Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
File: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft (raw, json)
Hash identifier: wt52YCSICKkD5F7gwXAwn27uiMtl6iiHqUR0CM/lMdM=
Subject key identifier: 64:8C:F5:AF:4E:86:AA:21:17:62:5D:A0:EE:51:CD:AA:44:F0:F6:2A
Authority key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
Certificate issuer: /CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Certificate serial: 019D3A53BB6BF98FCFA34DBBABB7755DBDAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 16:00:59 +0000
Manifest this update: Sun 29 Mar 2026 16:00:59 +0000
Manifest next update: Mon 30 Mar 2026 16:00:59 +0000
Files and hashes: 1: 1-871CmDX8fagFE4cCLtEOvFlaJk.roa (hash: XbD+Hd0tYqjM6KWUuuQ0xXPJOZgVOM/iQcoQQ4UP8I0=)
2: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl (hash: 5sDqKz3OxDS34DQxtVTjNbixEEV5bXviLth1LJFPPIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:bb:6b:f9:8f:cf:a3:4d:bb:ab:b7:75:5d:bd:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Validity
Not Before: Mar 29 16:00:59 2026 GMT
Not After : Mar 30 16:00:59 2026 GMT
Subject: CN=648cf5af4e86aa2117625da0ee51cdaa44f0f62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:04:ea:6f:95:4e:35:09:04:ec:a2:ad:1a:64:
20:b4:bf:e8:85:30:f2:f6:de:93:db:16:28:ac:50:
c1:0e:eb:23:b4:55:a9:f7:68:b2:09:40:f0:f4:69:
5e:98:46:17:55:1b:84:d6:19:bf:23:58:7b:d9:c3:
39:6f:12:f8:4c:db:b8:6f:6c:1c:aa:7e:69:51:ec:
9d:b3:14:d7:3e:e3:1a:61:f0:13:bc:c7:89:51:fa:
1b:30:78:93:96:4b:a4:19:8e:f9:71:5f:0f:47:fa:
30:33:33:77:fd:95:11:cc:49:3f:5d:f3:a8:8e:72:
ee:58:5a:7e:3f:8d:e2:e9:75:e0:0d:42:a8:f0:b9:
4c:65:a2:6e:c9:4e:2f:92:e8:01:0e:35:83:50:43:
b9:a9:25:af:cf:1d:db:c3:aa:ad:9e:30:90:26:8c:
e3:39:fd:78:69:6b:b4:18:58:81:11:be:b2:ad:6f:
e2:f5:71:fd:56:db:d9:ff:e1:69:8b:bf:76:08:60:
c5:39:67:23:3c:27:2e:e1:67:68:4a:64:3e:1d:40:
6e:0d:42:e8:39:e9:3b:3c:3d:9a:c7:e3:89:c7:cc:
9c:b3:07:fc:3f:74:39:8e:03:ec:35:00:c1:60:cc:
0b:ef:b4:59:82:9a:87:44:2f:29:e0:18:db:dc:d5:
b4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8C:F5:AF:4E:86:AA:21:17:62:5D:A0:EE:51:CD:AA:44:F0:F6:2A
X509v3 Authority Key Identifier:
keyid:12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5a:a7:c8:51:8e:d5:38:db:83:06:c6:de:71:c1:d9:ea:63:
8f:85:3d:1c:72:80:2b:aa:0c:63:22:c5:a0:62:a0:46:f5:71:
9c:02:41:1a:c0:cf:d8:b1:1c:14:2f:00:d1:d4:be:36:9f:60:
d6:5d:83:24:b0:0f:9f:bc:83:62:cf:e7:26:82:ba:55:f6:91:
14:2a:04:c0:92:b9:f6:95:e3:35:48:d3:ba:56:8a:c5:9e:5f:
f0:4b:2b:f9:0f:b7:92:18:75:93:fa:80:a4:f8:cd:36:b4:61:
f3:65:47:bd:5e:7e:89:5c:e3:1d:c5:f2:69:d7:aa:9a:4a:ee:
e9:6d:7d:af:65:a2:70:e3:fa:a2:d4:7a:ca:d5:c1:4c:a3:f9:
07:0f:1f:78:9d:c1:ca:c7:6d:9d:94:ed:c1:fa:d5:f0:5c:86:
10:4a:70:0d:b0:e2:ef:73:02:0f:24:17:15:0f:5a:76:69:38:
e9:1e:24:ac:52:62:40:f7:93:28:83:69:01:ae:8e:86:f1:38:
0f:3e:84:bc:ed:02:52:eb:50:7d:5f:5a:6e:c2:73:c0:56:ec:
84:e4:ed:95:89:98:3f:e2:04:6a:65:14:bf:77:5d:b8:dc:61:
4a:71:a8:e6:8a:45:ce:8c:db:36:db:e3:de:be:3b:1e:d0:df:
7d:04:f8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:23:21 2026 by rpki-client