Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
File: ee4R2MQpe-xUvTBUMMpHct-shHo.mft (raw, json)
Hash identifier: AB0NavOA6Nn1auR8sw/jyQFVwAfWHoNVRKJIUsjhVNY=
Subject key identifier: 41:B8:40:BD:DC:80:34:13:46:84:B9:FC:92:E6:D3:7D:38:93:22:57
Authority key identifier: 79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A
Certificate issuer: /CN=79ee11d8c4297bec54bd305430ca4772dfac847a
Certificate serial: 019D3307D1ECC8DC6EA6B65F72C38C0E97F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
Manifest number: 0C9A
Signing time: Sat 28 Mar 2026 06:00:43 +0000
Manifest this update: Sat 28 Mar 2026 06:00:43 +0000
Manifest next update: Sun 29 Mar 2026 06:00:43 +0000
Files and hashes: 1: ee4R2MQpe-xUvTBUMMpHct-shHo.crl (hash: Y7uRJeZ0KVmww3KDqRYK/rxuTJc4qEA6K42jY8478FU=)
2: nkXiZoMMW3zafsjty-VJgGg0Xzc.roa (hash: F3sEH4KSkZNHFk1f1SP7LzRoEDV0ahVUx0fynXewv18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:d1:ec:c8:dc:6e:a6:b6:5f:72:c3:8c:0e:97:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ee11d8c4297bec54bd305430ca4772dfac847a
Validity
Not Before: Mar 28 06:00:43 2026 GMT
Not After : Mar 29 06:00:43 2026 GMT
Subject: CN=41b840bddc8034134684b9fc92e6d37d38932257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c2:66:9a:db:bc:aa:9a:8a:b1:89:06:3f:aa:
bc:93:08:d5:d7:5c:01:82:bc:28:61:5f:e8:83:d9:
81:e3:0d:07:3d:90:19:c3:07:5a:01:af:b4:85:9b:
2d:ed:3e:69:37:38:e7:ca:fc:cb:95:5e:2a:e0:24:
4d:e8:f4:80:5c:31:fd:78:19:e0:39:d4:60:01:9b:
56:88:a3:47:09:10:52:9d:ed:78:87:3d:19:c8:ba:
ba:a7:18:e5:65:a2:94:60:30:fd:a2:d0:91:9a:3f:
eb:c7:78:fb:ee:4f:e6:dd:0d:37:59:58:e9:ce:b1:
c6:8b:45:ce:fa:56:67:e5:9c:78:bb:6f:7a:e4:d3:
d5:2e:36:02:b9:8b:73:46:53:3f:51:0d:79:d5:dd:
2c:09:44:b7:fc:b1:b1:55:bf:5e:26:15:d1:00:83:
77:22:d0:f0:9f:ac:2f:a4:ce:eb:bf:48:e1:70:e1:
d9:97:65:37:bd:2c:11:e2:d4:90:a6:1a:8b:8d:aa:
72:86:8c:5b:d8:e2:62:90:aa:18:64:e6:95:88:e7:
a5:83:12:3b:98:6f:6c:52:7e:f2:b7:c8:2c:82:3b:
f9:8a:94:fa:4b:d6:dd:51:bf:51:62:5f:8a:fe:e3:
b6:0e:8c:8d:77:c1:79:48:7f:f4:6b:81:a7:b0:9c:
5c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B8:40:BD:DC:80:34:13:46:84:B9:FC:92:E6:D3:7D:38:93:22:57
X509v3 Authority Key Identifier:
keyid:79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:85:b9:d4:e2:89:93:29:6d:96:56:9a:e7:32:44:1d:4a:9e:
28:9a:07:81:6b:50:b3:5f:e6:18:7c:ff:9e:98:95:9e:55:4a:
ba:8c:b3:79:37:46:1f:79:a4:07:c7:ae:91:1b:bb:83:96:30:
3f:d1:52:7b:60:f5:c7:36:b4:2b:e6:23:75:0a:e7:ef:a8:ed:
95:df:dd:04:d6:fb:c5:cd:ac:87:96:69:70:2a:f0:74:45:df:
97:ea:3e:9d:ca:be:70:fd:fc:ef:f2:a3:b2:c9:21:60:89:60:
5c:6c:de:f6:d5:cf:1d:f9:2f:fb:c7:59:0a:bb:37:84:74:c9:
2e:5d:64:86:2d:4c:2d:89:f4:18:4d:be:8e:79:f6:bb:4c:87:
d4:5c:d6:30:13:1e:ac:c0:b4:58:49:40:28:b2:5b:d2:88:5f:
a4:9d:fa:82:a4:b5:dc:c2:37:f0:77:b1:4d:07:c9:3a:e4:df:
52:e6:de:85:ed:8b:4d:97:2c:e1:5b:8c:cb:a2:d3:42:40:1d:
eb:08:16:a2:09:f7:51:e3:9c:e1:24:29:f5:6f:67:71:33:56:
ec:7f:60:1f:1b:78:60:09:10:c0:18:bd:df:8b:49:bd:ec:4d:
1d:13:5a:ef:3b:ed:59:8c:56:8c:28:36:93:9c:c8:ff:57:04:
b7:4d:8b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:44:19 2026 by rpki-client