Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
File: EQKbhwTDK6_sKzyCn89YaqGz2cE.mft (raw, json)
Hash identifier: uWfhQwNGI3kQVc5/JXWqpCmd/rrpLKSE8Rp5kTfxU5k=
Subject key identifier: 29:0D:B2:F9:53:DA:19:15:5C:7E:91:B6:46:B7:8C:A5:62:B8:4F:03
Authority key identifier: 11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
Certificate issuer: /CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Certificate serial: 019FA2604349F0C719DB743A05C510DF01D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
Manifest number: 16DA
Signing time: Mon 27 Jul 2026 07:00:45 +0000
Manifest this update: Mon 27 Jul 2026 07:00:45 +0000
Manifest next update: Tue 28 Jul 2026 07:00:45 +0000
Files and hashes: 1: EQKbhwTDK6_sKzyCn89YaqGz2cE.crl (hash: NZOdbolO9dNFrcKYHXVvhimBDX6THdc7lBOxkOkNwUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:43:49:f0:c7:19:db:74:3a:05:c5:10:df:01:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Validity
Not Before: Jul 27 07:00:45 2026 GMT
Not After : Jul 28 07:00:45 2026 GMT
Subject: CN=290db2f953da19155c7e91b646b78ca562b84f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b3:f8:48:86:7a:9e:bc:cb:3b:a8:47:7e:56:
a4:11:a5:62:b9:a3:20:6b:df:ae:32:72:fc:76:a1:
69:8a:03:0f:5f:a5:1c:80:51:f3:a2:b1:8b:8f:69:
c9:8b:7a:9d:15:75:13:66:9b:cd:7f:53:e3:93:e3:
5e:36:a3:41:e9:53:9e:69:12:41:40:2b:ec:42:d8:
4f:c4:67:38:85:25:63:1d:48:13:fe:0c:3e:b6:bd:
c9:6c:39:40:7c:67:ae:48:7f:af:41:14:e2:45:14:
33:5c:8b:40:eb:42:60:a5:34:2c:ed:cb:76:21:70:
65:a9:f6:61:25:2d:7c:2e:86:05:4c:e2:68:49:e0:
9e:4d:d7:e6:a8:3a:55:92:66:e8:66:5f:b3:e1:12:
db:83:05:34:74:c4:a9:c0:a5:1b:97:d2:ac:02:e0:
7b:6b:59:cf:29:26:d7:bf:30:ab:5b:88:3a:c4:25:
3d:b8:80:eb:ea:8a:9e:6a:05:76:f1:7b:a0:be:a1:
c0:d5:bb:a6:de:ce:b0:15:44:aa:76:fb:3a:7c:f8:
d5:a9:ab:cc:41:71:2d:32:39:c0:f1:64:a0:01:d5:
10:78:ea:0c:25:2c:1d:01:9d:a7:18:db:ed:ee:1f:
fe:17:bd:c7:e9:67:e0:71:0c:9d:7a:1c:16:29:1b:
f7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0D:B2:F9:53:DA:19:15:5C:7E:91:B6:46:B7:8C:A5:62:B8:4F:03
X509v3 Authority Key Identifier:
keyid:11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:5c:90:c4:02:c2:a9:8a:b8:91:62:5d:b0:90:a7:67:cf:a3:
0f:54:ea:59:1d:66:18:23:14:31:04:5c:0d:a9:bb:1d:9c:f9:
16:19:72:00:90:25:0d:29:9b:10:3b:91:f7:8a:f4:d5:fd:99:
7c:14:7f:c0:b9:4f:7e:68:7c:48:bd:85:61:44:91:9b:68:47:
cd:46:ce:ee:8e:79:61:c0:83:6d:01:26:70:f7:51:e6:20:6f:
3c:5e:08:90:71:9f:1e:b4:c2:1a:31:09:4a:80:d3:ad:91:85:
aa:ec:dc:ab:6b:48:c7:8b:a1:db:94:d7:bd:e1:bd:43:44:7a:
b1:4a:25:85:0a:85:73:07:92:67:9f:91:88:a4:27:e8:e5:48:
87:17:51:42:5c:b3:7a:df:a8:ed:f7:75:12:f6:1c:83:9c:54:
04:9a:e9:17:69:77:a1:82:60:09:f5:35:3d:74:d3:98:e7:4e:
c5:6d:7d:4f:a1:ec:a6:d1:d4:d7:db:a7:cf:44:a5:02:10:2e:
1a:1a:65:51:b8:e7:11:e9:6a:9b:ea:fb:ad:ca:00:88:09:5b:
24:1d:22:ef:e6:65:a7:66:eb:c9:b9:a3:25:e6:4e:ce:0e:6e:
f5:e7:9b:5d:31:93:c9:ea:7e:53:ed:b1:44:03:fb:2d:13:c1:
53:3c:32:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:59:35 2026 by rpki-client