Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
File: Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft (raw, json)
Hash identifier: rIlNuB/eUh1OQgwvJRAgPWxJGaeo3jc8djkjI6e1IBQ=
Subject key identifier: A8:51:89:65:BB:26:ED:1A:52:F5:0D:DC:5D:4B:FD:05:CE:4D:BD:93
Authority key identifier: 11:AE:4E:CA:F5:FE:48:E1:85:86:D9:0F:A5:4E:9E:6F:BF:D4:FE:D5
Certificate issuer: /CN=11ae4ecaf5fe48e18586d90fa54e9e6fbfd4fed5
Certificate serial: 019D2A0457B7BDC07E3D44893A2F5E9D2E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
Manifest number: 0446
Signing time: Thu 26 Mar 2026 12:00:20 +0000
Manifest this update: Thu 26 Mar 2026 12:00:20 +0000
Manifest next update: Fri 27 Mar 2026 12:00:20 +0000
Files and hashes: 1: Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl (hash: h7TaM35KNhP0Q0F09ApXHf4sMCJUqnYU6lM5bcuP1g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:57:b7:bd:c0:7e:3d:44:89:3a:2f:5e:9d:2e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ae4ecaf5fe48e18586d90fa54e9e6fbfd4fed5
Validity
Not Before: Mar 26 12:00:20 2026 GMT
Not After : Mar 27 12:00:20 2026 GMT
Subject: CN=a8518965bb26ed1a52f50ddc5d4bfd05ce4dbd93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ca:1a:75:b0:51:49:6c:81:ab:e0:51:c1:bd:
93:5d:58:a3:c9:a2:cf:31:bf:f0:1c:17:8d:db:5f:
8c:bc:26:ee:7f:bd:1d:67:eb:ea:b3:73:6e:52:b9:
c9:38:04:79:56:c0:e1:0b:5d:7f:97:34:bc:81:fb:
24:dd:b2:b1:7d:43:b2:63:c7:f5:62:94:a4:da:4d:
7c:21:89:dd:68:47:d8:82:57:35:a8:11:66:a1:86:
b2:f0:9b:7f:61:2e:a3:35:c9:c4:6a:4e:1b:4f:53:
84:04:d2:cc:a6:65:77:c1:5b:1a:2a:ff:a4:16:51:
54:f9:8d:d6:0c:71:34:e1:dc:df:0b:7a:25:30:8d:
05:c3:21:df:7a:5e:03:35:e0:c1:f9:73:32:3c:0d:
30:bc:90:36:e2:ab:1d:af:f8:06:c6:19:8a:f8:0c:
6f:e8:4f:da:57:79:c5:03:3e:88:f7:cd:8c:ac:e1:
17:d2:c8:56:19:10:d8:3c:49:3f:4a:91:de:fe:4c:
dd:c4:1d:5a:4a:dc:a4:f9:75:a9:5a:86:71:9f:4e:
63:a4:54:f4:df:00:4d:f2:66:14:67:3b:34:3b:ec:
44:cf:64:ea:37:84:47:76:76:ea:a3:36:6b:1f:1f:
23:d9:5e:c2:e6:86:3a:f6:40:f8:59:a7:d2:f6:e6:
c8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:51:89:65:BB:26:ED:1A:52:F5:0D:DC:5D:4B:FD:05:CE:4D:BD:93
X509v3 Authority Key Identifier:
keyid:11:AE:4E:CA:F5:FE:48:E1:85:86:D9:0F:A5:4E:9E:6F:BF:D4:FE:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:85:12:c3:95:95:22:42:86:56:c1:5d:10:e0:df:e6:09:dc:
b3:88:26:5c:be:f6:d1:28:0e:59:f9:82:d9:4c:1a:79:95:74:
c5:7d:ec:4f:bf:d1:f7:c9:ca:be:df:99:01:48:79:7c:28:8c:
de:0e:b9:d6:96:4b:f9:f7:5c:9f:41:a0:ee:8a:2a:72:f2:8b:
ab:00:b7:07:58:c7:97:c9:0e:42:87:6c:0a:b2:3a:97:39:99:
b8:d5:c3:35:bc:21:9b:46:f6:2d:74:6c:ff:3c:24:38:2a:b1:
90:30:b8:71:06:51:96:a0:76:bc:18:89:f8:21:7c:49:25:55:
3d:cd:85:91:87:6a:96:67:de:09:67:f4:64:f3:e0:4d:6f:d5:
ee:11:72:2f:34:f7:07:f6:d8:04:41:28:4f:9f:24:db:ad:fc:
de:16:45:f1:a4:d5:cb:b8:79:bb:90:ab:67:6a:c9:b1:7c:bc:
05:35:2c:68:03:32:5d:8a:eb:d8:1a:53:ec:88:a9:c2:74:ae:
6d:47:29:a8:44:9e:1f:9a:ba:0d:d6:43:94:a2:74:62:24:e2:
25:3e:8c:18:d4:3e:2e:2e:d0:c8:93:6e:2b:58:94:a8:1e:1d:
85:70:a2:7f:4f:49:56:6c:4c:ee:c6:ec:a6:2f:e2:48:0c:fc:
85:51:d1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:13 2026 by rpki-client