Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
File: 62eoQOQaxm-PNZzL1lNUyRcEK78.mft (raw, json)
Hash identifier: PXmD6642+iJTJikLa0YCOW+4JhGGzUqr7Z3AaZCYnTI=
Subject key identifier: 70:BA:DD:B7:AA:9C:B1:8F:A1:F3:94:AA:96:3A:1F:E4:66:DB:7A:C7
Authority key identifier: EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
Certificate issuer: /CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Certificate serial: 019D2771DA0CD8544756AF81B853A67FC35F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
Manifest number: 0CB5
Signing time: Thu 26 Mar 2026 00:01:05 +0000
Manifest this update: Thu 26 Mar 2026 00:01:05 +0000
Manifest next update: Fri 27 Mar 2026 00:01:05 +0000
Files and hashes: 1: 62eoQOQaxm-PNZzL1lNUyRcEK78.crl (hash: Hojt9a69gsGoMmWgsFwPYSOg2AKGWll0sQQgc4vr9yg=)
2: y_DN1NlT3WxnHFjjy8yM8EUu98c.roa (hash: xlreRmvPkwb20CmAYP76if0DKA37CnCWemcHHd4gTDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:da:0c:d8:54:47:56:af:81:b8:53:a6:7f:c3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Validity
Not Before: Mar 26 00:01:05 2026 GMT
Not After : Mar 27 00:01:05 2026 GMT
Subject: CN=70baddb7aa9cb18fa1f394aa963a1fe466db7ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:11:a9:33:aa:6c:60:b6:69:69:6a:0d:e5:
b2:49:e7:26:d5:46:0c:08:26:62:1a:e2:82:59:3d:
52:44:59:da:00:3d:d5:65:82:fe:e1:ca:3f:c6:9e:
b3:3d:c9:b5:28:6d:53:b2:3c:ba:bc:e0:21:f1:d5:
fc:5d:6f:62:05:10:2e:d8:16:4d:44:42:05:31:5d:
b9:cc:74:03:fa:f7:79:06:04:eb:94:7e:00:12:a2:
e0:6d:4e:a5:c8:a6:60:b9:f2:52:0a:0d:ee:aa:95:
ff:ed:79:86:1b:14:13:82:bd:34:9b:c4:99:40:cf:
09:b2:cc:d9:53:18:64:6b:4c:11:8b:84:72:52:55:
80:5f:a6:cb:d3:ec:b3:ed:04:e8:32:f3:92:0d:0c:
d3:9c:d9:5d:84:b9:6d:69:58:1b:95:1b:de:44:15:
d1:19:91:da:f3:c8:63:75:f6:26:aa:8a:4a:e5:7d:
5c:38:bb:a0:86:38:fc:ec:d9:ed:97:51:4e:12:20:
a1:aa:bb:bc:bd:f1:17:00:5c:44:75:f0:15:a4:58:
9c:4a:77:e2:2c:ac:56:7e:8a:1f:2e:b5:2a:ab:bf:
3e:a5:b3:8c:63:03:aa:4e:33:b5:50:11:02:1e:e5:
42:ed:a6:6f:d7:b0:64:fe:5a:ec:df:69:26:10:c4:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BA:DD:B7:AA:9C:B1:8F:A1:F3:94:AA:96:3A:1F:E4:66:DB:7A:C7
X509v3 Authority Key Identifier:
keyid:EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c0:bb:d9:a9:ad:e9:86:f5:f3:e3:11:9e:06:37:d6:d7:01:
cf:cc:03:14:41:7b:92:68:d0:ee:56:98:8a:0d:c0:cb:f0:fd:
ae:6e:33:86:f1:2a:c2:91:a7:45:f5:05:bc:27:b5:d0:8e:89:
d4:fb:43:3b:69:b4:c6:a9:d5:69:c0:df:2d:1c:4e:00:8f:c5:
10:3c:1d:16:cb:f4:a6:60:31:a5:0e:86:a8:4f:44:50:c6:27:
3c:6b:78:27:18:11:f1:61:e3:7d:fa:63:01:11:d4:dd:1a:80:
6f:80:29:f9:6a:17:ac:c1:05:13:b0:0d:d9:4a:aa:24:26:02:
e3:c4:49:c5:5a:2c:7e:b9:5d:7f:00:88:bf:55:84:52:d8:a2:
3e:18:89:e4:5f:45:81:9e:aa:1a:42:46:4e:5f:3e:e8:0c:7c:
bd:c1:c2:55:94:d1:dd:67:d9:0a:a2:60:55:fc:7f:b2:63:07:
be:fb:fa:dd:8e:cf:cb:08:e5:9d:46:f8:f8:46:20:8c:97:19:
ea:db:c1:46:3b:6d:19:d6:f3:7d:71:cd:35:f1:5e:df:95:8f:
c2:61:9b:37:db:f6:08:60:3a:ce:9d:eb:7f:9e:42:65:96:e5:
09:98:dc:38:4b:b6:21:ab:e5:dd:24:d5:c6:22:bf:5b:64:2d:
75:4d:d4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:58:06 2026 by rpki-client