Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ebfd68-425f-4396-afcb-2bbc8001b46c/1/eeG1ECkj_kWv5O5x2MfXIadLlXs.mft
File: eeG1ECkj_kWv5O5x2MfXIadLlXs.mft (raw, json)
Hash identifier: JOqSk2CDIroQI4xougH5l8NSC7sqtvACgdDeftqaBEw=
Subject key identifier: 16:A5:E2:B3:F9:FD:2F:2D:32:94:92:20:EE:00:56:FA:DD:EF:61:E8
Authority key identifier: 79:E1:B5:10:29:23:FE:45:AF:E4:EE:71:D8:C7:D7:21:A7:4B:95:7B
Certificate issuer: /CN=79e1b5102923fe45afe4ee71d8c7d721a74b957b
Certificate serial: 019D390A35653281260E564918659DA80A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eeG1ECkj_kWv5O5x2MfXIadLlXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ebfd68-425f-4396-afcb-2bbc8001b46c/1/eeG1ECkj_kWv5O5x2MfXIadLlXs.mft
Manifest number: CA
Signing time: Sun 29 Mar 2026 10:01:03 +0000
Manifest this update: Sun 29 Mar 2026 10:01:03 +0000
Manifest next update: Mon 30 Mar 2026 10:01:03 +0000
Files and hashes: 1: 0P2MOC-zABkj2wkrhKo3feyJgm4.roa (hash: ptWNlzPMq1Y8jEA8BdUmma2Y/J+PbhWlBppdHwqFP38=)
2: AHAqO1me7Q2s--h2lJgebqIw5iw.asa (hash: h2RJjsngCpCQ1Exj6koTNpi08FwNJUQcJduwFp94muM=)
3: eeG1ECkj_kWv5O5x2MfXIadLlXs.crl (hash: JOMjDPHZTz/pB049WdSPGYedCWfcNEPC777S4H4xBrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ebfd68-425f-4396-afcb-2bbc8001b46c/1/eeG1ECkj_kWv5O5x2MfXIadLlXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ebfd68-425f-4396-afcb-2bbc8001b46c/1/eeG1ECkj_kWv5O5x2MfXIadLlXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eeG1ECkj_kWv5O5x2MfXIadLlXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:35:65:32:81:26:0e:56:49:18:65:9d:a8:0a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79e1b5102923fe45afe4ee71d8c7d721a74b957b
Validity
Not Before: Mar 29 10:01:03 2026 GMT
Not After : Mar 30 10:01:03 2026 GMT
Subject: CN=16a5e2b3f9fd2f2d32949220ee0056faddef61e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6f:d4:af:de:f4:82:d3:31:ba:dd:6e:3e:aa:
d0:b1:d3:6f:1d:a1:d6:ef:4f:d8:49:8f:89:19:8b:
b1:78:36:a7:dd:94:97:9d:a7:82:b2:15:13:0d:4b:
6d:f7:b9:5b:d9:30:93:7f:d3:ea:69:11:89:e9:ec:
d1:6e:65:71:a5:e9:0c:fb:27:c2:b2:75:65:4f:a3:
67:fb:88:66:8a:ec:c0:61:d2:76:32:44:40:91:71:
d9:6e:14:01:cf:b5:35:94:ab:9c:16:c5:e4:53:08:
7b:8e:b1:59:e5:17:cc:c1:13:03:83:4c:7b:6a:10:
cb:27:9e:d8:3d:7a:7e:83:b0:a2:2a:fa:af:9a:9e:
8b:fe:21:01:d8:29:b1:c4:dd:c3:4a:2e:9d:18:20:
82:f4:f5:fd:eb:5e:dd:ea:df:a2:19:3f:94:4f:fa:
55:4c:48:3b:4d:97:48:c9:de:b0:ef:42:63:95:12:
5c:91:15:e5:e2:3a:36:c4:bf:90:b8:11:e0:4d:7a:
69:46:3c:49:9c:f4:31:13:30:26:26:62:fc:cf:7f:
16:77:98:2b:8a:60:9e:3c:d1:08:ed:42:12:62:aa:
ab:16:60:f5:4e:d8:71:f1:1d:6a:bb:ef:89:9c:48:
25:a8:f4:3e:40:19:d5:ee:10:29:cb:76:f0:80:e0:
f2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A5:E2:B3:F9:FD:2F:2D:32:94:92:20:EE:00:56:FA:DD:EF:61:E8
X509v3 Authority Key Identifier:
keyid:79:E1:B5:10:29:23:FE:45:AF:E4:EE:71:D8:C7:D7:21:A7:4B:95:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeG1ECkj_kWv5O5x2MfXIadLlXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ebfd68-425f-4396-afcb-2bbc8001b46c/1/eeG1ECkj_kWv5O5x2MfXIadLlXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ebfd68-425f-4396-afcb-2bbc8001b46c/1/eeG1ECkj_kWv5O5x2MfXIadLlXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:63:d3:14:90:f7:ef:cc:eb:fe:4d:1e:9b:23:df:58:7e:86:
4e:89:27:86:5d:f0:0e:03:9a:35:94:1f:db:77:bc:23:55:c5:
97:cd:fd:bf:79:93:09:cf:20:09:87:b4:7f:68:b8:4c:5b:6d:
0f:fd:c1:b4:05:99:d4:23:cc:fb:be:01:d1:d0:8d:91:a0:73:
7d:2a:54:07:48:51:57:69:9f:15:ec:8c:61:00:89:b5:ba:ac:
49:8e:90:94:d9:4f:1f:bd:66:d3:54:ff:62:8a:38:68:d9:83:
61:3e:fb:dd:6f:da:2c:c4:be:f3:9b:29:fd:c7:f6:14:59:3a:
c5:42:73:8e:0e:15:df:aa:dc:a0:56:1a:ad:43:fc:c8:37:29:
c5:ce:48:97:e6:a5:ae:85:2d:80:c7:f8:ce:44:61:c3:e7:c3:
6b:fa:c3:58:4e:8e:ff:0f:02:b5:6e:42:fc:12:4b:56:55:3b:
1a:34:20:33:70:2a:f2:98:a3:70:a6:00:66:cb:0f:33:ab:c3:
d6:67:21:bf:b1:16:56:47:49:d5:fb:88:c1:42:c6:b5:af:27:
1e:f9:77:41:11:21:61:c2:db:e9:65:44:ec:d4:60:d2:11:6d:
e9:18:1f:4e:f0:f2:d7:c3:3f:1c:4e:d5:57:fd:87:2c:60:78:
f7:30:9e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:56 2026 by rpki-client