Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
File: EIr56cVlKzWESy5dS1N-n81EUvM.mft (raw, json)
Hash identifier: HktpkE0rSeweBxTqPNoLwFrvSVQUVKwJ8PMT/jalFHM=
Subject key identifier: 90:4B:07:4C:FE:0A:41:BF:B5:9A:C2:59:85:F1:20:7F:90:AB:47:C7
Authority key identifier: 10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
Certificate issuer: /CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
Certificate serial: 019D38D32F8D743B2F9A8074D2E79A84CF54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
Manifest number: 1425
Signing time: Sun 29 Mar 2026 09:00:57 +0000
Manifest this update: Sun 29 Mar 2026 09:00:57 +0000
Manifest next update: Mon 30 Mar 2026 09:00:57 +0000
Files and hashes: 1: EIr56cVlKzWESy5dS1N-n81EUvM.crl (hash: El6cZ93Io0P62XGiCaLrCEMzQPq+8QZemq9n/izJnF4=)
2: TKh_I82_-kkJKpfPp0F_3Aj8TYE.roa (hash: TTD8G35YelDUPVGOuIJGta0ZaAQ7u3Rr5oFH1+U9Uyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:2f:8d:74:3b:2f:9a:80:74:d2:e7:9a:84:cf:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
Validity
Not Before: Mar 29 09:00:57 2026 GMT
Not After : Mar 30 09:00:57 2026 GMT
Subject: CN=904b074cfe0a41bfb59ac25985f1207f90ab47c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:61:3d:ba:dd:88:52:28:02:15:aa:82:89:1e:
9e:cd:1a:1c:12:45:bf:9c:a4:4c:7d:e6:08:7d:72:
7e:c4:a5:d0:ae:f3:6e:b4:40:6f:31:33:0d:57:4e:
75:a8:48:7a:60:ca:e1:b9:eb:9b:10:19:d0:36:63:
7d:d0:2f:6e:41:c2:0c:7e:dc:d3:a2:56:45:3e:29:
43:09:e9:96:f1:d0:e8:5d:c3:44:ce:f9:54:8f:be:
f7:04:44:19:2b:2d:33:bf:bd:b6:e1:f2:fd:a0:d7:
77:fd:60:c8:c4:be:bb:0c:02:3b:35:be:29:78:0e:
cf:3d:33:99:61:af:df:c0:56:48:fb:a5:7b:b9:9d:
34:62:3b:a1:5d:6d:d1:54:f0:a8:c1:20:de:af:6c:
4e:38:05:33:33:73:bf:9a:14:7d:4b:21:d4:62:59:
4a:69:f1:c6:87:3e:e4:32:07:da:ec:b4:1e:f6:0b:
0b:e8:0f:df:33:03:c2:24:57:7c:0d:29:25:0f:04:
1a:91:83:e6:85:1e:e2:94:c7:52:09:5b:8e:9d:10:
31:f8:f5:a6:5c:c8:f2:b6:48:46:80:ad:94:9e:36:
57:78:6d:95:be:df:40:a4:da:11:81:99:8b:1e:d6:
ec:c0:e3:18:cc:6e:7a:cb:1b:14:2a:83:80:71:0a:
28:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4B:07:4C:FE:0A:41:BF:B5:9A:C2:59:85:F1:20:7F:90:AB:47:C7
X509v3 Authority Key Identifier:
keyid:10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:53:9c:aa:92:39:cd:e0:37:e0:75:ec:78:6e:c3:82:9f:b2:
54:75:6c:32:16:83:52:8f:f9:f4:1d:15:0e:63:4d:4f:6f:5c:
8c:30:bd:6c:84:97:d1:30:8e:33:f4:9e:0a:77:aa:bf:81:d3:
d4:68:b3:c5:5a:ae:cf:3d:c4:d5:c3:dc:ee:94:3c:a1:ba:e2:
a5:ef:d5:6c:d0:d7:5f:44:a6:45:cc:32:98:20:80:5e:de:a9:
b7:32:ff:1b:a5:f6:0b:21:f4:dd:2d:44:c6:cb:d7:52:0d:26:
81:0d:ab:ec:2d:a8:3b:54:e0:95:cc:59:91:2a:8e:88:61:5b:
bd:80:e1:7e:03:de:5a:bf:ba:88:0d:36:e0:2f:7a:7f:d9:6e:
ad:b0:70:60:48:f5:60:fc:ed:5e:9e:89:15:81:61:44:60:c5:
11:9e:fa:a2:c8:f8:1c:76:ba:2c:13:7f:55:58:73:44:8f:ea:
d3:8f:15:7d:c9:4b:02:03:8a:a2:60:50:27:16:cd:21:79:33:
7d:c8:24:f7:09:08:f9:25:9d:20:f0:a9:c1:9e:ae:b9:8b:35:
43:ba:b9:13:31:a3:8a:0a:88:00:4e:23:f8:67:e1:da:83:ce:
a6:96:df:27:ad:40:cc:46:50:8e:f5:7d:2c:5d:94:cf:1c:72:
4e:a9:3c:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040y+NdDsvmoB00ueahM9UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwOGFmOWU5YzU2NTJiMzU4NDRiMmU1ZDRiNTM3ZTlmY2Q0
NDUyZjMwHhcNMjYwMzI5MDkwMDU3WhcNMjYwMzMwMDkwMDU3WjAzMTEwLwYDVQQD
Eyg5MDRiMDc0Y2ZlMGE0MWJmYjU5YWMyNTk4NWYxMjA3ZjkwYWI0N2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWE9ut2IUigCFaqCiR6ezRocEkW/
nKRMfeYIfXJ+xKXQrvNutEBvMTMNV051qEh6YMrhueubEBnQNmN90C9uQcIMftzT
olZFPilDCemW8dDoXcNEzvlUj773BEQZKy0zv7224fL9oNd3/WDIxL67DAI7Nb4p
eA7PPTOZYa/fwFZI+6V7uZ00YjuhXW3RVPCowSDer2xOOAUzM3O/mhR9SyHUYllK
afHGhz7kMgfa7LQe9gsL6A/fMwPCJFd8DSklDwQakYPmhR7ilMdSCVuOnRAx+PWm
XMjytkhGgK2UnjZXeG2Vvt9ApNoRgZmLHtbswOMYzG56yxsUKoOAcQoojwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBLB0z+CkG/tZrCWYXxIH+Qq0fHMB8GA1UdIwQY
MBaAFBCK+enFZSs1hEsuXUtTfp/NRFLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUlyNTZjVmxLeldFU3k1ZFMxTi1uODFFVXZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lMDJhNmMtYWMyZS00N2M3LThiODIt
ZGUyZjZlYTAyMGJhLzEvRUlyNTZjVmxLeldFU3k1ZFMxTi1uODFFVXZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lMDJhNmMtYWMyZS00N2M3LThiODItZGUyZjZlYTAyMGJh
LzEvRUlyNTZjVmxLeldFU3k1ZFMxTi1uODFFVXZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlOcqpI5
zeA34HXseG7Dgp+yVHVsMhaDUo/59B0VDmNNT29cjDC9bISX0TCOM/SeCneqv4HT
1GizxVquzz3E1cPc7pQ8obripe/VbNDXX0SmRcwymCCAXt6ptzL/G6X2CyH03S1E
xsvXUg0mgQ2r7C2oO1TglcxZkSqOiGFbvYDhfgPeWr+6iA024C96f9lurbBwYEj1
YPztXp6JFYFhRGDFEZ76osj4HHa6LBN/VVhzRI/q048VfclLAgOKomBQJxbNIXkz
fcgk9wkI+SWdIPCpwZ6uuYs1Q7q5EzGjigqIAE4j+Gfh2oPOppbfJ61AzEZQjvV9
LF2UzxxyTqk8Nw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:41:04 2026 by rpki-client