Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
File: EasXfkpP_uueof01dmw7iocxHeg.mft (raw, json)
Hash identifier: NKKr6D37cjvhfkvawQ9l4x8LaYlYA5CahNinxT//A08=
Subject key identifier: 36:AC:9B:BE:BA:94:0E:68:2B:C3:BB:01:A4:CB:56:86:6E:9A:ED:7F
Authority key identifier: 11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8
Certificate issuer: /CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
Certificate serial: 019D2A72BECDDDF52CA62B12808295DC49D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
Manifest number: 07CF
Signing time: Thu 26 Mar 2026 14:00:56 +0000
Manifest this update: Thu 26 Mar 2026 14:00:56 +0000
Manifest next update: Fri 27 Mar 2026 14:00:56 +0000
Files and hashes: 1: EasXfkpP_uueof01dmw7iocxHeg.crl (hash: Meem5Cz4Ui1ItCR40oGcS7q5/VP0I00Ed8nFnb8R6k4=)
2: pOa9KIHkvR1N9UVxd0Y5yCq1Nbk.roa (hash: 1RmAXKNphGOVS4U4lNBANNahDEgoMen7DHDul6xwB5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:be:cd:dd:f5:2c:a6:2b:12:80:82:95:dc:49:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
Validity
Not Before: Mar 26 14:00:56 2026 GMT
Not After : Mar 27 14:00:56 2026 GMT
Subject: CN=36ac9bbeba940e682bc3bb01a4cb56866e9aed7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:18:56:bb:4c:02:c3:01:c1:ae:f5:0a:29:29:
6d:fe:e9:1a:ed:ae:3f:c6:a4:8d:c7:15:1a:3d:de:
49:93:cc:24:89:8a:fc:82:f0:be:32:43:c3:a3:d1:
02:84:a5:4c:f7:1b:77:8d:06:ea:13:eb:4d:13:95:
48:62:54:2d:c7:ae:95:f9:e7:11:c3:cf:2d:c7:38:
6a:9b:10:bf:8c:bd:57:f6:4e:fa:21:51:c0:a9:f3:
2a:1f:af:37:78:72:98:7e:83:50:57:e7:4d:80:fa:
27:ec:d0:39:d8:ea:22:cc:65:94:46:94:83:58:07:
cb:4e:a4:a7:03:e2:ed:dd:49:79:8d:c4:e1:15:86:
7c:c9:a3:83:b7:c0:3d:26:c5:f2:a7:10:8a:df:93:
ef:d9:b2:8c:b8:f4:15:32:d4:55:a4:8e:b1:d9:e9:
c8:83:03:d8:54:08:8e:16:fc:57:55:9a:32:2a:3a:
c3:a1:fb:1d:35:a6:9e:59:9a:c1:39:4c:11:61:da:
59:38:c9:ff:76:14:d0:9f:a3:f8:f9:f9:ad:a3:1b:
72:c7:48:b4:7f:97:33:95:e4:ff:c8:aa:42:85:8d:
f1:cd:3a:f3:1f:64:7a:ac:ab:ad:29:f2:4a:1c:b6:
22:88:39:12:65:c9:f9:0e:fd:af:30:62:69:12:dc:
bd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AC:9B:BE:BA:94:0E:68:2B:C3:BB:01:A4:CB:56:86:6E:9A:ED:7F
X509v3 Authority Key Identifier:
keyid:11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0b:7e:4d:e5:a5:49:af:00:f5:52:6e:66:95:dc:a2:54:f6:
39:f4:52:35:23:87:08:78:a0:03:d1:f5:84:aa:2c:28:2f:28:
36:1e:f9:e6:ea:94:17:65:61:49:91:fe:f3:33:44:cf:20:5d:
51:08:16:ff:fd:5a:c6:e2:9c:e7:a3:43:56:38:f7:66:a3:0f:
6f:36:85:ec:2c:87:c4:2b:ce:12:c8:89:ab:d9:aa:ff:4a:76:
e5:83:2b:28:f4:26:a7:d2:82:70:d8:9f:3b:a4:2e:63:4a:4a:
36:a5:1e:14:8f:78:4f:bd:04:06:25:ca:39:03:22:7a:0e:7f:
a0:a5:ea:ef:46:81:60:2a:d7:0d:7b:73:12:16:14:64:5b:7b:
a3:32:fb:13:0e:09:7d:d8:f7:1c:91:ab:2a:a7:63:07:81:86:
51:8d:3c:59:15:ab:ad:55:f5:0d:fa:5e:af:f9:62:86:bd:da:
43:9b:79:d1:11:76:5f:b7:aa:77:17:db:7b:05:51:46:c8:51:
b8:bd:3c:d9:fc:d5:96:a1:2e:53:50:ee:b3:c9:9f:e3:6b:5d:
6a:25:0a:e6:77:bf:29:73:c9:10:47:35:02:3a:e6:77:f6:7e:
37:e3:5c:f4:10:59:3b:62:13:9a:0e:f3:d8:de:ca:9f:0e:bf:
ac:f7:cd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:05:17 2026 by rpki-client