash identifier: vlx4Ux8RzqPJhMFnoJMKFukYuK2qbnxHIk2tCTauzvA=
Subject key identifier: A3:28:2A:77:D3:F0:77:26:F3:EA:85:6A:51:66:71:97:99:5A:B0:6D
Authority key identifier: 12:44:2A:98:4D:40:6B:36:30:43:7E:2A:EC:9C:53:0D:0E:1B:95:C8
Certificate issuer: /CN=12442a984d406b3630437e2aec9c530d0e1b95c8
Certificate serial: 019D25BA4A11B909AB03AEBB1E7DD4A56997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkQqmE1AazYwQ34q7JxTDQ4blcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.mft
Manifest number: C3
Signing time: Wed 25 Mar 2026 16:00:58 +0000
Manifest this update: Wed 25 Mar 2026 16:00:58 +0000
Manifest next update: Thu 26 Mar 2026 16:00:58 +0000
Files and hashes: 1: EkQqmE1AazYwQ34q7JxTDQ4blcg.crl (hash: jaZCxR0IgIBSzcaSzLwXLmTuhj2Obu725pbVDY1G5BY=)
2: sBKXIcug608LSZXfM5pwh9gFcaw.asa (hash: VeUI5iGSK0Bo8UBILEtAk5wSZzWuXJq+0/DHtWsVU6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkQqmE1AazYwQ34q7JxTDQ4blcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:4a:11:b9:09:ab:03:ae:bb:1e:7d:d4:a5:69:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12442a984d406b3630437e2aec9c530d0e1b95c8
Validity
Not Before: Mar 25 16:00:58 2026 GMT
Not After : Mar 26 16:00:58 2026 GMT
Subject: CN=a3282a77d3f07726f3ea856a51667197995ab06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:2a:f2:b2:d0:5d:50:7f:04:e0:de:ff:60:
7c:8e:33:5a:2a:d0:69:d6:b0:73:62:48:0d:b7:28:
4d:7f:1a:02:1c:dd:e9:40:e3:60:6e:9c:6e:0e:8d:
26:d1:59:c4:9f:cf:c4:2f:b8:c4:dd:a1:b9:3a:64:
eb:9c:15:c5:75:60:36:2b:b4:d6:15:eb:bd:9c:3a:
6c:cd:c5:61:41:3e:ab:12:2d:07:2f:2f:c4:e9:db:
60:1c:31:b5:8f:19:63:fa:0e:bd:26:56:e9:e3:a3:
4a:62:00:6d:bc:a8:d6:eb:a2:64:e0:25:b7:98:33:
0e:2a:59:2d:a8:d5:46:a5:59:c2:d8:3f:f8:e0:ce:
27:4f:cb:ae:e2:92:ee:e4:75:f2:71:44:08:67:58:
2a:d6:88:9e:49:1f:70:b6:02:17:1f:bd:e6:49:14:
78:77:ad:7f:52:7b:cc:e0:0d:b1:7f:f8:0d:26:a3:
54:46:79:50:f2:b2:bb:7e:d8:4f:e4:11:14:dc:47:
4a:d0:f0:57:39:59:51:d1:a5:81:7e:66:73:1f:0f:
63:c9:3f:06:c1:42:9e:86:37:a1:a2:00:54:a4:ee:
99:db:c9:ab:f3:9e:b2:56:8a:90:16:c6:92:c1:8c:
84:af:09:ca:d1:d1:44:e8:25:f7:60:7c:17:c0:12:
06:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:28:2A:77:D3:F0:77:26:F3:EA:85:6A:51:66:71:97:99:5A:B0:6D
X509v3 Authority Key Identifier:
keyid:12:44:2A:98:4D:40:6B:36:30:43:7E:2A:EC:9C:53:0D:0E:1B:95:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkQqmE1AazYwQ34q7JxTDQ4blcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:10:0e:81:8f:0c:61:07:5e:f0:2f:f2:a9:3e:66:b0:91:c6:
d3:dd:15:20:9d:05:2d:65:b3:fd:d1:4a:38:60:24:f1:37:cc:
6b:d7:a8:e2:91:5a:04:89:3e:7d:a7:9f:38:45:22:af:46:9b:
7e:9d:50:82:43:0a:84:e4:f8:6a:f1:55:6b:c1:1c:2b:0f:af:
aa:df:ad:22:52:3c:b6:4c:38:e7:28:0f:05:2b:ae:52:b3:57:
33:4c:01:e7:2d:e4:4b:89:61:a2:f7:63:a3:4c:e1:3a:94:1f:
77:80:05:d5:09:97:4a:ce:c8:ce:e9:b4:43:20:b6:90:f3:71:
19:98:df:e4:c4:b6:33:fb:8a:68:2a:83:98:10:ce:ba:33:e9:
0d:ea:5a:d7:f1:84:e4:6b:e7:8c:4d:3f:9b:2c:67:22:18:f0:
fa:4a:72:de:a0:69:0a:ac:11:69:df:51:62:31:e9:35:13:53:
84:e3:11:96:de:9a:78:91:74:43:75:98:a5:0f:8d:71:bd:ed:
95:9f:27:b6:4c:51:a3:cd:4b:80:0a:73:1e:a9:14:c5:e2:88:
08:fc:2c:f2:2f:83:e8:dd:65:19:20:70:65:d1:03:ad:ae:a3:
97:b8:99:57:ab:c5:1c:e8:e5:64:90:69:c6:bd:1e:7b:34:59:
1e:b1:98:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:58:02 2026 by rpki-client