Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
File: ep6pPHnsxdXKkDAazTqJLW4uHnM.mft (raw, json)
Hash identifier: YB0z8+bXeCfy+VdJP4RV/4NfghDJvkj3IHURYzRnFGk=
Subject key identifier: 67:0E:D4:53:71:F3:9A:22:E0:1B:8D:7A:FE:94:24:11:13:B8:4E:76
Authority key identifier: 7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73
Certificate issuer: /CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73
Certificate serial: 019D37C0B5AF4261C7DED619265ACC61B4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
Manifest number: 1364
Signing time: Sun 29 Mar 2026 04:01:09 +0000
Manifest this update: Sun 29 Mar 2026 04:01:09 +0000
Manifest next update: Mon 30 Mar 2026 04:01:09 +0000
Files and hashes: 1: ep6pPHnsxdXKkDAazTqJLW4uHnM.crl (hash: 3j7CUkO0txeQt0Bkt9LpcmTS5EAaBd2PGsFha8fanMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:b5:af:42:61:c7:de:d6:19:26:5a:cc:61:b4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73
Validity
Not Before: Mar 29 04:01:09 2026 GMT
Not After : Mar 30 04:01:09 2026 GMT
Subject: CN=670ed45371f39a22e01b8d7afe94241113b84e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9b:91:75:85:cc:43:db:da:28:f4:83:b9:8e:
2a:fe:b0:15:a1:91:76:29:59:af:8f:e8:08:90:1b:
54:13:cf:cd:7d:40:43:7d:38:34:04:fd:4b:b8:3c:
fe:a7:f9:0e:1c:a0:d2:d0:2b:a6:23:a1:12:4e:a2:
95:31:3b:c6:98:30:34:b2:3a:81:0b:0c:9e:9f:64:
a8:59:05:2d:07:0f:a1:c0:50:f7:cd:a6:29:68:34:
17:5a:98:24:44:da:bf:0d:5c:f1:9e:f2:3c:be:f0:
ae:b7:c5:01:94:2a:f4:0f:c5:57:9b:cc:b1:bc:fe:
c8:ae:6e:34:b5:82:df:a8:b3:d7:02:78:11:c7:26:
35:f8:af:de:71:05:38:42:e2:df:a7:ab:d5:8b:9b:
31:6c:b3:bb:36:cf:7b:03:a3:c4:1e:a9:d2:38:ae:
16:e3:c4:4a:35:96:b5:6a:9a:da:cb:ad:a9:70:e7:
0a:23:c6:a3:fc:d9:3c:68:49:12:24:79:12:86:5f:
2b:76:ef:bf:59:8a:a6:ec:1c:85:c1:a8:01:07:07:
4b:b5:60:34:3b:05:35:64:d3:d0:80:12:ac:71:b3:
ab:ea:3e:d2:d4:c4:e8:33:46:d0:cf:e2:c3:53:b6:
cb:aa:33:92:87:12:8b:78:b4:45:f1:e3:4c:e3:14:
81:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0E:D4:53:71:F3:9A:22:E0:1B:8D:7A:FE:94:24:11:13:B8:4E:76
X509v3 Authority Key Identifier:
keyid:7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:12:3f:37:3b:76:40:06:1b:0f:6e:71:7f:ef:85:12:1f:27:
c5:7f:6e:f0:96:45:f0:9d:99:99:02:33:27:59:97:61:bb:c1:
ad:cc:0b:f6:eb:02:67:37:1c:73:96:d3:37:50:51:a6:c0:5a:
f9:18:9e:71:b1:36:3c:b4:33:54:cc:5e:eb:80:6b:8c:f9:99:
10:c1:e9:e4:4b:5e:c7:dd:f9:71:dd:04:e4:49:50:34:59:06:
d3:14:6c:cb:0c:6f:94:24:68:16:e0:c7:58:69:85:7c:c0:2e:
02:ec:50:16:dd:6a:4c:11:86:4b:2e:3c:43:dd:20:91:7c:50:
14:03:cf:a8:83:20:a9:2e:bf:19:3c:81:f1:b4:29:aa:30:1f:
3e:84:a7:1b:b4:a3:e0:da:c9:11:e5:ea:9a:a9:16:04:58:d3:
1b:4b:ed:88:b5:0d:30:9b:f0:c7:60:26:c9:1d:76:eb:f8:d5:
61:52:ec:84:e0:bc:73:11:0e:2e:ce:09:1e:8b:d7:6b:8f:4f:
87:e2:31:cb:f1:38:d3:13:39:44:7e:cd:27:1c:38:52:da:c3:
8e:47:ba:75:72:0c:c5:74:e8:b3:42:78:32:c7:d5:ea:1b:da:
09:df:a8:8d:b0:fd:8a:a7:ca:b3:67:94:71:41:d1:0a:0b:71:
3e:3d:9f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:08 2026 by rpki-client