
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
File: 1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft (raw, json)
Hash identifier: oij9ScWLzeXNkEoFvG4e2wrWLMVBVeKP+d3gi44SBkM=
Subject key identifier: 3B:D3:07:0F:FF:0B:B9:49:D3:4C:41:CF:64:5E:FF:AB:01:0B:3A:82
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 019D37C0A4E628C9740CE7E48E6B3A001EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
Manifest number: 15DA
Signing time: Sun 29 Mar 2026 04:01:04 +0000
Manifest this update: Sun 29 Mar 2026 04:01:04 +0000
Manifest next update: Mon 30 Mar 2026 04:01:04 +0000
Files and hashes: 1: 1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl (hash: moeTEQTFGwXnGil0BbaW1F5XT8XFlNylgLkGjn+DAmE=)
2: FUSrBx5nHnlTGB6ewg5v8yqgXPU.roa (hash: 2MUjqPWuE0Az4HiuRSuLiJ3ZQ8HNjqYEJSlT6u/vtLo=)
3: GwCzD9FFv6UW4pNA3eaQKR9j9mI.roa (hash: TA9caw06vX3cAwsvnlfzFIGIz9Jk4HhI13HJqaNn7p8=)
4: J_ldszbL0k3PQMB-yvrWgDzEcus.roa (hash: Tgjn0inAyBtfHKiRwOLkG5q/UL6Pd6XY6ZxkS49r860=)
5: M1haVXqPOvnr0M8YD8F0YeZUvPQ.roa (hash: 1273tbmqWVfCsPa/v1kUBewWpBdKXZmtQ2j4FIBXvLk=)
6: eWL-hoY76ZRPfE40cOtpRD4XwKU.roa (hash: wkjPzGEG1n2W1H1lfwAtrZx9Xym+OoD613ECLeHzV5I=)
7: qTpf6S-Df4WnD3GxtEZFBJ7i82c.roa (hash: OuzXwAbmKAynIDu/QFRmd7J+ekh/mEkHcmMZ5BTrW/E=)
8: s5Aba34aWqyN0NdTLOhM3Uae9Ks.roa (hash: 9SQoDZzqv1EeYPtHTjtGPqXq8iWnUavkQUs9luuG8XE=)
9: u_51fQD42al7LsisB7PSRjRKNWI.roa (hash: ZKYYBG5jADPnWWb+8Mf3B2+le8UTdbTbVrJsQVvAL6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:a4:e6:28:c9:74:0c:e7:e4:8e:6b:3a:00:1e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Mar 29 04:01:04 2026 GMT
Not After : Mar 30 04:01:04 2026 GMT
Subject: CN=3bd3070fff0bb949d34c41cf645effab010b3a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:07:6e:92:02:a8:41:25:ac:7f:7a:12:0d:16:
02:78:aa:c1:be:41:3f:09:14:a4:a3:b9:ea:a8:46:
77:55:0b:57:bd:da:06:07:ae:e1:11:ad:54:1e:60:
12:1f:cd:42:5f:68:1a:70:41:c9:84:d2:0d:6c:59:
56:f9:09:0b:9b:d1:5c:b0:3b:a7:e5:98:1d:1c:eb:
78:a7:e9:60:ad:94:6c:d8:e1:02:a7:cc:e0:d6:cf:
a4:e5:48:13:24:55:9d:ec:f6:09:42:89:f6:3f:6f:
e7:e0:09:e5:c3:60:a3:91:06:86:ad:cf:62:a2:a1:
e5:35:97:4c:84:f1:b9:c0:27:b2:38:63:80:59:b8:
94:ce:c8:d9:cd:dc:a2:61:b1:08:7a:91:66:8e:32:
6d:69:af:e6:78:01:2d:dc:1c:99:46:3c:0e:6e:93:
0f:d4:f1:f8:9a:d3:8b:ec:27:e1:f9:65:c1:9b:0f:
71:e8:c8:5a:05:93:d5:b7:f6:9c:6b:31:99:9a:59:
c9:f6:8b:ef:13:12:4f:f4:9d:ad:61:74:d9:28:78:
b3:4c:19:d8:0a:2a:c4:16:e7:bd:1f:c1:46:e0:99:
2b:46:62:0b:0d:50:79:26:4b:1c:8d:d9:68:2c:e8:
01:2a:08:37:eb:e0:90:c6:ae:ce:d7:87:51:05:93:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D3:07:0F:FF:0B:B9:49:D3:4C:41:CF:64:5E:FF:AB:01:0B:3A:82
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e6:c0:75:1f:84:17:da:2c:ed:00:94:4e:1d:8f:91:73:93:
21:0d:ed:c3:2f:66:17:0c:4f:c9:19:85:83:07:9e:6b:b2:07:
7b:fc:01:54:a6:3e:93:b7:7c:fb:61:8f:03:2b:1c:b2:b9:64:
fc:ee:a1:6e:da:d4:9c:33:54:f0:db:65:cf:d1:2b:45:33:56:
52:84:80:44:a9:e4:27:43:41:a2:fc:4b:f7:f0:76:2b:8c:ab:
a9:10:b0:7b:2d:b1:61:fe:22:2a:59:12:80:54:a5:f4:16:f4:
19:c2:2e:84:d9:45:4e:55:10:d9:3c:be:cd:2e:60:ef:59:03:
10:d3:b5:a2:8e:31:a5:93:a0:cc:4a:82:91:43:e3:40:0c:c2:
fc:27:ad:f9:e4:cf:49:4d:af:6a:4f:cc:90:81:69:2f:de:22:
1e:23:95:3b:80:61:4d:35:1d:2b:da:a9:6d:20:b8:29:21:d4:
47:7c:36:13:af:6c:80:6d:68:9c:42:4c:2c:9a:89:a0:6c:09:
c4:86:23:22:f3:28:aa:81:d5:03:50:e9:fa:65:de:3b:eb:f9:
d7:c5:86:3c:a9:fa:a5:36:e6:30:50:95:3e:79:78:17:bc:62:
d0:42:9d:19:35:43:0e:f3:2d:db:5d:ca:77:1e:e6:4e:0a:8e:
c2:1d:2d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:15 2026 by rpki-client