Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
File: Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft (raw, json)
Hash identifier: I3PuYaBiLwAceuW8Jy9/DAVYXWuc3QJhp1AqiXubkBk=
Subject key identifier: DC:88:98:DC:F4:2C:0B:8F:58:2B:6D:DC:C3:5C:5B:CB:F7:D1:E5:07
Authority key identifier: 13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D
Certificate issuer: /CN=132e1e484fca8e9528df6ac1483056c88786771d
Certificate serial: 019D394149C747C3721084220671ACA548EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
Manifest number: 0F5A
Signing time: Sun 29 Mar 2026 11:01:13 +0000
Manifest this update: Sun 29 Mar 2026 11:01:13 +0000
Manifest next update: Mon 30 Mar 2026 11:01:13 +0000
Files and hashes: 1: Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl (hash: 069U1r80fHD58DpYwPJhpK8ONRZIkjRBsR1eDbiV3JY=)
2: xf_QUU1oboJfw8GDN5-xVx0M_-E.roa (hash: rDjY7MiBuFT4JV2RH/A0NQJ6KgI0D96lXBHlUo5cGuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:49:c7:47:c3:72:10:84:22:06:71:ac:a5:48:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=132e1e484fca8e9528df6ac1483056c88786771d
Validity
Not Before: Mar 29 11:01:13 2026 GMT
Not After : Mar 30 11:01:13 2026 GMT
Subject: CN=dc8898dcf42c0b8f582b6ddcc35c5bcbf7d1e507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a2:a7:24:a9:df:2c:f2:6b:68:4a:a8:5e:e8:
0c:f9:09:7d:43:7c:11:58:89:e7:e1:92:68:e5:c7:
1b:bc:2c:5c:d5:c6:ba:e8:1a:25:64:f8:82:53:26:
ba:16:d6:2a:29:e3:bf:37:e9:82:0e:80:a7:37:1c:
5f:e2:33:91:0c:bf:ac:c4:24:50:b8:dc:a3:35:82:
65:a0:96:7b:02:04:59:49:1a:eb:e7:8c:07:a8:5e:
be:6e:52:3b:44:43:cf:3f:2f:4b:ed:56:ee:78:27:
fd:ac:ee:91:aa:c5:32:72:4b:fb:55:32:2e:66:df:
b1:e7:bd:75:e8:78:44:44:bc:7b:95:43:1b:11:36:
bb:a7:6b:1c:19:d7:7c:d6:ab:54:4c:51:21:cc:67:
cc:36:d6:16:e9:d3:0e:26:ac:51:e4:d0:2f:83:b9:
61:99:5c:d3:5e:33:f8:eb:e8:d3:b6:74:0e:ab:00:
df:85:1c:b9:f8:16:b9:6d:a7:9e:58:00:2c:94:0c:
8a:1f:e7:92:f5:cd:4b:b2:6d:34:76:4f:d5:73:ef:
2f:45:d6:26:29:76:5a:30:a7:b8:9e:d7:fe:f9:68:
14:03:bf:c2:ff:9f:70:7e:45:57:3e:e3:52:6a:57:
c4:8a:e5:34:58:ce:90:cf:b5:71:d1:8e:f5:ab:c7:
52:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:88:98:DC:F4:2C:0B:8F:58:2B:6D:DC:C3:5C:5B:CB:F7:D1:E5:07
X509v3 Authority Key Identifier:
keyid:13:2E:1E:48:4F:CA:8E:95:28:DF:6A:C1:48:30:56:C8:87:86:77:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ey4eSE_KjpUo32rBSDBWyIeGdx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/37f56e-a221-4e00-8e14-79d6f53c7a2e/1/Ey4eSE_KjpUo32rBSDBWyIeGdx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:98:96:aa:c7:cd:86:af:b8:8c:6d:31:de:bc:4f:f7:eb:98:
e3:bf:ef:44:ad:4f:f4:dc:19:f0:ce:5f:55:07:35:25:2a:17:
97:b2:f5:40:d4:5b:cb:71:7c:50:5b:94:0d:9c:12:e1:e1:97:
5e:0b:fa:c8:57:2e:25:e9:15:86:42:c3:5b:19:88:67:ab:fe:
3b:94:19:19:eb:aa:bf:5f:de:a2:af:74:41:83:49:f8:e4:a2:
74:7e:ec:58:fd:5f:70:42:7f:1b:90:17:88:a9:81:73:f3:43:
35:d4:f3:cd:c9:c5:c6:d1:ae:0e:4a:45:d7:d9:04:f1:9f:57:
06:8a:e4:ea:5b:15:ba:ea:94:3c:dc:0d:2e:cb:dc:b8:91:c1:
46:31:1f:9b:e6:59:27:c5:bf:45:96:db:df:7d:69:ec:87:71:
1b:4e:10:e0:48:6a:ac:54:2a:67:cb:d4:8b:5d:cb:ec:68:c9:
6b:9f:86:46:2d:34:66:54:d7:1f:f6:41:5d:20:4a:55:62:eb:
78:1d:e8:97:c0:61:56:01:83:ed:18:04:0a:ba:52:72:ec:a5:
59:b0:3b:68:77:b9:4b:a0:7d:94:d7:2a:29:09:04:07:81:cb:
19:6d:c1:1b:6c:eb:44:6f:a0:d5:82:2d:c0:48:fc:d4:b1:c8:
73:52:06:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:45:24 2026 by rpki-client