Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
File: Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft (raw, json)
Hash identifier: S7RLodIemNRhgig5l0g5YOxXTYiatL3qjgFae7xFpZk=
Subject key identifier: 6A:E2:05:56:6C:A8:2D:D6:9C:87:C8:BE:FC:50:4B:32:3B:A3:34:11
Authority key identifier: 12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2
Certificate issuer: /CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
Certificate serial: 019D38D3B5056C706153141070375882999F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:01:31 +0000
Manifest this update: Sun 29 Mar 2026 09:01:31 +0000
Manifest next update: Mon 30 Mar 2026 09:01:31 +0000
Files and hashes: 1: Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl (hash: 3FfWCAebiPGWinvBopyZ3rXrqEBgLg5gmGW8h05ftJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b5:05:6c:70:61:53:14:10:70:37:58:82:99:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
Validity
Not Before: Mar 29 09:01:31 2026 GMT
Not After : Mar 30 09:01:31 2026 GMT
Subject: CN=6ae205566ca82dd69c87c8befc504b323ba33411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:b2:e2:e1:05:a9:62:c4:60:15:0b:67:88:
9a:7f:80:12:4b:84:2b:b9:1f:e7:0b:59:81:d9:e2:
30:bd:12:13:b6:df:0a:5b:79:64:5c:11:cc:aa:dd:
a9:c7:80:9d:20:50:91:e5:c8:31:bb:45:4c:f2:e8:
04:31:d1:60:8a:d2:1b:12:d6:78:f2:b3:93:54:a0:
16:32:4a:65:50:a3:fd:4d:7e:1f:c7:31:71:51:fe:
96:f2:ac:2f:59:3c:45:3f:54:81:13:35:64:a8:d9:
d0:36:c1:9c:1a:6e:7a:19:f2:b2:a9:f1:94:7e:4c:
83:71:b5:6d:18:32:f4:d3:7c:69:34:d5:c4:62:91:
a7:f2:72:e2:11:41:b2:b8:1c:63:16:5c:a0:e9:84:
b3:06:0a:a7:d0:2d:34:12:b8:68:92:9a:af:a3:cd:
77:5e:50:a7:57:59:5d:4d:5c:82:79:a9:ab:a2:6b:
c6:32:30:81:ac:ec:db:d6:66:8f:16:9f:22:46:c0:
9e:21:4d:4f:aa:9d:19:8b:c2:55:57:44:ce:a0:43:
9b:6c:f1:b6:71:88:0e:3d:c7:1a:82:18:87:54:d2:
94:d0:f5:bb:7b:1a:85:d5:f1:cb:b1:72:5e:bd:8b:
3c:79:b4:6e:70:44:49:83:99:aa:83:40:0e:5f:50:
6e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E2:05:56:6C:A8:2D:D6:9C:87:C8:BE:FC:50:4B:32:3B:A3:34:11
X509v3 Authority Key Identifier:
keyid:12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:52:64:ad:13:bc:73:81:e1:46:8b:de:eb:8a:c0:5b:f4:24:
c3:92:cb:42:83:cf:45:89:5b:45:62:ae:0f:0d:ba:69:37:c9:
c5:08:ca:0d:50:3d:f3:21:fe:d6:a7:55:f1:72:b9:e6:fc:13:
2d:be:23:69:1b:6b:3a:7b:a8:2c:04:9e:04:15:bd:c8:9a:b3:
ff:b5:a7:a4:da:8c:1c:b9:ac:d6:17:da:2b:25:fc:dd:13:5a:
f5:76:57:01:6d:7a:76:fc:2d:e9:2f:d3:12:f7:e7:49:9f:71:
c1:ad:df:d1:eb:ae:ee:70:36:c9:fa:65:81:02:f2:e2:cb:62:
04:6d:c8:88:e9:fd:ad:23:02:c7:d5:df:eb:cc:84:47:b5:83:
bf:10:3b:e8:fc:7c:da:74:88:ff:dd:8e:61:1e:71:b9:b1:80:
87:0c:d5:a9:18:c9:61:a3:49:89:9b:44:9a:54:20:0d:38:7b:
37:35:ab:ac:e3:f0:68:c3:7d:7d:1d:ed:7a:3c:4e:ad:4e:28:
36:74:d6:e7:77:8c:11:b6:5d:56:45:81:19:c1:fd:69:77:f5:
a1:de:1b:63:60:11:11:f9:1c:95:f8:e3:8a:2e:1a:f9:f1:08:
7f:2c:7f:3a:74:49:db:78:52:20:98:60:88:3e:d1:3a:fa:2b:
35:84:c7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:35 2026 by rpki-client