Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
File: EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft (raw, json)
Hash identifier: SxueTJyY/SNYdNfio9dSF9O6zM5sQdJ+BHd7mDNE7o4=
Subject key identifier: AF:9F:98:17:6E:1F:04:EB:DF:17:92:A9:0A:EC:08:33:3C:4E:5B:A3
Authority key identifier: 11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3
Certificate issuer: /CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
Certificate serial: 019D382DCCE96665C58EB8EF51ECCF194892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 06:00:18 +0000
Manifest this update: Sun 29 Mar 2026 06:00:18 +0000
Manifest next update: Mon 30 Mar 2026 06:00:18 +0000
Files and hashes: 1: EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl (hash: KnJQlwvpLPJkpRpeBzqhoTrvlbcGceC19dC4daq9nwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:cc:e9:66:65:c5:8e:b8:ef:51:ec:cf:19:48:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
Validity
Not Before: Mar 29 06:00:18 2026 GMT
Not After : Mar 30 06:00:18 2026 GMT
Subject: CN=af9f98176e1f04ebdf1792a90aec08333c4e5ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:51:fc:cb:e5:96:e9:fd:55:d0:6e:7e:63:43:
16:96:71:93:b9:69:81:91:ae:36:43:b3:01:3d:29:
fc:7b:86:58:a9:f3:a2:b2:a3:a2:51:79:b5:1c:ec:
ca:e4:77:6b:64:0c:e4:4f:55:07:86:b4:e8:74:c3:
33:6a:51:c8:8a:f7:67:6e:45:91:ad:37:2a:b9:a3:
23:aa:40:ba:85:fd:c8:cc:ad:ec:09:4a:52:4f:16:
8f:e0:8e:9e:de:94:a9:2a:af:9a:98:b8:0f:94:a6:
a8:fc:6c:98:4c:48:05:4a:89:59:f0:57:77:7e:a8:
66:13:00:11:f7:6d:f8:d2:34:0b:36:36:01:c8:66:
c5:c8:c1:28:a2:dd:3a:2d:96:ce:25:89:30:d6:67:
e5:98:a9:8f:8c:3c:2c:98:46:0e:04:35:f7:63:f4:
f3:7a:05:20:de:d4:64:88:32:f1:2a:cc:8a:f7:06:
df:29:87:3e:ae:77:4a:74:bb:95:88:89:2b:c0:f1:
bc:83:c0:e0:1c:67:ac:00:17:bf:b0:e1:da:89:71:
76:a9:ad:31:9a:34:3d:87:a3:7a:3a:2f:f3:ea:17:
df:2d:5a:ec:c5:21:fd:70:9d:5f:e8:3c:8e:f2:f4:
eb:5c:42:cb:12:5c:22:95:4e:c0:7a:64:bd:20:07:
cf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9F:98:17:6E:1F:04:EB:DF:17:92:A9:0A:EC:08:33:3C:4E:5B:A3
X509v3 Authority Key Identifier:
keyid:11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:dd:52:a4:2b:b1:19:05:44:9a:4e:f1:5c:32:1d:15:65:95:
81:7f:17:b8:2e:a2:c5:92:0e:ca:81:23:ad:5b:5b:38:fa:3f:
e1:8d:3a:6d:c1:dd:23:61:bf:fa:47:33:fb:7b:d3:2a:f7:f1:
9c:0c:b1:af:36:16:ce:b0:5a:5b:64:e5:92:14:b3:17:c2:21:
48:c8:ab:30:02:4c:fe:e2:8b:58:70:1d:70:3b:4e:a7:b4:4e:
28:08:7c:94:fd:11:54:0a:58:32:35:9d:26:2f:5a:9c:2a:59:
59:21:7c:3b:d5:b4:f7:a8:38:1a:79:38:53:a5:77:3c:e9:4b:
62:ae:e4:22:a8:70:83:b4:c9:10:9f:2f:84:1f:22:3d:57:ba:
e0:ef:4c:8b:31:50:6d:7a:22:c7:a1:18:19:f6:88:6b:87:c3:
18:fa:30:e6:e7:75:36:5c:56:94:ab:f3:af:53:f5:e1:98:84:
f9:60:da:ad:df:71:57:09:bc:8f:6f:aa:3d:c6:d8:37:27:c3:
3c:aa:68:14:d7:fa:5a:c4:20:89:a9:cd:15:5d:fe:bc:af:66:
24:a4:6f:a4:1e:3c:19:ca:0a:2e:96:fb:88:59:8e:f4:71:35:
e9:ff:a0:8f:e3:b1:60:53:ea:67:1e:65:e0:2d:1d:4d:a6:86:
19:71:99:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:57 2026 by rpki-client