Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
File: eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft (raw, json)
Hash identifier: zomHrGfde0KYO8tsycTx3Y6y4QLs59p4vnKPngSgN+8=
Subject key identifier: 5A:92:7E:D6:99:FB:C6:C0:D4:06:26:01:03:A4:85:6F:1A:23:C9:87
Authority key identifier: 79:E8:D0:49:0D:30:BF:94:4E:D4:D6:36:84:7C:58:D4:31:A3:8C:BC
Certificate issuer: /CN=79e8d0490d30bf944ed4d636847c58d431a38cbc
Certificate serial: 019D29CDBB1651C8E02F1470473D803C6FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eejQSQ0wv5RO1NY2hHxY1DGjjLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
Manifest number: 170C
Signing time: Thu 26 Mar 2026 11:00:41 +0000
Manifest this update: Thu 26 Mar 2026 11:00:41 +0000
Manifest next update: Fri 27 Mar 2026 11:00:41 +0000
Files and hashes: 1: eejQSQ0wv5RO1NY2hHxY1DGjjLw.crl (hash: kxavSLzkverVbSog2FPfFrFia0uQx478ndN/GLUP1p4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eejQSQ0wv5RO1NY2hHxY1DGjjLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:bb:16:51:c8:e0:2f:14:70:47:3d:80:3c:6f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79e8d0490d30bf944ed4d636847c58d431a38cbc
Validity
Not Before: Mar 26 11:00:41 2026 GMT
Not After : Mar 27 11:00:41 2026 GMT
Subject: CN=5a927ed699fbc6c0d406260103a4856f1a23c987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:8c:f3:a3:b2:af:31:95:99:38:a0:d0:eb:
2f:b7:fa:a1:00:68:66:da:db:bb:cf:77:1d:c2:44:
8a:4a:37:bb:03:ce:de:3d:b7:a2:88:38:03:ec:05:
67:8a:0e:65:2d:71:ed:3b:26:9b:82:c2:80:a5:e0:
ee:d7:01:94:8a:87:24:0f:54:56:44:2e:f7:85:d4:
c4:cb:04:a1:42:8a:43:2b:9e:27:14:95:0d:93:3e:
72:4f:f8:6d:36:6f:ec:a6:49:12:4d:4e:38:5a:d1:
df:64:c6:ca:32:72:ad:0a:f0:75:56:0f:cf:e6:4b:
e2:ce:14:7b:cf:fb:0e:aa:05:c6:46:8a:2c:94:c0:
24:99:12:2b:09:90:49:a8:23:66:71:d7:76:7b:36:
f0:95:36:12:cf:e2:53:f7:ec:c9:a5:13:08:c8:2e:
db:6c:5d:85:6e:5b:7d:97:66:e7:4d:1e:1b:40:fa:
d2:35:2f:11:f1:6b:2e:d3:97:30:17:0f:81:4f:cb:
9a:e9:1f:15:2e:e5:01:d5:cc:ca:d8:74:9c:62:80:
13:14:fb:9b:34:b9:89:08:fb:d1:f7:70:ad:df:ef:
0b:e2:36:f8:7b:3b:15:eb:15:22:82:6c:80:45:6e:
a5:23:cc:0d:ff:0a:49:d2:41:53:ac:62:15:89:6b:
d7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:92:7E:D6:99:FB:C6:C0:D4:06:26:01:03:A4:85:6F:1A:23:C9:87
X509v3 Authority Key Identifier:
keyid:79:E8:D0:49:0D:30:BF:94:4E:D4:D6:36:84:7C:58:D4:31:A3:8C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eejQSQ0wv5RO1NY2hHxY1DGjjLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:22:66:09:4c:e9:ad:cb:f0:82:93:ee:ef:e6:27:18:3c:4f:
c2:cf:ae:61:4e:4c:e0:26:72:24:23:dc:f9:48:2d:39:76:bc:
23:a3:33:85:c4:ad:6c:b2:84:2b:2f:d7:73:31:2d:c9:6b:7d:
f2:e1:8c:96:d5:84:17:6d:81:87:83:d9:f5:cc:75:b9:0b:19:
b2:e7:64:32:b6:41:03:61:16:a2:fd:8b:04:95:54:14:29:5b:
e8:c5:27:60:64:6b:e4:71:ed:5e:d0:54:51:bc:dc:ff:31:84:
96:b2:0d:3b:3d:75:68:84:71:7f:d6:82:9d:31:cf:ad:b6:ac:
0b:7d:00:1d:36:f1:38:cb:25:74:c7:f9:a6:6e:35:bb:08:66:
b7:c9:da:13:9e:f3:bf:0c:d5:03:75:ed:00:e8:f5:bb:4c:e3:
14:dc:20:33:d9:ce:60:71:ba:f1:07:f5:5a:b5:d9:91:3f:ea:
2b:85:54:20:df:e8:cc:b3:d1:a0:8c:ea:13:bd:9e:ac:6b:6e:
ff:d8:9d:5e:8b:60:bb:73:73:7d:1f:71:0a:67:29:39:4e:71:
51:4d:5f:4b:2f:1a:59:26:98:95:fa:98:c2:e8:43:08:71:a1:
e1:2e:1a:19:f6:2b:b3:9b:5e:70:03:27:b7:cc:44:c6:64:47:
54:80:53:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:14 2026 by rpki-client