Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
File: sEAqOILi-MUlQrB73sCypQ1ZgNs.mft (raw, json)
Hash identifier: ovzMM+5foEq2tVwZauLTMAUH63zcIvS5+5yE1ExeJW0=
Subject key identifier: 74:F9:A9:55:DE:7D:D3:6D:44:FF:E9:53:17:93:71:99:B6:DF:64:43
Authority key identifier: B0:40:2A:38:82:E2:F8:C5:25:42:B0:7B:DE:C0:B2:A5:0D:59:80:DB
Certificate issuer: /CN=b0402a3882e2f8c52542b07bdec0b2a50d5980db
Certificate serial: 019D38D34FD70DE60548A589BEE515E5E234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
Manifest number: 1168
Signing time: Sun 29 Mar 2026 09:01:05 +0000
Manifest this update: Sun 29 Mar 2026 09:01:05 +0000
Manifest next update: Mon 30 Mar 2026 09:01:05 +0000
Files and hashes: 1: sEAqOILi-MUlQrB73sCypQ1ZgNs.crl (hash: RJD3hnmnTP4CAKC4B0wgxqiH41tNW01zmQLm4aDJXos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:4f:d7:0d:e6:05:48:a5:89:be:e5:15:e5:e2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0402a3882e2f8c52542b07bdec0b2a50d5980db
Validity
Not Before: Mar 29 09:01:05 2026 GMT
Not After : Mar 30 09:01:05 2026 GMT
Subject: CN=74f9a955de7dd36d44ffe95317937199b6df6443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ad:30:98:60:2c:83:2e:7f:94:dd:24:8c:78:
a5:6a:43:43:13:00:74:21:0e:af:f4:58:4d:8a:1b:
e4:6a:82:41:16:da:4d:27:f7:df:8a:46:f0:d9:b9:
7e:51:30:03:cc:69:00:c6:23:ce:f6:d8:34:24:fb:
4c:68:43:fa:84:6c:52:ef:b2:ff:ed:68:05:f3:72:
14:e8:2e:4e:74:e4:57:5e:1e:ef:ee:e4:70:3a:ff:
33:cb:2d:fc:5b:d9:bf:67:e3:44:f4:26:63:46:62:
46:f2:71:59:e3:5b:ab:93:e0:1c:58:6f:03:09:46:
06:fc:ae:05:85:5c:72:c1:54:88:a1:f8:fa:7d:40:
a3:40:60:f9:d0:0b:e0:6c:ed:31:63:75:d1:ef:2c:
7a:c1:11:b0:f3:b9:aa:65:ec:e7:0b:7d:0f:df:a6:
1a:01:56:37:cb:5a:9d:f6:fd:7b:19:07:8d:3a:61:
e1:01:86:2d:41:9b:2a:e1:9e:39:d3:73:23:51:a8:
1d:63:56:f9:b7:55:6a:6a:95:3b:5f:87:fe:25:34:
87:2c:92:84:0d:e3:65:1d:2e:bc:c5:ee:6e:26:ad:
de:c8:68:b7:a3:04:a0:3b:bc:72:6a:62:53:47:e1:
d0:6a:ae:91:eb:9a:79:7a:5d:82:ba:83:4f:b3:42:
7c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F9:A9:55:DE:7D:D3:6D:44:FF:E9:53:17:93:71:99:B6:DF:64:43
X509v3 Authority Key Identifier:
keyid:B0:40:2A:38:82:E2:F8:C5:25:42:B0:7B:DE:C0:B2:A5:0D:59:80:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:5c:27:8d:b0:a4:ed:1d:9c:f0:fa:e4:84:b5:ef:12:19:95:
bc:a5:23:4a:61:62:89:aa:12:ee:8d:c6:5d:e9:4a:57:5a:c9:
6d:71:d3:33:23:dd:0b:59:32:20:53:81:df:b9:48:94:5d:cf:
a3:01:91:78:1a:97:bb:da:13:ae:f5:f5:6e:c1:5e:f3:61:6e:
fa:d1:2c:76:e2:38:ea:84:d0:8a:3e:6a:96:5e:05:38:86:69:
74:dd:e5:82:95:b6:65:50:46:79:86:2c:ba:04:b6:f1:e3:90:
c4:63:3f:ea:b9:38:ce:6a:c4:3f:c4:70:3b:74:77:e6:8b:9a:
29:54:32:9c:14:b6:90:10:25:33:46:19:dd:ac:05:b2:c0:fb:
80:7b:f3:2c:62:b8:7d:60:9f:e8:98:54:4b:bd:6f:23:e4:93:
e7:7d:d5:13:e6:30:bc:24:ca:d7:ee:20:8b:91:01:b1:93:30:
c1:8a:3b:4a:26:aa:3e:a8:bd:a6:95:cd:af:21:cc:1c:55:bd:
dc:00:21:af:ce:95:c2:80:39:17:9d:49:c9:07:b6:a9:92:a3:
ab:19:b1:9b:fc:ed:8a:cb:a6:ed:03:29:bf:f6:c5:d6:a4:31:
6d:34:0a:4c:18:9a:1a:5e:7e:94:f7:4b:db:a6:60:5a:9b:d1:
5e:11:43:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:17 2026 by rpki-client