Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.mft
File: EQnNl_ja-OKOnjY_oidxR7iMj9I.mft (raw, json)
Hash identifier: aJaX+hzpk+7df1y635gsxEpO13K9Ai5iuDQDYhXVTyE=
Subject key identifier: 88:01:2C:02:1F:16:C0:C4:0D:CB:C9:E6:32:A1:7A:A4:47:31:C7:8C
Authority key identifier: 11:09:CD:97:F8:DA:F8:E2:8E:9E:36:3F:A2:27:71:47:B8:8C:8F:D2
Certificate issuer: /CN=1109cd97f8daf8e28e9e363fa2277147b88c8fd2
Certificate serial: 019FA3A997A8A8D3D60AA5B991FDEBC00E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQnNl_ja-OKOnjY_oidxR7iMj9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.mft
Manifest number: 45
Signing time: Mon 27 Jul 2026 13:00:28 +0000
Manifest this update: Mon 27 Jul 2026 13:00:28 +0000
Manifest next update: Tue 28 Jul 2026 13:00:28 +0000
Files and hashes: 1: EQnNl_ja-OKOnjY_oidxR7iMj9I.crl (hash: EQIGdBOARiAcxxitOJrL/NFe7aMVacwkUK8YdADfdTI=)
2: MjyhcIDP5Cuj0z7nBld4_C2DGvQ.roa (hash: 4k0Ys4b3Bg2O9bxcwTlvra4F9uJDHWsWf5y4VFTdqqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQnNl_ja-OKOnjY_oidxR7iMj9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:a9:97:a8:a8:d3:d6:0a:a5:b9:91:fd:eb:c0:0e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1109cd97f8daf8e28e9e363fa2277147b88c8fd2
Validity
Not Before: Jul 27 13:00:28 2026 GMT
Not After : Jul 28 13:00:28 2026 GMT
Subject: CN=88012c021f16c0c40dcbc9e632a17aa44731c78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1d:c5:5e:68:4c:5d:ea:a4:77:e7:9a:85:56:
74:56:ef:45:6c:f6:b0:a4:8d:4f:ce:1e:ee:11:0f:
41:8b:51:6f:7b:03:9d:c0:49:73:03:ec:7a:2e:7b:
fa:9c:24:f9:46:d5:f4:27:73:09:1c:33:09:cd:92:
17:07:43:8f:d7:8b:d6:1c:2f:bc:a6:99:3b:17:5d:
d9:a5:4e:15:46:20:19:68:d4:a7:85:76:76:5a:e5:
67:ad:ab:c6:39:8c:2c:d9:85:c8:b6:83:f7:bf:31:
2e:e2:85:72:6d:ed:f0:74:29:f5:75:f3:5f:cb:a4:
9f:ae:90:e9:ae:ac:cd:6e:d8:b9:5c:23:fb:ab:58:
b5:f2:dd:d6:45:5b:5b:4e:72:0a:fb:88:b9:fa:a5:
1e:66:e1:92:81:1b:a1:69:1d:9e:56:d2:66:c6:87:
7c:b7:22:7b:e6:05:dd:50:b7:3a:9b:8e:32:b6:f8:
3f:d6:40:06:d9:11:0b:0d:f2:e1:86:a4:2a:d4:e7:
47:43:b6:5d:7c:fb:67:42:18:82:f9:b0:81:c3:cc:
a6:ca:82:de:d6:03:b7:47:d9:17:3e:6b:e8:be:13:
10:8b:14:4c:2e:d7:4b:e0:a9:e3:45:12:7f:e8:cb:
47:1f:91:75:e0:36:30:6c:92:17:88:90:39:b7:f5:
8d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:01:2C:02:1F:16:C0:C4:0D:CB:C9:E6:32:A1:7A:A4:47:31:C7:8C
X509v3 Authority Key Identifier:
keyid:11:09:CD:97:F8:DA:F8:E2:8E:9E:36:3F:A2:27:71:47:B8:8C:8F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQnNl_ja-OKOnjY_oidxR7iMj9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fd:bf:87:fc:af:aa:d7:78:23:d3:84:bf:01:a0:14:97:82:
3c:63:5b:1e:37:fa:9e:63:c6:9e:10:13:da:3c:19:c2:19:3d:
85:9b:db:c6:eb:11:2a:0b:27:c7:d7:cc:40:d2:63:cf:df:64:
ac:82:57:80:2f:6c:b7:34:82:4c:22:3f:8a:fd:93:81:8f:23:
8c:f9:85:08:69:06:11:d2:8c:0e:ed:c3:b1:37:83:bf:37:51:
61:89:4d:0e:4e:2f:29:60:00:dc:e8:04:85:80:35:77:ac:5c:
b5:99:51:a5:7f:f0:20:4e:0f:01:dc:23:b0:83:15:f7:23:4e:
90:5b:2c:ee:b8:71:cc:24:58:82:32:8a:29:b3:44:70:59:24:
3c:83:d4:d7:b2:fe:e3:af:0a:4b:95:c2:28:f7:b5:6d:5c:1b:
eb:5c:98:28:f7:c3:07:93:e8:a4:7a:34:c7:97:84:f9:14:49:
7a:98:a5:f0:61:54:8b:d5:92:b5:86:55:34:b1:33:3c:04:31:
5c:76:e4:c2:eb:02:41:16:5b:6f:36:a0:30:2a:3c:a9:67:0d:
49:31:76:d9:71:46:51:4e:6d:ca:82:0d:9f:9d:06:e7:b9:03:
37:fe:3f:30:37:d6:9b:f8:8f:41:6e:af:18:78:c2:ba:28:ce:
6c:84:f5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:53:01 2026 by rpki-client