Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
File: 62eoQOQaxm-PNZzL1lNUyRcEK78.mft (raw, json)
Hash identifier: I5Bdj7FF5XZGWf4hewls6y3OmYw2vM+PyhbbdPitWPc=
Subject key identifier: 4E:E8:CD:BC:F1:D4:E4:24:6A:15:3E:6A:B1:4E:2E:9C:BA:94:1A:57
Authority key identifier: EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
Certificate issuer: /CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Certificate serial: 019D38D2BEBEB3D40272587EFF9F7FA86B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
Manifest number: 0CBE
Signing time: Sun 29 Mar 2026 09:00:28 +0000
Manifest this update: Sun 29 Mar 2026 09:00:28 +0000
Manifest next update: Mon 30 Mar 2026 09:00:28 +0000
Files and hashes: 1: 62eoQOQaxm-PNZzL1lNUyRcEK78.crl (hash: 0t+xyGhPJMbleFcwv12ao/aT2CRF9lJJFNX+QcU+7ks=)
2: y_DN1NlT3WxnHFjjy8yM8EUu98c.roa (hash: xlreRmvPkwb20CmAYP76if0DKA37CnCWemcHHd4gTDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:be:be:b3:d4:02:72:58:7e:ff:9f:7f:a8:6b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Validity
Not Before: Mar 29 09:00:28 2026 GMT
Not After : Mar 30 09:00:28 2026 GMT
Subject: CN=4ee8cdbcf1d4e4246a153e6ab14e2e9cba941a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bf:6f:19:b6:79:aa:48:d0:10:1f:b8:ab:1d:
c1:4b:14:b8:58:54:2f:74:78:1a:3a:c1:12:08:19:
73:84:99:85:91:f8:9c:12:99:0a:5b:14:54:54:80:
ab:e2:d5:6c:45:c5:c8:75:40:88:23:7d:27:94:70:
58:ed:19:1d:93:c0:6c:50:ae:ca:0b:e2:b0:93:b7:
24:a7:26:65:ed:73:a1:dc:8e:83:53:da:e2:cd:66:
0e:e4:6c:5d:3d:0a:3a:92:a0:d6:e4:d1:0a:8f:f2:
5a:b8:15:2b:20:2d:25:88:65:aa:7c:40:c0:a1:bb:
19:59:bc:b5:14:9e:26:ef:71:1f:94:a8:c5:68:75:
f1:cd:4b:36:58:62:ea:a1:31:66:f8:41:f3:9b:6a:
52:e6:66:d8:7a:07:50:ce:c5:43:76:58:3a:0f:b6:
61:35:59:d4:3a:aa:14:ad:a3:85:88:96:6b:16:bb:
62:07:99:cd:4d:41:1b:36:16:04:0c:0b:c7:e8:26:
c1:4f:de:36:b3:21:19:00:20:ff:d2:be:0d:68:5d:
5c:7a:8d:f1:88:24:58:02:62:30:3c:5c:a4:d3:3e:
08:55:55:94:aa:73:ad:18:9d:96:a8:f2:4f:d9:fd:
70:99:7c:f2:00:3b:e6:1f:71:eb:18:48:73:b4:60:
f6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E8:CD:BC:F1:D4:E4:24:6A:15:3E:6A:B1:4E:2E:9C:BA:94:1A:57
X509v3 Authority Key Identifier:
keyid:EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:99:8e:70:82:2d:d4:58:63:e9:54:6b:50:9d:88:34:09:80:
a6:af:36:ae:fd:0e:9d:ef:ae:f6:07:1b:c0:f4:57:13:0e:79:
6c:90:ae:41:99:f9:59:4d:41:32:dc:d6:73:dc:de:1e:2e:bd:
da:9a:7a:9f:41:eb:2e:d5:f2:ee:29:3f:c6:97:6d:86:83:6e:
ac:25:71:10:f8:29:04:d8:fb:a5:47:b4:4a:4a:9c:8c:7b:bc:
7f:d4:bc:36:8f:3a:e0:14:83:78:dc:82:a6:6b:5e:7a:87:c5:
2a:05:fa:5d:8a:44:7d:ff:af:66:70:68:fe:f4:c6:85:ca:1d:
a2:c4:9f:72:71:b4:b4:c9:78:25:25:d7:99:05:90:d6:b6:da:
df:8c:1f:09:e9:fc:8d:df:d3:57:cd:70:9c:31:97:91:ee:04:
69:a2:e1:28:b9:4f:80:f3:30:75:6e:b2:ef:9b:32:5c:77:56:
53:de:d0:59:3b:61:70:60:5f:de:42:0c:5f:7d:da:5e:f2:20:
05:42:72:4c:96:3d:68:1c:66:31:b8:1f:c4:89:27:af:18:14:
b5:44:49:1a:2b:50:9d:e0:79:05:a4:41:b8:fd:6c:36:29:e1:
01:a1:66:69:70:31:57:31:a5:49:7e:c7:95:79:a5:b5:71:54:
43:bf:69:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:12 2026 by rpki-client