Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
File: ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json)
Hash identifier: ESz2McNzAcwrc36iWPC+2vILEFloYJz0j3l2wfvaXbM=
Subject key identifier: 14:01:9D:A0:65:8A:11:DF:1D:99:72:98:6A:48:DF:20:AF:B4:73:81
Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
Certificate issuer: /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Certificate serial: 019CE5C94C4497870E10EA52E6CE284FDF73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
Manifest number: 1726
Signing time: Fri 13 Mar 2026 06:01:40 +0000
Manifest this update: Fri 13 Mar 2026 06:01:40 +0000
Manifest next update: Sat 14 Mar 2026 06:01:40 +0000
Files and hashes: 1: Ala0VEiwCJ-XgbkKMuOQm4WQGUM.roa (hash: kHPaxmGFnvypL4VtsE3od5qxMzTcY3hqjMVSes+1x+o=)
2: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: aXAu2QqBrim4AsPHt556eQkC8i6VZa23cB4GDYTrKMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:4c:44:97:87:0e:10:ea:52:e6:ce:28:4f:df:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Validity
Not Before: Mar 13 06:01:40 2026 GMT
Not After : Mar 14 06:01:40 2026 GMT
Subject: CN=14019da0658a11df1d9972986a48df20afb47381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d3:00:9f:c2:40:d5:1e:46:e8:d0:45:3d:bb:
49:27:ca:b4:e2:58:1b:90:eb:0b:61:c3:30:60:fe:
70:16:4d:3d:ce:8e:b6:fc:01:b7:f7:37:db:41:95:
ee:9d:46:29:a1:3b:9f:9f:4d:a3:2f:9a:e2:c0:07:
00:e6:0a:50:ef:c6:89:fe:06:70:f6:3f:5c:ff:a5:
72:7e:dd:e2:f7:b0:c6:57:01:04:36:7e:77:4d:18:
e6:d4:9f:86:96:af:26:9c:83:47:1b:98:33:93:c8:
e5:34:69:29:4c:c1:09:c2:ac:38:fc:dd:50:cf:41:
e1:cf:56:27:b4:90:66:20:12:03:16:92:03:f1:b0:
80:65:be:b9:98:e3:d4:95:01:2b:f8:a8:05:7d:e7:
40:65:9c:81:ac:9b:b4:5e:4a:7a:7e:c7:aa:59:ca:
9c:e6:cf:bc:3f:a6:60:40:49:57:f0:b6:45:b8:5c:
83:a9:fe:54:18:16:a3:8d:df:5d:f7:c3:0c:e8:ab:
9e:19:75:3d:4b:8f:f2:72:40:e2:c3:2b:42:91:c7:
ce:4f:54:58:8d:8c:69:b4:dc:ad:95:43:6f:61:b0:
91:5e:39:f6:b6:a2:cb:4e:15:59:ab:e9:53:a2:17:
85:c7:5e:28:62:28:aa:85:68:fc:a5:8f:c6:ea:4d:
df:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:01:9D:A0:65:8A:11:DF:1D:99:72:98:6A:48:DF:20:AF:B4:73:81
X509v3 Authority Key Identifier:
keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c1:21:90:70:42:f0:03:56:68:95:2f:3d:64:6f:91:d4:28:
f3:30:ac:43:e7:ff:72:1b:02:7b:74:92:06:01:5f:f6:ae:f2:
43:fc:e0:62:d2:93:e2:1c:1c:fa:c1:9f:ff:04:25:4b:62:3f:
5e:02:30:4b:cd:89:59:58:67:ee:bf:e2:74:ea:b3:ec:ac:f6:
08:e9:52:33:bf:6e:ca:63:57:74:26:53:d6:26:8e:41:37:49:
73:67:5b:00:53:81:cb:95:a5:61:2d:59:27:e6:34:55:71:f1:
ed:0a:93:df:2d:5d:81:b0:b6:b3:f2:c9:97:b4:d7:65:3c:68:
e7:88:fe:3a:92:8e:a0:0c:d3:ed:5f:71:5c:89:39:e0:89:a5:
62:73:06:41:68:8d:9b:38:7a:b3:63:9b:48:85:d2:c3:73:ad:
a7:93:63:a2:9c:60:27:d2:62:d9:22:0f:f4:7f:f1:84:4f:71:
01:e4:13:b2:fe:f5:01:c9:27:4d:50:8c:8d:ac:64:cb:4b:65:
80:fd:f7:19:71:78:44:27:c6:6e:07:56:8e:ae:c8:d2:d3:1f:
82:a7:0f:e8:2b:95:40:01:e0:1d:ca:c6:67:5e:1f:a5:db:9d:
79:e3:57:44:f6:79:e0:fc:a5:dd:1d:b4:ca:fe:49:d9:a4:87:
4d:4f:49:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:39:59 2026 by rpki-client