Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
File: EqZX80JMjdVSFa-FO5MwfDZsU4o.mft (raw, json)
Hash identifier: MyTTnfwYomDln7HApdj/g4sW5DLSXwffWEt9V8Zcib8=
Subject key identifier: A0:89:66:51:B2:58:29:11:E3:DF:14:5E:4F:23:A0:99:E5:98:A8:E3
Authority key identifier: 12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
Certificate issuer: /CN=12a657f3424c8dd55215af853b93307c366c538a
Certificate serial: 019D38D33090C0151815FF818FBC71D9468D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
Manifest number: 0B95
Signing time: Sun 29 Mar 2026 09:00:57 +0000
Manifest this update: Sun 29 Mar 2026 09:00:57 +0000
Manifest next update: Mon 30 Mar 2026 09:00:57 +0000
Files and hashes: 1: 1-UyB4g1-cmvqpCraiZLvR0iEtJ4.roa (hash: XMvfp6a9q4gSOZObHK0cOehlAVogxv8AYtQ776Cti90=)
2: EqZX80JMjdVSFa-FO5MwfDZsU4o.crl (hash: m2YUAevXxIFNKy4jJExmBntbgWu09NHQTnB2X7CQOzA=)
3: nnum7eYXax698Y9cnPBAhFzNiqg.roa (hash: EmYj5IWpVJ41RT8+2EZ/sS/gm4FE/uOxW4VF97fOsGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:30:90:c0:15:18:15:ff:81:8f:bc:71:d9:46:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12a657f3424c8dd55215af853b93307c366c538a
Validity
Not Before: Mar 29 09:00:57 2026 GMT
Not After : Mar 30 09:00:57 2026 GMT
Subject: CN=a0896651b2582911e3df145e4f23a099e598a8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7d:a0:99:27:ac:f7:08:78:42:85:01:dc:42:
b0:f9:13:b9:6d:b7:18:1c:26:d5:ba:2f:10:3a:35:
d0:ef:f6:49:fd:e1:36:e7:61:31:a2:47:03:4b:b8:
9e:ac:eb:65:e7:03:2e:db:f1:1c:b3:15:7a:b4:a1:
f4:37:6c:1d:7e:fb:96:7a:4b:bc:ad:04:61:00:9a:
e6:e0:b9:b2:91:7f:44:9e:15:4a:d0:db:d5:dd:47:
d9:8a:7c:b1:3f:45:df:82:d8:91:d3:fd:bc:ff:58:
56:0a:8e:79:11:1a:17:c1:da:01:5a:1e:a2:de:bb:
5b:48:c9:8f:09:e7:2d:00:93:9d:75:22:2a:33:5a:
50:69:69:b6:d6:c9:b1:d2:3e:79:b3:8d:ae:44:d3:
a6:cb:7d:c2:8e:db:8d:26:f9:7d:9b:17:e6:e2:44:
c0:44:f0:d0:f9:8a:d3:6e:a3:f7:95:b7:2d:47:35:
ae:43:66:ca:6c:a8:01:4f:f8:1c:3c:63:3e:44:8b:
3e:b8:77:83:19:db:7c:87:11:dc:e5:52:05:40:32:
44:55:07:60:5d:bc:81:f3:79:6c:20:cb:41:73:4e:
82:b9:d0:3c:32:79:3c:69:5c:7f:f1:55:71:b5:52:
77:31:73:ce:46:01:42:cb:55:11:44:6a:a5:ea:65:
18:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:89:66:51:B2:58:29:11:E3:DF:14:5E:4F:23:A0:99:E5:98:A8:E3
X509v3 Authority Key Identifier:
keyid:12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:be:66:51:4e:b9:f8:71:f6:21:ce:c8:fc:e7:b5:ca:dd:c2:
ac:68:f8:89:f0:24:49:26:95:66:ad:44:3b:3a:34:38:5f:4b:
74:64:00:bb:1a:6d:77:78:59:e0:6c:f8:73:55:d1:08:a4:80:
b6:55:df:7b:d6:ab:37:b8:b8:00:32:02:c2:00:5e:28:40:21:
ff:43:82:67:9d:d1:6a:a7:16:3f:eb:ab:be:1a:9b:de:59:9a:
36:39:3f:c2:e9:2a:48:f2:39:9f:42:1e:b8:ff:89:2c:d3:03:
81:b5:40:5a:69:21:29:ae:3e:f2:cd:d4:21:81:7e:c1:80:88:
64:06:11:f2:e7:22:c0:72:c8:a7:f3:03:3f:56:d1:06:8d:10:
2f:2d:6a:0f:9f:10:18:3e:9e:bd:1a:b1:52:83:37:ac:56:fc:
53:5e:ae:7a:fe:e3:f7:6e:08:a9:53:28:25:b7:ab:a3:3f:c8:
f6:78:6e:5e:7b:55:fe:cc:68:95:1f:50:f9:e7:82:c5:59:6a:
33:64:17:1e:b0:c9:3a:31:2c:2d:31:a6:5f:11:1e:8b:f1:a4:
d9:d9:48:71:c5:3b:b6:88:c2:2f:fc:d9:ae:82:be:2d:53:92:
6c:69:47:39:13:9e:84:72:82:76:00:2e:a5:c7:47:c4:04:70:
1e:34:3e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:42 2026 by rpki-client