Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft
File: EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft (raw, json)
Hash identifier: ujH08dxYGXeIM+xI/CtuP47hkXPKSzj/Oz3v6NNK3EA=
Subject key identifier: 8E:5A:F0:7F:C6:B2:42:DC:A4:52:9B:9D:A8:D8:3F:D5:BD:CB:B0:A9
Authority key identifier: 10:8E:CB:64:BA:29:98:B6:C4:15:01:42:72:38:51:89:22:D6:30:E4
Certificate issuer: /CN=108ecb64ba2998b6c41501427238518922d630e4
Certificate serial: 019D389BBF47AB65BC5544152608C8E72465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EI7LZLopmLbEFQFCcjhRiSLWMOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft
Manifest number: 01C4
Signing time: Sun 29 Mar 2026 08:00:24 +0000
Manifest this update: Sun 29 Mar 2026 08:00:24 +0000
Manifest next update: Mon 30 Mar 2026 08:00:24 +0000
Files and hashes: 1: EI7LZLopmLbEFQFCcjhRiSLWMOQ.crl (hash: UEV07b6ki6g7RqlOphRYtArBLQ9A33SQCI/T/aq/hc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EI7LZLopmLbEFQFCcjhRiSLWMOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:bf:47:ab:65:bc:55:44:15:26:08:c8:e7:24:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108ecb64ba2998b6c41501427238518922d630e4
Validity
Not Before: Mar 29 08:00:24 2026 GMT
Not After : Mar 30 08:00:24 2026 GMT
Subject: CN=8e5af07fc6b242dca4529b9da8d83fd5bdcbb0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e4:3e:8d:20:2a:f9:aa:08:40:21:36:85:47:
75:43:2d:0f:07:21:82:45:ef:4d:32:6c:fb:e0:2a:
85:bc:b5:bb:62:e5:a6:72:19:69:c7:c1:a3:03:8a:
e8:58:bc:dd:7d:ed:ed:24:4e:24:b1:db:81:ba:29:
7a:6f:11:dc:89:25:ba:c7:32:73:7f:9e:4e:1b:95:
a5:bb:53:de:46:ed:e2:06:79:d2:93:df:fb:f9:7d:
04:e2:d1:75:72:7e:d8:be:ba:3a:fe:49:04:b8:23:
39:84:bb:c2:72:48:ae:f2:3c:e9:09:96:3d:51:f2:
ce:97:82:b3:5c:36:b4:d4:86:92:d7:0e:bb:97:9e:
6d:c9:db:5b:aa:0f:98:58:db:e9:67:84:da:22:67:
cd:f8:3a:4e:db:6a:7f:32:f4:72:20:6f:64:35:ff:
d9:1a:f3:1d:ad:38:20:ad:49:65:41:12:66:1d:72:
d2:4d:28:a2:db:a3:24:dd:ec:a4:44:3b:95:68:26:
1e:9d:36:3b:6d:6c:b0:f9:27:46:1e:07:56:c9:9a:
e8:1c:64:70:c3:2a:fc:aa:da:31:31:12:0e:3b:21:
6d:50:c4:46:1c:ef:cb:e8:30:4c:6a:80:81:13:e4:
05:d2:39:46:ad:45:53:16:2b:8d:06:88:82:41:9b:
6c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5A:F0:7F:C6:B2:42:DC:A4:52:9B:9D:A8:D8:3F:D5:BD:CB:B0:A9
X509v3 Authority Key Identifier:
keyid:10:8E:CB:64:BA:29:98:B6:C4:15:01:42:72:38:51:89:22:D6:30:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EI7LZLopmLbEFQFCcjhRiSLWMOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:0e:d4:e6:93:10:af:b7:86:47:7c:b9:a0:b2:7d:cd:1a:e7:
be:6d:8f:b3:32:66:73:ba:40:cd:4c:b6:4d:0c:2b:0e:d2:d2:
31:8e:28:47:38:e1:9b:7f:65:f4:bc:ff:78:78:e8:a6:bc:31:
0d:1e:20:10:5c:c2:34:55:e3:75:d6:c2:f8:7c:57:b6:6d:53:
00:b5:8a:c0:2c:c0:03:1c:ff:13:44:75:ec:02:9e:7a:bb:72:
9e:75:2e:63:b2:55:07:f3:3b:1f:01:cd:26:cb:10:d5:a6:a2:
1d:b1:cf:b5:a3:6d:c3:38:09:9f:d0:bd:69:16:c0:e1:eb:a4:
87:06:a9:70:a0:35:1f:ff:67:6c:f3:30:b9:2b:19:22:aa:80:
8e:b4:26:dc:db:32:36:10:9f:b5:42:7c:bc:43:18:ad:49:37:
19:1c:c6:2b:e1:b1:23:f5:25:55:62:e1:02:21:b7:9d:33:bc:
fe:aa:71:c1:ac:33:f4:a0:6d:db:8c:18:c4:a5:be:bb:15:91:
76:85:18:ec:5c:b7:4d:e5:39:24:8c:f6:4f:c9:4b:05:57:4c:
52:e4:d3:1e:dc:f6:0f:4a:f2:b5:58:19:63:f7:c1:c1:e4:17:
6e:9c:a5:ee:cd:0f:b7:a5:37:b1:9f:0f:d6:c2:94:00:16:bc:
02:55:0a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:54 2026 by rpki-client