Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
File: EQhLfTeLmTxfXnSfajRN4j5FrQA.mft (raw, json)
Hash identifier: nYWKDN5gmM4dSFUSt8o95iA1sT+tXEslAYVMUMayjP0=
Subject key identifier: 2D:20:41:A4:91:FB:3C:FB:CF:C9:7C:0A:6C:EA:CC:41:E7:3C:78:4F
Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
Certificate issuer: /CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Certificate serial: 019D3752A6A7F29990825014A013B2EFA6E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
Manifest number: 0F6D
Signing time: Sun 29 Mar 2026 02:00:56 +0000
Manifest this update: Sun 29 Mar 2026 02:00:56 +0000
Manifest next update: Mon 30 Mar 2026 02:00:56 +0000
Files and hashes: 1: 0QygA5EjmnNvfod7LRYIvHW6VOU.roa (hash: 9mJbNM5RFQ2gh5+u4PI5yU3lzfK+jzemRH8Ny/3lnYI=)
2: EQhLfTeLmTxfXnSfajRN4j5FrQA.crl (hash: LqibRcda8+K0kD0j1KE8yz9nz7N1i47diVFnfmEz7p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:a6:a7:f2:99:90:82:50:14:a0:13:b2:ef:a6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Validity
Not Before: Mar 29 02:00:56 2026 GMT
Not After : Mar 30 02:00:56 2026 GMT
Subject: CN=2d2041a491fb3cfbcfc97c0a6ceacc41e73c784f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:73:8a:e0:03:f0:12:14:02:29:a4:5f:fc:0b:
85:cc:f8:41:e6:5c:26:2c:07:d2:2b:76:b3:97:95:
2c:40:69:6d:d0:8b:f4:eb:bf:76:53:bc:b0:71:50:
e3:ce:5d:24:90:78:09:11:0c:6b:1b:88:2d:07:73:
14:92:5c:ad:90:6a:32:90:a2:77:03:99:a3:cb:88:
1c:ee:00:76:b7:b2:9b:61:b4:42:1d:74:37:c5:d4:
0e:1f:42:91:7f:46:d9:48:ff:60:82:4e:b3:8b:61:
4d:f6:f5:e2:5d:2d:5d:01:bf:f6:da:be:77:65:49:
59:53:f3:06:ad:42:06:93:09:11:33:81:31:58:79:
5b:59:a8:62:da:71:06:8f:a4:c1:13:06:5e:99:f9:
2e:b7:eb:1f:d9:07:49:18:cf:61:25:57:d2:ed:c9:
2c:e4:8d:2f:b0:ba:c5:f9:eb:a4:07:78:00:37:e4:
68:1f:76:cc:0f:27:08:06:36:45:e6:8e:cb:f9:5c:
2f:e4:b4:62:d4:e5:c0:e2:f6:64:d5:91:1a:eb:ea:
db:c9:1d:e8:94:37:a4:11:a9:8a:42:35:70:6a:21:
48:b6:93:d7:c4:a9:0c:cd:ba:bb:70:f6:a2:9e:09:
41:b8:ff:a1:b0:29:d1:c3:72:46:b4:17:a8:31:31:
b5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:20:41:A4:91:FB:3C:FB:CF:C9:7C:0A:6C:EA:CC:41:E7:3C:78:4F
X509v3 Authority Key Identifier:
keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:6f:cf:f8:20:35:88:8b:4a:b3:2f:f8:a6:f1:2e:7a:96:ec:
46:96:6b:df:3c:a8:86:68:94:6c:06:95:75:7f:cc:5c:ba:10:
93:46:38:e0:75:a6:49:ce:67:44:01:be:45:d8:34:c3:67:bc:
38:ad:96:5e:20:24:3e:25:3c:19:74:9d:d4:44:9d:55:4c:37:
7a:79:2d:61:94:56:6c:09:c3:9c:62:2b:c6:1b:ee:e8:f0:cc:
cc:9c:ae:2e:a5:19:5a:ab:88:fa:95:86:5b:cd:ac:b1:29:ff:
1f:85:7c:b7:38:2f:26:69:cf:e6:3b:4e:f8:22:e4:9a:2e:6e:
b4:b4:4c:c9:77:db:79:4c:a6:18:a1:44:dc:c3:ad:c9:34:4e:
e1:bd:57:97:ef:5d:6e:f1:ec:51:9b:50:d2:64:51:87:80:cf:
f5:c9:9c:98:e1:34:38:97:e1:32:a8:a8:41:44:fc:75:8e:84:
64:19:31:8f:8e:da:6f:1d:d2:59:45:42:87:f4:4a:7b:a3:41:
3b:82:9a:0c:a3:43:85:86:a4:ad:e2:a6:d5:5f:bb:f7:ca:55:
69:06:c9:ef:8d:be:cb:28:ab:fd:4a:26:d3:83:99:0c:4c:7a:
b0:13:9d:59:30:fb:f2:2a:f5:73:19:f8:fc:39:77:64:44:b5:
5e:4b:13:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:16 2026 by rpki-client