Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
File: _EeASzKQyJovwgWF9BpGgM3Y3zE.mft (raw, json)
Hash identifier: TsBY2yskcBAkMDHmiluZnl1yFYpIpoXq6H1Aqfa9OpQ=
Subject key identifier: 4A:B1:AD:D8:DE:C9:56:24:88:DA:84:02:4B:14:B6:54:89:EA:95:57
Authority key identifier: FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31
Certificate issuer: /CN=fc47804b3290c89a2fc20585f41a4680cdd8df31
Certificate serial: 019D37C0FBAA5275D20345D8E41E3E463B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
Manifest number: 15F4
Signing time: Sun 29 Mar 2026 04:01:27 +0000
Manifest this update: Sun 29 Mar 2026 04:01:27 +0000
Manifest next update: Mon 30 Mar 2026 04:01:27 +0000
Files and hashes: 1: _EeASzKQyJovwgWF9BpGgM3Y3zE.crl (hash: kmyAhYSLPVHp15+ww0RDWzcsLXVFbi1OTsdV9o7PeSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:fb:aa:52:75:d2:03:45:d8:e4:1e:3e:46:3b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc47804b3290c89a2fc20585f41a4680cdd8df31
Validity
Not Before: Mar 29 04:01:27 2026 GMT
Not After : Mar 30 04:01:27 2026 GMT
Subject: CN=4ab1add8dec9562488da84024b14b65489ea9557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8c:9d:b3:8b:5b:bb:cf:86:b9:f2:21:ad:fc:
53:00:54:2f:b2:62:21:aa:0d:dc:2f:d2:6a:d8:e3:
b9:f7:6a:c9:4c:97:db:e4:d6:3f:4a:dd:d2:cb:b2:
65:78:bd:a9:f0:f1:68:cc:7f:ac:84:cc:f4:21:27:
98:cb:26:db:50:20:35:1f:59:9f:77:75:7a:ef:a9:
96:6d:f5:86:fa:0b:14:be:b0:04:a4:c5:17:67:d2:
20:eb:06:4d:57:5c:9b:e0:b4:09:19:25:eb:df:96:
0e:7d:e4:3d:19:cf:db:17:ac:58:a2:4b:9b:7a:c9:
03:37:cf:2f:36:86:a3:69:ae:5d:df:9f:2b:da:c4:
4d:0f:91:e9:ea:f9:6e:e2:95:fc:cb:3b:1c:4d:34:
df:c3:c0:06:79:a1:7c:69:73:2b:07:26:1f:42:7c:
4f:0e:03:3e:41:6a:3c:23:68:5d:2b:dc:1b:6a:2c:
a5:1a:d0:2c:c4:71:31:34:2c:06:2c:22:c8:02:ef:
e3:2d:ab:b1:b7:82:b6:54:b1:ee:15:c5:52:8b:c3:
70:86:35:03:0d:09:ba:b3:2e:4a:f0:b3:7e:1a:03:
25:2b:d9:61:8e:bb:c5:5f:69:57:96:b9:4d:81:d4:
92:f8:cf:f8:08:3f:83:62:98:ab:dc:28:67:2c:bc:
5e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B1:AD:D8:DE:C9:56:24:88:DA:84:02:4B:14:B6:54:89:EA:95:57
X509v3 Authority Key Identifier:
keyid:FC:47:80:4B:32:90:C8:9A:2F:C2:05:85:F4:1A:46:80:CD:D8:DF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EeASzKQyJovwgWF9BpGgM3Y3zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/027d3b-f368-4f54-845d-191948288330/1/_EeASzKQyJovwgWF9BpGgM3Y3zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:03:55:e6:e2:9f:a3:3b:2b:51:e5:2c:ca:87:4f:63:1f:3f:
0b:9f:83:cb:95:bc:88:a6:34:bf:ae:f5:b3:70:5e:7b:b6:b2:
2d:1b:03:35:3f:20:9b:0a:75:cf:53:ee:01:cc:87:d6:01:3b:
6e:37:a5:ae:19:18:e8:1d:4b:ec:ba:72:53:88:8e:75:a7:50:
58:5f:6a:04:d6:f7:b9:c8:04:74:53:13:b9:e8:38:1e:be:0e:
1b:b4:c0:94:ca:0f:0f:d1:ce:96:b0:43:6b:bb:68:41:e0:ee:
6b:94:87:12:1e:1b:8e:b1:b0:ac:62:f9:35:00:27:b6:a7:1e:
34:18:03:cc:55:aa:49:0a:48:21:41:87:14:6d:2f:fd:32:f1:
93:3a:74:9f:48:95:35:9b:02:68:a7:c0:d2:e9:16:36:85:57:
ad:26:5c:2c:6c:c6:4e:f0:dc:43:01:9e:8d:77:56:5b:a8:f8:
77:aa:ee:1c:34:dd:0a:51:a4:cb:ea:d2:a6:5e:ed:58:7a:b7:
bc:1f:22:dd:64:e8:a8:6a:57:ae:f6:6b:80:ec:f4:59:8f:aa:
66:cf:6a:0f:4f:cb:da:36:7d:8e:24:2e:a3:75:ea:83:e5:08:
75:1b:0e:df:e3:8f:ea:5b:24:dd:41:2a:41:cf:42:f9:83:84:
4f:8f:e7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:58 2026 by rpki-client