Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
File: EQKbhwTDK6_sKzyCn89YaqGz2cE.mft (raw, json)
Hash identifier: 8jLoyGnQk5asZC5o3d6ymABrSFExc5BJvPnSOc8LGE8=
Subject key identifier: B5:45:CB:42:6F:82:CE:A8:6B:B5:C9:05:42:12:1E:32:33:F6:A3:EA
Authority key identifier: 11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
Certificate issuer: /CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Certificate serial: 019D3865A7E9522423F4FF09907FFB0395E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
Manifest number: 159A
Signing time: Sun 29 Mar 2026 07:01:19 +0000
Manifest this update: Sun 29 Mar 2026 07:01:19 +0000
Manifest next update: Mon 30 Mar 2026 07:01:19 +0000
Files and hashes: 1: EQKbhwTDK6_sKzyCn89YaqGz2cE.crl (hash: WP3ospBnwZwP6kjqAPV9MILroOsxlNQvgtUg5isgO+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:a7:e9:52:24:23:f4:ff:09:90:7f:fb:03:95:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Validity
Not Before: Mar 29 07:01:19 2026 GMT
Not After : Mar 30 07:01:19 2026 GMT
Subject: CN=b545cb426f82cea86bb5c90542121e3233f6a3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7d:53:f8:26:aa:09:01:19:df:92:40:46:65:
cb:4c:bc:bb:5f:58:7d:ca:f2:2a:43:be:d1:3b:17:
49:75:d3:86:b2:0d:8a:73:3d:a2:71:32:04:17:1b:
c8:24:cd:b5:0d:d5:22:74:a3:5d:81:ea:2f:eb:65:
44:5f:02:4b:99:82:96:0c:1c:6e:ff:25:53:7f:98:
ea:14:17:01:68:b0:84:60:2b:67:54:95:ab:50:3c:
df:36:d3:25:36:98:fc:5e:ea:1d:9d:28:d8:ae:2f:
2e:c8:58:2d:24:53:f5:ca:fd:c8:20:54:ca:fc:01:
e3:6c:c8:99:3e:c1:ad:27:d8:91:c7:83:72:71:96:
90:3b:94:83:4c:92:22:a5:71:b8:9c:14:87:96:ac:
f7:15:50:e5:36:f1:c8:94:a5:92:a8:e0:95:03:d7:
19:73:d4:98:2e:17:db:1b:6d:f8:70:0d:d6:c9:d6:
a6:a0:ce:5d:bf:eb:8c:4d:c6:37:0a:16:4c:55:0f:
6c:26:a5:75:85:46:7e:2b:1a:ef:2e:02:86:83:29:
0e:52:61:bd:80:38:bb:1a:03:46:59:ff:4a:67:03:
c7:af:b8:ff:7f:0b:9b:c8:ba:62:54:bd:13:1c:e8:
66:d5:7f:66:c6:aa:9d:79:df:67:69:ca:2e:2c:ad:
c2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:45:CB:42:6F:82:CE:A8:6B:B5:C9:05:42:12:1E:32:33:F6:A3:EA
X509v3 Authority Key Identifier:
keyid:11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:28:86:82:31:bb:6f:22:50:8f:c4:03:98:08:fa:36:86:39:
52:94:57:0c:8d:ad:88:cb:dd:2d:e0:75:27:06:d3:75:7a:2a:
b1:bc:ba:f7:88:c7:b9:ce:bd:8a:b0:d2:fa:d7:21:97:31:0b:
98:74:14:43:7e:b9:91:2f:24:a2:2c:d2:dc:90:28:b3:69:53:
2e:94:2a:49:3e:65:13:59:22:c1:f9:8d:b7:ea:d2:bb:6e:6d:
af:cc:33:7e:9c:92:6c:92:11:33:fb:47:b2:0a:c9:1d:2e:8a:
c6:af:eb:71:2a:4a:36:d4:58:f0:2a:1b:ad:ec:f0:d8:4f:1b:
7c:76:51:84:13:de:fe:1d:62:25:f6:35:3f:31:30:01:c2:a3:
a2:fd:44:28:bc:1a:82:62:d2:03:9a:56:11:1d:8f:e2:4c:89:
3c:70:b5:5e:eb:c0:56:04:7d:85:46:b9:b3:ed:d8:4c:72:26:
94:b5:26:60:5b:cb:45:77:85:fb:ea:c7:45:44:d3:b9:47:8f:
43:16:b7:77:81:ec:7b:06:d4:df:a9:11:ae:2b:f4:ee:b0:c9:
5a:48:d9:55:58:c9:6e:e7:df:ea:42:73:7a:c7:5b:ac:34:5f:
81:56:d5:b1:11:06:34:ac:03:a5:e3:c3:6b:22:df:e7:19:3c:
3e:4a:68:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:06 2026 by rpki-client