Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
File: EXoEqScBnDzi0MnbOjFJd6Cns1w.mft (raw, json)
Hash identifier: 1a0n64XHDM5cH3ANuBRWwIngbWBXTeMNg+LfisUhWtc=
Subject key identifier: 3A:16:EA:B3:0B:BF:FD:0E:E8:E1:6A:EB:C0:DE:88:99:0A:27:04:6B
Authority key identifier: 11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C
Certificate issuer: /CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c
Certificate serial: 019D254C68F72F71BF8957355516ABE4EBE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
Manifest number: 0555
Signing time: Wed 25 Mar 2026 14:00:57 +0000
Manifest this update: Wed 25 Mar 2026 14:00:57 +0000
Manifest next update: Thu 26 Mar 2026 14:00:57 +0000
Files and hashes: 1: EXoEqScBnDzi0MnbOjFJd6Cns1w.crl (hash: yRKwg/WjiAs9hH+CrpzOEb1hGh6gTbFOheWEubZ3JRY=)
2: TJRxaYOzjaCJSFBaaOb3EycksAs.roa (hash: eOSY9kDDMBMljbLW+yYUj3pzdf96TWtB5cU/Op3wa8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:68:f7:2f:71:bf:89:57:35:55:16:ab:e4:eb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c
Validity
Not Before: Mar 25 14:00:57 2026 GMT
Not After : Mar 26 14:00:57 2026 GMT
Subject: CN=3a16eab30bbffd0ee8e16aebc0de88990a27046b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:79:e6:63:c5:61:19:a9:88:79:8a:ab:a0:84:
de:11:95:85:5f:60:47:04:8b:45:c5:1a:1c:3a:ba:
fa:0a:f8:79:2d:92:fc:f1:43:15:2f:e2:7b:8f:24:
9e:5f:fa:6c:e5:7b:8c:30:31:cc:60:6f:1c:19:8a:
e0:ff:e3:a6:d6:e0:60:75:50:41:30:fd:02:50:40:
b7:d1:75:c3:98:ca:6f:f0:aa:38:0c:bb:1b:4c:a2:
10:78:05:63:5c:74:1b:78:2d:57:d0:92:18:a1:c0:
ff:1d:b6:ff:40:0f:0d:39:e3:b2:7f:20:3b:b6:10:
78:4b:89:30:e9:72:b5:1f:ed:0c:f4:0d:17:a9:10:
34:c7:e9:4b:b1:1c:73:0a:cf:b8:87:ae:42:0c:04:
4e:34:ae:09:5b:ef:46:01:fa:ec:0a:94:af:87:7f:
a6:d5:03:50:d5:44:6d:e6:eb:05:46:13:5e:98:fb:
9e:04:d5:86:ca:7b:82:49:c5:22:72:ca:a4:eb:96:
a8:7f:19:0d:cb:74:a8:0b:5f:91:df:5b:b2:b4:38:
66:6b:28:d0:a0:77:ff:d8:7a:b8:62:0f:6c:ab:3e:
da:ef:2f:be:b6:1d:11:f8:9e:4f:7d:2a:5f:9b:74:
fc:84:c5:e9:f2:0c:b1:4d:59:a8:ea:42:6d:ac:c6:
88:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:16:EA:B3:0B:BF:FD:0E:E8:E1:6A:EB:C0:DE:88:99:0A:27:04:6B
X509v3 Authority Key Identifier:
keyid:11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1c:51:d1:91:52:b7:89:f3:f5:d5:45:32:12:b9:27:39:d9:
c7:e0:ce:70:c8:7a:e6:e8:3e:6a:a4:5f:cc:db:c7:81:49:2c:
a0:a1:fb:f7:e3:8c:22:29:34:c8:47:1d:4b:d0:a3:25:3f:42:
ea:3c:2e:69:ab:99:45:05:96:e9:a2:7c:2f:a2:f9:20:04:f7:
3d:a2:2b:33:80:2b:09:7c:ae:40:06:17:7f:d0:e2:4e:ce:0c:
79:ba:01:5e:41:16:ec:00:ae:80:27:ff:40:c0:0e:db:71:63:
78:62:89:ba:47:df:1a:cf:5b:e8:78:77:bf:93:b9:29:1b:13:
84:34:4e:00:fd:82:da:0c:5e:52:20:f0:0f:76:ea:bd:ef:57:
46:7a:de:e2:17:e2:73:d7:d4:1c:80:63:e1:cb:2e:15:29:57:
76:1e:3b:c8:1c:4f:3d:c4:56:64:51:97:91:4b:7e:61:d4:9e:
fc:48:73:ac:ff:53:b9:b9:5d:f8:62:e5:92:b6:1c:56:7c:4a:
e8:be:f8:0d:7e:95:5d:97:92:56:ae:b9:17:a2:1d:06:57:7e:
7c:f6:15:f2:59:f7:11:f2:b9:10:a4:f8:ba:73:3c:1f:ee:78:
87:50:6c:ef:c9:37:5a:fb:26:61:7d:ed:57:51:75:1b:9b:ed:
e8:a5:11:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:51 2026 by rpki-client