Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft
File: EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft (raw, json)
Hash identifier: ArVSTse1OMOgdIeBiG9l36xhYgTfKYhrjC1EqjAucaw=
Subject key identifier: 14:0B:2F:C3:E1:76:2F:01:3A:C1:7F:D9:EF:6F:1D:AD:C7:A7:00:3A
Authority key identifier: 12:A6:28:50:1A:F6:5C:F5:FF:39:70:F3:12:34:14:C6:B8:0C:C0:A9
Certificate issuer: /CN=12a628501af65cf5ff3970f3123414c6b80cc0a9
Certificate serial: 019D2703AA054C948CE5348BD9DFFC954CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqYoUBr2XPX_OXDzEjQUxrgMwKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:00:44 +0000
Manifest this update: Wed 25 Mar 2026 22:00:44 +0000
Manifest next update: Thu 26 Mar 2026 22:00:44 +0000
Files and hashes: 1: EqYoUBr2XPX_OXDzEjQUxrgMwKk.crl (hash: xkL0MNAkvT5mp0ln1ATW+d+sDJKOb50vUa07l0VPvKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EqYoUBr2XPX_OXDzEjQUxrgMwKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:aa:05:4c:94:8c:e5:34:8b:d9:df:fc:95:4c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12a628501af65cf5ff3970f3123414c6b80cc0a9
Validity
Not Before: Mar 25 22:00:44 2026 GMT
Not After : Mar 26 22:00:44 2026 GMT
Subject: CN=140b2fc3e1762f013ac17fd9ef6f1dadc7a7003a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:5e:92:a7:5a:24:b9:18:34:61:0b:c9:5e:
35:0a:d8:85:27:cc:fc:b1:01:9a:66:29:54:37:4c:
6b:6d:be:ab:7e:6d:b4:c9:a4:bd:6a:70:0f:12:c1:
8b:11:90:b3:15:62:3a:bc:a4:77:f1:3e:85:38:e6:
38:9c:0e:df:55:8e:78:32:dc:a9:8e:27:50:45:ff:
76:1b:05:ff:ef:41:16:65:2a:74:5d:b9:67:49:0f:
07:49:e7:ca:41:63:24:ae:34:79:ea:38:ef:34:9f:
84:2b:e2:22:35:b6:f4:b3:41:7d:ca:91:ee:62:6c:
3f:69:f1:0d:85:fe:14:ee:8b:cf:8f:87:78:ab:7d:
4b:8e:2f:8e:0f:11:7a:d4:6f:5b:68:a7:f3:e8:e8:
c2:aa:3e:c3:40:8e:e5:f9:c2:46:4c:65:59:66:29:
2c:21:67:3b:d6:16:41:3e:5d:2e:c6:b8:00:f7:3f:
84:56:e2:3b:e1:b5:74:c1:62:68:03:5c:9f:3c:d0:
fd:2e:83:26:7c:a1:99:e3:41:c9:87:c6:b9:ad:9a:
a1:17:b5:89:ab:7f:78:fd:e5:68:ed:b9:2c:0e:f7:
ac:f8:65:9b:c6:c7:3b:e9:43:ee:d0:c0:3c:63:99:
79:37:f9:3a:ff:e5:2b:87:71:13:c3:59:22:89:be:
b7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0B:2F:C3:E1:76:2F:01:3A:C1:7F:D9:EF:6F:1D:AD:C7:A7:00:3A
X509v3 Authority Key Identifier:
keyid:12:A6:28:50:1A:F6:5C:F5:FF:39:70:F3:12:34:14:C6:B8:0C:C0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqYoUBr2XPX_OXDzEjQUxrgMwKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f1:04:fe:4f:e6:7a:f9:b8:45:c9:91:eb:4e:64:89:26:43:
41:98:04:64:60:99:2a:08:0b:df:2e:58:73:f7:52:d5:ea:9b:
62:cc:90:bb:90:58:66:d5:bb:61:e4:69:75:fc:c2:cf:61:3a:
c1:f0:b0:5f:a8:7b:22:70:3e:3c:19:4a:ca:6d:3b:55:33:cd:
22:1d:43:a4:b3:84:41:a1:b9:d5:8b:94:f7:95:f3:2e:af:1d:
56:5d:ea:1b:fd:a7:b0:8a:f9:eb:e3:2d:88:b5:50:14:5d:79:
15:7e:4e:4b:bc:68:26:37:e2:73:0b:ae:b4:08:f4:7d:4d:5d:
b3:b6:4b:5b:1a:33:69:2c:a7:a1:ed:c8:cb:34:17:31:09:5e:
97:f1:8a:38:de:0d:a6:ce:e7:52:6d:ad:e4:98:a9:1f:a1:d9:
de:3d:0d:ea:65:5f:c8:93:19:1f:69:35:d2:ff:5c:ae:e0:bf:
ee:25:87:2d:78:51:d4:f2:7f:37:8d:38:75:9b:e4:50:7d:5a:
5f:4e:92:85:6d:c7:a8:bb:94:96:47:cc:12:9a:cf:35:cb:b0:
6c:7a:27:54:46:42:47:5a:de:5f:4a:e2:70:89:e8:49:1a:90:
92:47:8f:87:db:6f:ee:c7:c4:9e:7f:a4:60:64:1f:7b:ae:f0:
d8:33:b8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:01 2026 by rpki-client