Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.mft
File: EkQqmE1AazYwQ34q7JxTDQ4blcg.mft (raw, json)
Hash identifier: qOG+tCtk7cxVGC+fKoPS5l9evN+wkWN5YNDzDehIfnA=
Subject key identifier: A2:FD:D0:70:50:8A:6A:7E:9D:8E:99:62:0F:87:B8:4A:34:9B:63:17
Authority key identifier: 12:44:2A:98:4D:40:6B:36:30:43:7E:2A:EC:9C:53:0D:0E:1B:95:C8
Certificate issuer: /CN=12442a984d406b3630437e2aec9c530d0e1b95c8
Certificate serial: 019D3909C91060351AB4B2C956FA75236F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkQqmE1AazYwQ34q7JxTDQ4blcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.mft
Manifest number: CD
Signing time: Sun 29 Mar 2026 10:00:35 +0000
Manifest this update: Sun 29 Mar 2026 10:00:35 +0000
Manifest next update: Mon 30 Mar 2026 10:00:35 +0000
Files and hashes: 1: EkQqmE1AazYwQ34q7JxTDQ4blcg.crl (hash: ffHm/8fRisMfCxX0tgjdT0pfL5duEQEENxq7+GLZoKM=)
2: sBKXIcug608LSZXfM5pwh9gFcaw.asa (hash: VeUI5iGSK0Bo8UBILEtAk5wSZzWuXJq+0/DHtWsVU6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkQqmE1AazYwQ34q7JxTDQ4blcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c9:10:60:35:1a:b4:b2:c9:56:fa:75:23:6f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12442a984d406b3630437e2aec9c530d0e1b95c8
Validity
Not Before: Mar 29 10:00:35 2026 GMT
Not After : Mar 30 10:00:35 2026 GMT
Subject: CN=a2fdd070508a6a7e9d8e99620f87b84a349b6317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:e2:aa:00:70:80:d2:e6:48:28:d1:e8:15:
a7:a3:68:4f:59:31:8d:ed:6d:66:92:55:e3:3e:97:
36:c0:7a:ea:fa:19:74:47:45:10:9f:f2:8b:f9:4a:
ec:e0:ad:38:ad:11:ee:9d:40:1a:96:8c:8f:4c:7e:
93:cd:4e:01:d3:37:26:c5:81:37:41:9c:5d:20:89:
37:d7:3d:19:09:b2:b1:4c:a8:fc:38:a9:98:4b:48:
41:1d:bd:21:ed:9c:63:3b:df:00:06:50:60:78:04:
53:32:7a:a2:45:9e:c8:a2:68:cf:c9:96:0f:7d:3c:
b9:bf:a6:cf:86:17:6a:60:51:e0:06:8a:86:1a:70:
dc:78:a7:fe:77:47:c9:22:c7:c9:63:a7:3b:27:83:
ac:cb:ba:6d:c2:5c:ae:72:f0:d8:4f:35:18:fe:2a:
f7:c4:6c:36:c4:bb:a0:94:47:ac:1c:02:ca:5e:a8:
06:62:83:86:05:c8:7c:d5:6b:59:ce:b1:6f:10:ae:
18:b9:92:ee:0c:35:73:21:bc:af:81:4a:76:bb:74:
6e:e3:99:df:14:05:8f:a0:22:09:51:de:bd:c1:40:
52:64:62:b4:63:15:77:a7:71:81:70:49:b3:5d:ca:
57:77:31:92:18:bc:01:2a:7c:b8:b0:2f:55:cb:80:
5b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FD:D0:70:50:8A:6A:7E:9D:8E:99:62:0F:87:B8:4A:34:9B:63:17
X509v3 Authority Key Identifier:
keyid:12:44:2A:98:4D:40:6B:36:30:43:7E:2A:EC:9C:53:0D:0E:1B:95:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkQqmE1AazYwQ34q7JxTDQ4blcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e22be2-3d59-48e1-a3a9-5055ef84a0de/1/EkQqmE1AazYwQ34q7JxTDQ4blcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:fc:97:c6:7b:99:bc:a6:75:0a:1b:57:ad:f2:c7:be:97:9b:
60:28:8d:9b:58:a1:b9:40:7a:27:74:93:ee:fc:16:4a:b6:6f:
76:4a:d9:39:e7:e9:60:03:f7:1c:6f:ea:5c:54:94:b1:9f:b9:
db:8e:c1:bd:50:df:96:6e:9c:84:05:e0:02:7f:87:65:e7:83:
dc:a7:1b:14:c5:f1:dc:71:85:32:94:b6:a0:db:97:ef:89:59:
76:4d:53:ac:ff:da:94:5e:7c:3d:78:09:5f:78:68:56:fc:80:
e8:aa:b1:3f:cd:98:87:0e:e6:d9:c3:33:74:b1:67:68:19:3c:
cc:c4:c7:62:44:2f:07:b9:c1:f3:1b:fa:e2:bc:7e:8a:e6:72:
e9:ec:4c:22:bf:70:2d:21:82:f4:af:2f:50:2a:78:42:e6:a3:
14:ce:ff:e0:4b:99:d0:a1:cb:4a:b4:c4:35:75:be:91:a1:a5:
18:f8:a1:ed:62:d4:bc:29:b0:84:e3:c3:20:c9:29:3a:74:93:
40:28:82:15:23:84:c0:81:6d:d1:ce:2f:6c:ee:0b:cb:b3:29:
76:a5:65:68:b4:ec:0a:e6:b6:3d:61:d6:da:44:ce:cb:90:72:
12:b0:ee:a9:7f:65:1e:e7:5d:6f:5e:17:ca:d0:b4:06:3d:73:
3b:a5:2d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:11:38 2026 by rpki-client