Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
File: EeKnjdx_E58MIqKmNmK0gSrlEy4.mft (raw, json)
Hash identifier: t+UEKPlVOSDV0Fd1IF1UVcJk2nD5IBV6qt+5iJuwc9k=
Subject key identifier: DA:29:B4:5C:0B:4B:EB:E1:32:CF:D6:96:86:7B:4E:72:D7:5A:07:14
Authority key identifier: 11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E
Certificate issuer: /CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
Certificate serial: 019D38D3A28707CC2119FA4773ACB352CB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
Manifest number: 0F7A
Signing time: Sun 29 Mar 2026 09:01:26 +0000
Manifest this update: Sun 29 Mar 2026 09:01:26 +0000
Manifest next update: Mon 30 Mar 2026 09:01:26 +0000
Files and hashes: 1: EeKnjdx_E58MIqKmNmK0gSrlEy4.crl (hash: xsayooU2aqJkXhf/BYgF3MqrOM6t0mgIY5JN/GeUjS8=)
2: POucus2LMmIxqaTenZUYFWd30rE.roa (hash: Fxl3jbCqABLrA9is5dq2ro7XsbiBSbOlCmya+1YduAg=)
3: pWXZtCsdY4YY3ukaTshaoyzjeSc.roa (hash: aOl1H4Qz0lJuDr1Yv2a145gjt3ffANHgu1PQv3jNCUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a2:87:07:cc:21:19:fa:47:73:ac:b3:52:cb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
Validity
Not Before: Mar 29 09:01:26 2026 GMT
Not After : Mar 30 09:01:26 2026 GMT
Subject: CN=da29b45c0b4bebe132cfd696867b4e72d75a0714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a3:03:56:3f:aa:ea:75:8e:e0:19:6b:96:3c:
27:32:9d:1b:11:56:a9:61:00:1f:8f:b3:0b:ee:f2:
13:7f:16:08:c8:02:8a:d1:a1:ac:c6:3e:d2:4d:85:
35:f2:9a:13:12:69:79:95:c0:c7:8e:d3:41:91:56:
47:2e:5b:ca:be:f8:0a:a8:40:1b:92:84:10:5a:ba:
50:88:87:4a:4f:56:ec:1c:86:85:b3:07:98:7c:77:
72:53:b0:62:c9:47:65:50:de:60:9b:37:1c:14:b0:
2e:5f:16:fc:13:8e:5a:fb:12:3e:2c:1b:61:59:e0:
58:83:56:e5:80:f0:2d:63:f0:09:7f:e1:b5:2f:4c:
cb:0b:5d:a3:b4:97:89:6c:7c:5b:15:09:40:dd:2e:
61:23:f8:e0:fe:43:de:26:74:39:50:aa:8a:2c:52:
01:d0:35:f0:47:1c:d3:24:0f:70:51:94:99:2d:ff:
88:0b:64:be:cb:cd:7c:6d:f2:9c:94:8b:27:bc:db:
90:84:ff:c1:73:a2:86:a1:0c:9a:6e:8c:a4:2e:61:
8c:0a:8c:1f:89:16:81:89:68:45:2d:65:1e:21:d1:
58:76:37:95:7f:33:2c:cd:89:1a:54:79:ca:a3:f7:
da:58:ff:73:cd:a0:e7:92:7b:b6:36:0b:c3:2e:2e:
8c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:29:B4:5C:0B:4B:EB:E1:32:CF:D6:96:86:7B:4E:72:D7:5A:07:14
X509v3 Authority Key Identifier:
keyid:11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c1:d1:45:1b:24:c3:50:01:0f:9f:de:54:4c:c0:d6:da:20:
91:f0:88:b3:f9:b9:5f:f3:f4:b0:95:0e:b9:e6:c8:f5:e8:3b:
3b:5b:53:7a:fb:73:bc:57:2e:73:b2:70:3d:48:ed:ea:25:6e:
b4:6a:e2:d1:b4:28:4c:79:f6:e8:c6:3c:cb:3b:4c:98:d1:d6:
68:bb:78:01:f4:dd:9b:64:1b:61:e6:8f:b6:6a:2e:87:af:d5:
63:eb:42:05:aa:d3:39:4a:78:7a:7e:55:f3:90:cd:49:76:9d:
5e:98:6b:2d:12:7b:df:47:0c:0a:ac:8b:be:7f:df:41:c7:0b:
06:56:bc:37:4a:72:6e:cb:e0:bf:22:4b:1d:f7:cc:3f:30:b6:
e6:e9:b4:05:52:06:5c:69:cf:fe:cf:47:a2:60:76:96:6e:1f:
0e:60:10:85:b9:36:1d:9a:cb:20:c9:f6:5f:21:28:2a:67:44:
28:89:01:71:e3:72:97:57:0b:9d:33:0d:af:ed:bc:0c:21:ca:
ca:ce:c2:a4:5a:e6:7c:19:6c:1b:a4:61:b8:06:77:e2:fe:85:
61:b6:a3:fd:14:c4:d5:3b:1f:30:53:83:32:d2:e3:b9:09:3d:
cc:3e:1e:24:05:50:b9:5e:be:6a:e0:54:91:5e:c2:aa:2f:60:
b0:7d:21:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:54 2026 by rpki-client