Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
File: EA5EySrUkxGKStK6gRRfHTShi8o.mft (raw, json)
Hash identifier: pvXPnYh54H+iIU8FTdkp+/tGrlSAxlTkBVLJ3vXQCrA=
Subject key identifier: 5D:68:AE:33:DE:92:47:90:BD:50:DA:C7:EB:6B:53:29:47:E5:3F:70
Authority key identifier: 10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
Certificate issuer: /CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Certificate serial: 019D382E875FE868AFE499C2F2991869D207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
Manifest number: 1257
Signing time: Sun 29 Mar 2026 06:01:06 +0000
Manifest this update: Sun 29 Mar 2026 06:01:06 +0000
Manifest next update: Mon 30 Mar 2026 06:01:06 +0000
Files and hashes: 1: EA5EySrUkxGKStK6gRRfHTShi8o.crl (hash: 0LJhzHlhS8GWCn2cIrq8PNVCz9CSb8m6+PZ30wBFE2I=)
2: bttqOJvjdl84KdYPjPqF6BIYkr0.roa (hash: pBThqHeKOS0Gks/36PiEC85JnL2dOeWyKsS2nm104jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:87:5f:e8:68:af:e4:99:c2:f2:99:18:69:d2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Validity
Not Before: Mar 29 06:01:06 2026 GMT
Not After : Mar 30 06:01:06 2026 GMT
Subject: CN=5d68ae33de924790bd50dac7eb6b532947e53f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:e3:12:8e:86:df:46:f8:18:10:ac:79:06:
9b:02:e9:61:f0:25:c9:80:06:2a:0d:16:1b:f7:60:
7b:74:c8:8e:0e:08:86:58:9a:fc:75:39:2f:9d:76:
a6:af:b1:6a:86:e5:1a:66:92:56:5d:07:a5:e8:e8:
ae:21:b0:51:bb:d0:fb:1e:be:2e:7e:67:b7:1f:03:
a4:15:63:f8:48:e5:98:02:86:79:b5:e5:1a:6f:ee:
3c:9c:96:49:59:15:d9:5b:e6:3d:1d:dc:fe:18:7b:
f3:77:2c:1d:8e:77:71:78:10:ca:f7:95:e2:3b:3a:
5c:9b:a6:ef:12:94:33:38:6a:26:c5:57:98:9a:12:
2d:18:63:47:71:36:5b:b5:16:a7:6d:26:82:35:65:
1c:75:ec:aa:15:e0:1b:cc:23:3d:29:a9:97:6a:c3:
d0:c3:b1:a0:81:2a:af:ea:48:8b:ae:e4:f1:f6:0e:
f6:c2:e5:9b:8c:15:ad:b0:04:f8:9a:0f:25:e8:01:
17:23:a1:1f:13:e8:53:8a:e8:5a:24:bb:88:8a:d3:
43:06:b0:d6:98:b7:7b:1d:a3:30:2a:21:bb:36:81:
b3:70:1f:49:81:6b:bb:58:01:01:a3:02:b9:42:a9:
f9:ea:98:1a:ed:30:99:99:6b:75:75:c3:37:9f:ee:
d7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:68:AE:33:DE:92:47:90:BD:50:DA:C7:EB:6B:53:29:47:E5:3F:70
X509v3 Authority Key Identifier:
keyid:10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7d:51:c0:59:9f:88:b7:e2:2b:d9:e8:68:d7:43:d8:15:81:
b2:fd:c1:a2:ea:2a:2f:29:d9:7f:9d:5c:8d:3b:4d:e6:07:af:
97:5d:75:23:af:ea:7e:08:19:e3:c4:19:6a:f1:a3:c7:a5:71:
b7:e0:7b:6a:93:86:65:7d:bc:8d:e9:02:4a:dc:ab:b6:57:d9:
2b:97:42:26:44:61:21:23:ff:9f:c1:55:08:99:6a:f8:ca:51:
a9:c6:99:57:d3:46:ce:e5:75:2d:a7:84:e9:e1:32:9f:7d:e1:
dd:92:26:37:b6:ca:70:4a:d6:95:9a:7a:c6:2a:48:1c:2c:3f:
1d:05:0b:bf:80:39:c9:5a:8b:62:c7:8e:04:20:18:23:f0:69:
a7:b4:ea:54:da:b9:ab:3d:fa:aa:a4:13:57:24:bd:95:98:3b:
d4:78:c8:86:94:80:30:5b:c0:fb:bd:23:94:1a:4e:64:7c:37:
df:c1:2c:0e:fc:f8:3b:ca:43:2b:49:33:fa:44:f2:7b:a9:64:
9d:1e:ac:ff:67:c6:93:04:76:c4:36:4e:2d:52:4b:0a:cb:33:
62:0a:d3:a8:a1:1f:9c:21:cb:44:16:f0:da:cc:5b:3a:ee:6e:
2a:6a:cd:97:f1:f4:54:16:30:f8:6d:60:07:48:1b:08:e9:d1:
9c:fe:03:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:03 2026 by rpki-client