
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/ee6oG28z9ptgubAduZrUbZDT1zs.mft
File: ee6oG28z9ptgubAduZrUbZDT1zs.mft (raw, json)
Hash identifier: K+dPESDCvDWx7mQ/SVtiYtkESSj4kf6eaVbBaSxio60=
Subject key identifier: E7:3A:A0:00:6F:DD:40:B2:1D:39:7C:FF:C7:AB:C4:93:A9:8D:FB:A3
Authority key identifier: 79:EE:A8:1B:6F:33:F6:9B:60:B9:B0:1D:B9:9A:D4:6D:90:D3:D7:3B
Certificate issuer: /CN=79eea81b6f33f69b60b9b01db99ad46d90d3d73b
Certificate serial: 019D78C4D84EAFC4B186E35DDDE2B0763051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ee6oG28z9ptgubAduZrUbZDT1zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/ee6oG28z9ptgubAduZrUbZDT1zs.mft
Manifest number: 05
Signing time: Fri 10 Apr 2026 19:00:59 +0000
Manifest this update: Fri 10 Apr 2026 19:00:59 +0000
Manifest next update: Sat 11 Apr 2026 19:00:59 +0000
Files and hashes: 1: Ib9hh-TMy8NWgCF2SB6saERuDZY.roa (hash: vnCBy8FHgjLaxM5X4Kapy6zgVqNK6usUxo/Q7DSia5s=)
2: ee6oG28z9ptgubAduZrUbZDT1zs.crl (hash: cjTgQahQiId12qldpf7E52uHhJprWhgZ7uQMmeNIEio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/ee6oG28z9ptgubAduZrUbZDT1zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/ee6oG28z9ptgubAduZrUbZDT1zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ee6oG28z9ptgubAduZrUbZDT1zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Apr 2026 17:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:78:c4:d8:4e:af:c4:b1:86:e3:5d:dd:e2:b0:76:30:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79eea81b6f33f69b60b9b01db99ad46d90d3d73b
Validity
Not Before: Apr 10 19:00:59 2026 GMT
Not After : Apr 11 19:00:59 2026 GMT
Subject: CN=e73aa0006fdd40b21d397cffc7abc493a98dfba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5f:e2:14:18:9b:3b:85:11:8c:38:5b:58:0a:
b7:50:1d:ff:a5:07:44:e2:5f:47:cc:de:20:0d:3e:
a8:97:30:25:a8:5c:64:45:d8:28:16:77:cb:1d:22:
41:23:f1:bf:0c:7d:5d:bc:63:84:ee:88:b8:f8:7c:
97:b3:55:dd:80:49:d4:7b:5a:ae:76:93:55:b4:bb:
72:5e:c4:4a:f6:63:ea:03:8f:57:29:42:d9:a4:38:
e2:c6:aa:ac:3b:73:cd:45:cc:6a:0d:56:89:0b:28:
ea:10:cc:1c:61:6d:d6:7c:87:b4:31:96:6a:a9:1d:
d6:12:21:8a:47:47:ed:50:7f:d5:80:54:aa:b5:dc:
44:7d:5f:74:bd:f5:6b:88:60:49:a6:b5:1d:1b:b2:
e3:2e:44:1e:a8:9c:33:3c:ca:53:b3:ee:72:a1:aa:
76:ff:b7:5e:36:e0:ad:fa:1f:3a:7f:fa:83:a8:c0:
f0:87:1b:c5:c8:5a:1a:65:06:39:90:40:5d:ac:74:
cc:91:11:a2:ca:3f:b5:de:f3:16:d8:54:ae:ee:13:
33:17:9b:5a:95:5d:c2:e4:c8:ef:c5:83:13:60:c2:
a1:17:fb:13:86:20:ba:83:74:20:e8:05:fb:70:69:
f0:a1:1a:98:90:e9:d8:6d:92:cd:ee:b8:ba:fd:2b:
c9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3A:A0:00:6F:DD:40:B2:1D:39:7C:FF:C7:AB:C4:93:A9:8D:FB:A3
X509v3 Authority Key Identifier:
keyid:79:EE:A8:1B:6F:33:F6:9B:60:B9:B0:1D:B9:9A:D4:6D:90:D3:D7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee6oG28z9ptgubAduZrUbZDT1zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/ee6oG28z9ptgubAduZrUbZDT1zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/ee6oG28z9ptgubAduZrUbZDT1zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:79:61:04:c0:6a:79:4a:78:ef:19:c5:43:dd:08:83:3e:b4:
8b:6b:e4:73:15:60:6e:49:6d:19:f9:88:06:a3:3a:62:a2:db:
df:88:18:73:d2:34:c3:44:9f:93:79:66:f6:cf:0b:15:38:54:
e7:93:cd:7f:83:3b:9f:b6:58:1d:fe:90:44:1e:18:a6:86:a7:
42:da:a7:c4:a5:3d:0f:ca:4c:f9:03:ac:4a:1b:b5:d5:12:97:
96:32:0a:a4:89:e6:b3:1e:48:cc:f9:3c:c2:85:79:97:d8:13:
e8:67:c2:f2:e7:d5:bb:48:7b:44:2c:07:14:a5:11:57:c5:64:
42:83:79:69:c4:c3:87:1a:7c:9f:b2:3b:3e:68:b4:64:81:71:
87:4e:36:ba:66:85:c9:5a:f6:3f:f2:28:f8:4e:8b:dc:47:a6:
84:c7:fa:72:06:a9:ec:67:b2:85:8c:f7:bc:eb:90:ef:7d:7c:
15:ef:18:95:8f:e8:5e:5f:33:d6:af:bd:5b:9c:01:e8:12:66:
6a:86:d7:2d:22:a5:04:d8:b8:ad:83:19:34:8e:8a:6a:9e:13:
c7:07:42:28:fa:a6:12:6a:33:65:c2:b8:fa:ab:23:44:94:9f:
23:55:80:58:1c:81:56:2d:28:e7:1f:fa:28:3b:29:1f:90:49:
6d:5b:18:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 02:36:25 2026 by rpki-client