Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
File: eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft (raw, json)
Hash identifier: dr2SYsMSS/EovXA6LBGYr6a14SjEPYJQy35u+fw2rto=
Subject key identifier: 67:0D:63:66:07:A3:F2:D5:CB:67:7D:B3:E9:D7:7D:34:58:F2:56:51
Authority key identifier: 79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D
Certificate issuer: /CN=7995f91e998225015f47063c328e0c501d68b59d
Certificate serial: 019D2703C27091E1D91CE186C2C0049DA9C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
Manifest number: 135E
Signing time: Wed 25 Mar 2026 22:00:50 +0000
Manifest this update: Wed 25 Mar 2026 22:00:50 +0000
Manifest next update: Thu 26 Mar 2026 22:00:50 +0000
Files and hashes: 1: eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl (hash: E+XGrp6QDpUjLxo8tYJcyJ4EXgrqef+aN8oinN/2TEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:c2:70:91:e1:d9:1c:e1:86:c2:c0:04:9d:a9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7995f91e998225015f47063c328e0c501d68b59d
Validity
Not Before: Mar 25 22:00:50 2026 GMT
Not After : Mar 26 22:00:50 2026 GMT
Subject: CN=670d636607a3f2d5cb677db3e9d77d3458f25651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:15:f4:c2:d5:e2:9f:06:49:71:5a:bc:f0:f5:
2b:0c:70:4d:ce:45:55:96:fd:81:1f:01:e9:83:29:
f9:1a:80:8c:a6:a3:1f:be:4d:8f:5e:8d:02:4f:93:
0a:f3:8d:13:69:d9:32:05:7a:f4:aa:20:f4:f5:f6:
3b:ef:49:0c:50:cc:b9:7c:43:9e:eb:60:57:fd:68:
05:53:55:ea:de:4d:c5:43:98:a5:29:2c:45:ab:7d:
d4:47:99:56:a9:0a:3a:61:2e:c6:5f:2b:86:e0:6a:
43:ca:08:ca:9e:20:68:74:c2:31:1b:3b:3f:75:22:
43:05:2a:21:f5:fc:5a:5b:2e:d3:83:1a:08:d1:26:
d5:e5:b6:a0:64:88:ca:09:dd:87:44:e0:78:66:8a:
e3:9a:0e:f1:78:a5:42:ea:fa:b3:f1:3f:27:87:92:
6b:a3:e9:92:6b:ce:30:39:97:fb:01:9f:0c:7c:f2:
89:46:a2:2a:39:88:6c:8f:df:52:b4:46:5c:b2:2a:
de:50:01:76:24:0d:fa:56:87:db:b0:12:61:ba:4e:
bc:f5:a3:99:e7:11:7e:04:12:7a:49:9e:c1:47:61:
06:6a:cc:f6:f1:f6:a7:50:f9:81:fc:0f:ce:b1:14:
58:7b:0f:c4:a8:13:98:cd:7d:92:9e:6e:fe:bd:ab:
82:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0D:63:66:07:A3:F2:D5:CB:67:7D:B3:E9:D7:7D:34:58:F2:56:51
X509v3 Authority Key Identifier:
keyid:79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7e:38:7c:6a:bb:29:6a:64:df:9d:b8:87:eb:a2:f5:96:6d:
3d:6c:7e:c8:3f:13:b5:3a:f6:63:75:a3:9d:75:09:b9:2a:42:
51:fe:0a:72:1a:fc:4d:14:18:d3:e6:66:fe:94:09:d8:d5:21:
2c:f2:a6:9b:e5:05:07:4d:d8:67:5a:d6:a1:5f:51:e2:6e:9f:
17:39:0a:0e:cc:4d:8a:36:3d:3c:cd:01:38:55:58:c3:2a:ab:
ad:dc:2a:eb:fa:d5:d7:5a:f0:0a:cf:b2:70:60:92:f7:21:5c:
40:c3:59:4e:36:28:69:51:04:b7:87:7f:f0:20:63:db:c8:19:
32:e5:a3:da:31:19:3b:46:9d:da:03:11:95:cb:59:99:85:9f:
88:91:fa:50:b4:e8:7d:b8:eb:77:40:ed:79:62:08:7a:12:8b:
6d:04:b0:3f:85:cc:26:4b:1a:1f:e2:f2:f2:0f:c7:aa:2d:5c:
de:8a:15:ee:37:1a:5f:f3:1d:03:4d:f8:62:20:a7:6d:e6:ea:
6b:4e:f1:9b:5d:87:cf:d3:23:d1:af:fd:b6:8f:01:ae:68:d4:
c3:71:73:df:18:e6:f1:39:10:24:60:a4:91:dc:b2:a4:1f:4d:
88:78:f9:36:05:9c:03:94:d5:7d:17:18:1d:ab:34:08:8c:1b:
1d:17:78:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:03 2026 by rpki-client