Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
File: EQKbhwTDK6_sKzyCn89YaqGz2cE.mft (raw, json)
Hash identifier: qdl94EzmrTW4CUywr9p8piVQMUqi1EISJJkPBQPeNUE=
Subject key identifier: E8:C3:08:06:C7:20:4C:89:07:E0:91:1A:F2:A2:C4:20:FC:3F:E5:08
Authority key identifier: 11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
Certificate issuer: /CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Certificate serial: 019D2704442C8A03F0344623AB4AE6D1C4B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
Manifest number: 1591
Signing time: Wed 25 Mar 2026 22:01:24 +0000
Manifest this update: Wed 25 Mar 2026 22:01:24 +0000
Manifest next update: Thu 26 Mar 2026 22:01:24 +0000
Files and hashes: 1: EQKbhwTDK6_sKzyCn89YaqGz2cE.crl (hash: CYPN2EkmWNMfWQatkQPlFCLkvCxrYF6fV8wead6HM9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:44:2c:8a:03:f0:34:46:23:ab:4a:e6:d1:c4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Validity
Not Before: Mar 25 22:01:24 2026 GMT
Not After : Mar 26 22:01:24 2026 GMT
Subject: CN=e8c30806c7204c8907e0911af2a2c420fc3fe508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:e7:2e:bd:9a:d9:ee:62:4c:33:ac:16:66:
62:b9:58:94:eb:03:ea:45:12:d3:a8:83:05:15:91:
33:09:9a:db:74:95:d9:94:d1:47:c8:ac:f5:6e:ee:
2d:f8:c4:d3:fe:69:cf:fc:38:03:d6:18:dc:1d:75:
a0:7f:ed:b2:9e:39:56:85:0c:c1:0b:ea:10:00:83:
09:6e:6e:e2:70:a8:f2:ca:e8:85:8e:10:f9:14:58:
c6:da:2e:c8:19:07:8e:1b:93:06:00:7e:f1:35:1f:
4d:b6:60:04:58:69:36:68:7f:63:75:3d:5b:47:2f:
e5:c3:86:75:c7:b7:e8:4f:4a:ce:84:01:54:8a:61:
d9:f9:5b:81:9d:5e:24:95:4d:b0:e4:4c:38:55:fb:
03:b9:69:1e:ac:72:90:bd:80:07:81:4a:98:6b:f7:
c6:77:d7:b8:e0:17:34:20:88:03:a5:09:4a:67:e8:
b6:ff:94:a4:14:74:04:47:52:ee:31:36:ec:e1:9b:
6b:79:d5:61:ce:86:04:14:e1:b5:ac:11:05:a4:0f:
63:5f:cb:77:47:37:6a:a5:03:32:9b:5f:53:21:e6:
06:2f:28:dc:82:af:d0:cc:e7:fd:29:a3:ed:0d:5a:
80:98:b0:fa:22:e9:9e:d4:fa:df:bb:d5:cf:7b:2a:
1d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C3:08:06:C7:20:4C:89:07:E0:91:1A:F2:A2:C4:20:FC:3F:E5:08
X509v3 Authority Key Identifier:
keyid:11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5c:86:2e:bb:07:5c:a8:47:86:27:3d:73:1a:f2:b2:9c:9b:
5f:fd:7a:7c:f4:e8:46:e9:e0:c7:4c:82:9b:0f:8d:ef:89:7a:
ee:75:d5:53:29:48:84:1f:6e:89:f0:16:c1:e2:76:81:cf:7a:
56:25:57:bf:f3:d2:83:b9:51:6e:0d:04:bf:39:ae:80:1f:24:
25:d1:0d:2d:bf:65:bd:33:4d:05:68:ef:f2:50:71:c0:4b:72:
40:61:9a:52:98:88:35:77:fe:bc:9d:bc:98:31:09:86:17:65:
e6:0d:97:b5:32:57:ad:5a:b4:0c:1d:d9:b3:84:42:d4:f6:68:
0d:53:55:4e:a6:ab:26:46:5f:e8:70:5d:6e:fe:89:43:53:a2:
d3:6d:df:57:04:ac:d9:a7:06:d3:f8:a4:24:3d:f0:9b:c9:77:
70:39:b0:94:7a:01:10:85:7c:52:a7:e2:5d:c1:13:79:a5:b7:
bf:fd:61:d1:89:bb:fc:35:d2:37:58:44:df:09:52:7a:d4:98:
89:e5:f1:44:fd:06:b8:13:46:96:6f:24:35:ad:ca:5f:7b:f9:
fb:ce:de:57:5a:84:c7:2a:71:cf:49:5a:91:6c:aa:ef:a3:ed:
c9:af:db:90:68:e6:ec:34:25:c2:9a:cf:12:b8:39:55:e6:1a:
f5:b1:48:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:22 2026 by rpki-client