Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
File: EA5EySrUkxGKStK6gRRfHTShi8o.mft (raw, json)
Hash identifier: ZsLWDmUZE05hYZ8MnQ46yRdbezupIi5cl3KmopoZnqY=
Subject key identifier: 95:C1:D2:C0:95:B8:23:A0:A2:E9:1A:64:70:32:B0:37:12:9A:ED:31
Authority key identifier: 10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
Certificate issuer: /CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Certificate serial: 019E314E4379FE5C17EAE8F83724A46274E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
Manifest number: 12D8
Signing time: Sat 16 May 2026 15:01:13 +0000
Manifest this update: Sat 16 May 2026 15:01:13 +0000
Manifest next update: Sun 17 May 2026 15:01:13 +0000
Files and hashes: 1: EA5EySrUkxGKStK6gRRfHTShi8o.crl (hash: 7VKXq8gY1gS3r6p2BnzxFJtJB44/NXDGtPD3ZQQhfHA=)
2: bttqOJvjdl84KdYPjPqF6BIYkr0.roa (hash: pBThqHeKOS0Gks/36PiEC85JnL2dOeWyKsS2nm104jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:43:79:fe:5c:17:ea:e8:f8:37:24:a4:62:74:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Validity
Not Before: May 16 15:01:13 2026 GMT
Not After : May 17 15:01:13 2026 GMT
Subject: CN=95c1d2c095b823a0a2e91a647032b037129aed31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6d:4e:ef:9e:25:88:ab:0e:63:a9:a7:32:0b:
75:40:d0:e7:40:81:82:ca:ed:f2:a8:41:56:85:aa:
96:b5:24:47:a3:16:48:da:5b:a3:d3:16:f6:a6:1b:
54:bd:23:5f:68:88:62:35:8e:9d:22:97:d4:85:cc:
47:1f:a4:d6:25:99:53:09:95:4d:1c:ad:1b:a6:ff:
dd:5a:f9:07:81:14:a1:9f:f0:b2:b4:9c:2d:cc:91:
36:8f:d0:12:2d:c1:aa:da:92:30:4e:99:b5:d4:cf:
5c:1e:70:fd:eb:7c:b2:0b:04:d6:bb:8b:67:f8:4d:
3d:09:8c:d1:30:21:04:e4:fc:ef:c0:09:a3:32:67:
62:93:93:48:a9:6c:a5:cd:68:b5:ad:65:e2:e9:64:
ad:1e:8f:ee:94:e4:ce:f2:8a:fa:a1:86:98:fb:8c:
5b:3c:b6:2d:2b:64:8d:86:df:a9:56:86:b9:c4:17:
b5:4e:14:1e:e2:62:ca:57:31:7f:4d:79:8d:cf:0f:
db:c6:90:35:8b:44:c9:6d:77:79:73:c0:bc:75:27:
3f:c3:b4:79:1d:80:0e:93:27:7b:13:ce:98:cb:15:
1f:04:df:7d:80:7f:d8:c6:00:20:5a:9a:d3:cf:31:
f3:5a:7f:c8:f1:66:c4:b7:a3:85:40:c8:e5:80:a0:
1f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C1:D2:C0:95:B8:23:A0:A2:E9:1A:64:70:32:B0:37:12:9A:ED:31
X509v3 Authority Key Identifier:
keyid:10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:32:36:52:a8:30:45:d8:0f:f4:f4:3c:ae:1c:5a:04:a1:df:
31:e6:82:4d:93:6b:81:10:0a:3d:d6:b2:b6:85:cd:b4:d9:7b:
f6:e3:58:07:67:d8:12:11:85:00:cf:ab:ad:25:5e:4c:43:fe:
41:57:f7:7a:e7:0a:f1:c4:de:d8:62:21:c7:c6:85:f5:e3:88:
6b:7c:84:a9:5d:f3:a3:97:eb:35:36:4d:0d:ea:2a:f5:64:2d:
57:2f:28:ca:86:fa:eb:1a:b8:17:cc:5a:a0:61:38:4d:64:98:
6e:7d:b1:be:c7:45:d7:ac:6a:d1:a9:b8:cd:ca:50:4f:1b:3c:
9d:9f:b1:d5:53:88:be:c4:7b:cd:19:55:d0:65:13:fc:6a:f8:
32:c6:ac:20:86:a2:02:70:0d:d4:ff:38:fe:7e:93:1f:fa:55:
4e:e6:19:39:a8:28:77:02:d9:e7:88:a3:99:84:44:66:2f:f8:
68:b6:99:ab:ac:f1:e4:42:5b:48:ed:c5:5b:21:86:2b:17:b8:
60:7d:a7:82:1a:5f:f7:fa:36:8d:38:2a:80:f1:3b:01:58:5b:
20:3d:4d:f8:84:1d:6d:1e:5f:1f:01:19:f6:3c:20:02:9e:cf:
27:83:a6:55:33:e3:72:1d:e8:ba:cb:3e:46:ab:ee:a0:2f:61:
71:f1:fc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:25 2026 by rpki-client