Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
File: EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft (raw, json)
Hash identifier: OE99QxjfOfmWXKDG078/jrxfVxvSZBJ/OyoYEqjNcl4=
Subject key identifier: D0:4B:B5:82:55:03:B0:F5:E4:60:2B:35:50:BA:EE:76:01:45:CD:27
Authority key identifier: 11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3
Certificate issuer: /CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
Certificate serial: 019E2F5FAFA7282FC5F955DBB7D3F9B3B067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
Manifest number: 190E
Signing time: Sat 16 May 2026 06:01:00 +0000
Manifest this update: Sat 16 May 2026 06:01:00 +0000
Manifest next update: Sun 17 May 2026 06:01:00 +0000
Files and hashes: 1: EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl (hash: YGQ3BemjPqrz7J3CtwaKkk5XZxOZRegKnM2GEo8pSIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:af:a7:28:2f:c5:f9:55:db:b7:d3:f9:b3:b0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
Validity
Not Before: May 16 06:01:00 2026 GMT
Not After : May 17 06:01:00 2026 GMT
Subject: CN=d04bb5825503b0f5e4602b3550baee760145cd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:11:a4:ef:e0:25:df:2f:80:7e:24:67:7d:
f3:94:47:ad:2e:e2:b7:7b:4e:25:37:d2:06:72:69:
b4:cf:b4:13:04:73:21:59:ee:9a:66:ce:49:d8:5e:
b2:f7:16:55:0c:ab:51:92:62:68:bf:5e:38:ca:af:
69:73:d6:a0:54:5c:ca:74:9c:31:f5:dd:27:7c:b4:
80:f1:c3:ee:3c:8b:a5:52:af:46:9b:3e:6f:7b:df:
1d:3f:a2:2c:cf:5b:5f:15:89:7e:ef:be:3f:91:08:
c6:6f:2d:e4:14:5c:d4:91:12:9c:43:4a:0a:18:eb:
a0:e0:52:72:bf:35:cd:9a:18:b8:3e:29:69:be:0e:
c4:a1:5f:4d:1a:92:5b:9e:52:61:27:9c:ce:b5:85:
30:05:be:b5:bf:38:91:1e:c9:bf:f9:25:e6:d9:e8:
4f:84:e7:fe:a8:5b:ad:ec:03:9b:1e:68:40:40:be:
65:89:77:0d:47:8d:d6:78:1b:ec:14:61:9e:19:f0:
14:d1:6f:9c:bf:b2:4f:56:7c:1a:a4:ca:20:8f:ed:
45:aa:1f:d2:ac:66:bd:21:60:e6:68:14:bf:e3:3d:
cf:13:bc:48:a3:44:03:06:d0:d1:5a:36:75:bf:dc:
3c:92:c3:68:78:81:ec:98:9a:1d:4b:a6:58:ec:5f:
b5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4B:B5:82:55:03:B0:F5:E4:60:2B:35:50:BA:EE:76:01:45:CD:27
X509v3 Authority Key Identifier:
keyid:11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:64:ea:5f:72:23:57:03:1e:25:fd:ab:45:91:58:e7:d5:8b:
49:ad:1c:3d:5b:f4:05:00:ac:f1:fe:7c:78:96:42:aa:41:0a:
e9:b3:c7:33:27:0f:53:7a:08:f3:e3:97:c1:21:11:a7:04:19:
09:12:68:42:1c:15:32:af:6a:81:c9:7a:34:48:a1:ac:05:63:
e9:74:fe:2e:43:b6:b3:30:27:cf:00:c2:f1:a7:b9:52:ec:3c:
75:29:97:b5:83:2a:ce:cc:88:a9:ad:23:a2:8d:19:52:4e:f7:
00:70:da:1a:a2:64:56:13:af:13:fa:46:06:2e:5d:e7:7f:38:
ab:c6:b3:6f:53:68:2a:93:46:c0:78:b3:00:88:27:e8:5b:ac:
7c:a1:81:ba:04:5f:1f:43:15:c7:bc:4f:c5:dc:8d:c1:3e:96:
37:04:19:96:90:5f:aa:68:fa:66:e7:59:3c:40:fb:fe:37:98:
6a:55:c6:46:df:5c:02:b8:9c:3a:73:0d:a1:25:02:71:05:ea:
24:50:6a:e6:e9:c7:f6:f2:a3:fa:8d:7c:d9:ef:4b:c1:42:88:
a9:0e:fe:de:60:e2:c3:7c:b2:0c:c7:7d:ef:61:9a:79:ed:d0:
ac:ea:45:c9:87:80:48:ae:37:a4:91:29:37:3c:aa:2a:b2:bb:
ba:30:26:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:41 2026 by rpki-client