Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.mft
File: EYKb9HZLMe40tE2AYpIJqMcGXq8.mft (raw, json)
Hash identifier: c2qzNTBQthuI11iV6Jnk6564S6GPPUd4djAiJuDsX8A=
Subject key identifier: 86:5A:8F:F3:A5:FD:E7:29:26:F7:02:AB:78:D8:9A:94:29:1B:0C:0F
Authority key identifier: 11:82:9B:F4:76:4B:31:EE:34:B4:4D:80:62:92:09:A8:C7:06:5E:AF
Certificate issuer: /CN=11829bf4764b31ee34b44d80629209a8c7065eaf
Certificate serial: 019D38D2D8E1919F4BF8BE08A0A2F3852535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYKb9HZLMe40tE2AYpIJqMcGXq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.mft
Manifest number: 0255
Signing time: Sun 29 Mar 2026 09:00:35 +0000
Manifest this update: Sun 29 Mar 2026 09:00:35 +0000
Manifest next update: Mon 30 Mar 2026 09:00:35 +0000
Files and hashes: 1: 1wdKkCW3FBRKaMmpzf4RRdUNO0Q.roa (hash: DRLbOTG9czrpsVPaMEJ38IoGY3J/JcSc/4PjmqzOW9s=)
2: EYKb9HZLMe40tE2AYpIJqMcGXq8.crl (hash: AcBeAQJ68so/Ud5mgKffHvLYgz/N2Hp1cNVoHgpHSdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EYKb9HZLMe40tE2AYpIJqMcGXq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d8:e1:91:9f:4b:f8:be:08:a0:a2:f3:85:25:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11829bf4764b31ee34b44d80629209a8c7065eaf
Validity
Not Before: Mar 29 09:00:35 2026 GMT
Not After : Mar 30 09:00:35 2026 GMT
Subject: CN=865a8ff3a5fde72926f702ab78d89a94291b0c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3c:a8:89:46:51:94:54:cd:14:ee:cd:f7:95:
f6:f5:eb:f8:6e:dc:dc:1f:3e:58:fb:93:e3:3c:85:
38:fa:c7:2e:cd:73:75:8c:79:74:0f:a7:48:78:8e:
12:58:dc:01:ac:37:70:2c:11:c9:ce:58:fc:4c:d4:
31:d3:48:20:50:10:45:03:85:97:01:7e:07:fd:b2:
c6:47:19:5d:79:26:09:94:8e:b5:53:81:bb:df:00:
5b:b9:c4:c8:65:47:cb:5b:29:4f:68:71:94:3b:05:
d7:24:be:96:87:0d:a3:14:42:11:fb:46:c4:d7:8a:
5f:37:e7:54:87:8d:b2:e7:4f:3f:9a:b3:ae:e7:c0:
97:16:2a:57:10:1e:6d:86:20:79:ff:3b:d8:32:16:
77:57:42:08:31:00:64:25:0b:9d:4d:2d:30:13:51:
25:ad:6b:8e:d4:d6:69:8b:2f:45:3e:3b:81:74:30:
18:f2:ec:3c:07:71:93:4e:ed:e3:a8:97:e8:4a:95:
ec:9a:28:61:bb:15:38:a7:86:4b:a6:73:f4:33:da:
ab:a8:92:f6:0a:ad:f3:86:a5:4d:37:a2:e8:bc:3e:
61:f7:fb:55:f1:98:e3:76:ad:3f:da:0e:2e:d4:b2:
67:b4:6b:61:49:ba:17:94:37:21:4b:27:28:7e:b2:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5A:8F:F3:A5:FD:E7:29:26:F7:02:AB:78:D8:9A:94:29:1B:0C:0F
X509v3 Authority Key Identifier:
keyid:11:82:9B:F4:76:4B:31:EE:34:B4:4D:80:62:92:09:A8:C7:06:5E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYKb9HZLMe40tE2AYpIJqMcGXq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:5f:03:64:4e:56:a0:ee:ce:22:00:ff:a4:93:3a:4c:fd:a8:
f3:e0:c2:54:06:1a:80:26:72:37:26:51:b9:27:72:19:98:eb:
e4:b8:39:85:55:d7:02:a0:78:48:fe:75:31:9d:7f:60:2c:61:
68:37:03:6b:d5:96:7e:f6:56:3a:43:59:86:2a:58:3a:0e:dd:
b7:29:89:7b:bf:c9:4a:94:c0:ed:30:bf:5e:cd:7f:da:0c:3f:
47:e3:e3:08:06:91:84:47:5a:12:75:cd:80:15:c5:77:88:8d:
a9:99:de:b1:ce:cd:81:fe:cd:cd:4a:15:d0:4c:32:b3:15:9c:
78:4e:3c:5a:e2:b2:8d:66:84:5d:72:2b:dc:86:fb:cf:d9:10:
65:8f:c7:b7:15:0d:d5:2c:9d:0c:ac:9d:d4:36:c3:c4:b4:cf:
4c:ba:43:8b:ad:1f:d8:9e:0f:52:29:d8:ed:2a:4c:04:51:40:
21:d2:28:40:c0:47:17:e0:f4:fa:aa:a5:7b:ee:67:9e:70:6b:
1d:d9:a2:c2:72:2a:5e:6a:be:8a:cb:b9:8a:6d:90:f3:dd:21:
d3:2b:7a:4b:0c:b2:7e:ae:2f:ff:63:e1:18:2f:c6:4d:94:88:
e2:90:4a:59:f8:ae:d0:48:5c:98:8e:42:cc:79:a3:ac:7f:bf:
aa:56:9b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:03 2026 by rpki-client