Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
File: EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft (raw, json)
Hash identifier: 1KTV58ABVpPUxzSF849+NRZ6hqYqMJa4wXRs2Ib3o/E=
Subject key identifier: FF:7C:4A:C9:F9:31:97:E4:E2:5A:E4:1B:36:A6:E4:36:16:8A:A0:E6
Authority key identifier: 11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3
Certificate issuer: /CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
Certificate serial: 019F190CC08130ACBF19D4FAD0C6EC44A68B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 15:01:33 +0000
Manifest this update: Tue 30 Jun 2026 15:01:33 +0000
Manifest next update: Wed 01 Jul 2026 15:01:33 +0000
Files and hashes: 1: EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl (hash: x2b9bfW2cWNrxwzoE36LO2X7nYeZtmOCnu7MUUMxrr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:c0:81:30:ac:bf:19:d4:fa:d0:c6:ec:44:a6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
Validity
Not Before: Jun 30 15:01:33 2026 GMT
Not After : Jul 1 15:01:33 2026 GMT
Subject: CN=ff7c4ac9f93197e4e25ae41b36a6e436168aa0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:01:5b:b0:fa:5d:9b:b6:c3:15:71:99:ea:
da:6b:07:1b:23:51:13:ea:a8:91:d4:37:f0:0a:51:
73:96:12:ec:48:2f:4a:a0:ad:e7:d0:2d:c4:69:2e:
b3:dd:a6:81:06:a5:f1:3f:1d:4c:68:49:7c:98:19:
a7:71:10:ee:69:d0:54:37:f9:6c:50:3b:f1:77:d9:
98:4f:4b:a8:8e:14:6e:8d:8a:c6:8e:f0:bb:75:3d:
00:a8:b8:d7:f8:d2:45:4d:86:ae:ce:6e:c7:a5:ab:
da:10:3e:5a:1c:65:0d:4f:c5:f2:67:84:cb:ae:67:
41:ec:6c:f7:cd:4b:d7:6a:bb:84:4d:2f:9b:74:a8:
d3:11:dc:ea:e7:de:15:0c:fc:16:17:24:9b:ab:fe:
88:7d:31:d5:7b:24:07:11:4c:d2:8a:e6:6a:c8:47:
76:35:f3:12:3e:03:cb:a9:c8:1f:ab:35:6a:27:49:
42:ad:16:99:52:fd:00:dc:c2:97:33:96:cc:5c:97:
97:ca:bc:17:7b:9a:80:1e:41:0f:d6:4b:43:2c:69:
23:32:3c:8e:3f:90:b1:d8:dc:a7:4c:e4:cc:94:5b:
96:f5:4b:82:b9:62:be:69:63:b8:56:05:1a:8b:72:
65:f5:0a:86:54:b9:86:65:ba:bd:f4:24:89:65:30:
f6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7C:4A:C9:F9:31:97:E4:E2:5A:E4:1B:36:A6:E4:36:16:8A:A0:E6
X509v3 Authority Key Identifier:
keyid:11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:24:ea:c0:04:9c:77:98:fa:d6:a4:78:a5:df:b0:ef:29:7f:
01:76:d9:68:63:99:a0:c4:17:cc:d3:14:04:50:a7:07:5a:cf:
7a:f2:b5:7a:54:89:a2:39:ee:13:78:36:a5:5a:71:40:39:87:
9d:75:a1:ed:9f:92:86:68:4c:8d:4c:3e:70:c4:93:6c:ec:00:
63:dc:48:47:41:c3:c7:4f:1f:9e:88:68:3c:ca:d2:2c:6c:48:
f7:eb:08:de:38:7e:8a:6f:3c:d9:2d:ed:9d:b9:41:0c:65:e0:
aa:48:e2:65:2b:03:b3:fa:60:85:6c:bf:6c:41:29:54:1f:7e:
14:b5:79:6f:9e:75:23:fd:e5:de:30:5d:67:62:aa:72:62:3f:
b7:1d:66:b5:65:e3:7b:66:89:f4:fb:a3:8a:e0:b7:22:22:b8:
b3:37:90:7e:af:83:66:8f:63:c5:c6:c8:2c:26:33:ac:90:ee:
be:3a:41:6f:6a:63:47:ac:cd:ab:b2:9a:6d:6b:35:72:17:be:
ad:b1:32:8c:16:70:33:ef:ca:ba:90:d0:2e:f5:bc:cd:18:24:
57:94:c0:19:b3:18:6a:3d:37:4e:c2:52:08:bf:ab:9f:40:92:
45:c2:28:c0:71:9f:67:6e:34:83:b8:4b:b2:ea:83:bf:4a:52:
a2:56:16:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:27 2026 by rpki-client