Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
File: eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft (raw, json)
Hash identifier: MblAzZIfCzeX5bL4UJZFK9xDIFJ69p1ahElZLg6m5Jc=
Subject key identifier: D9:46:7C:BB:B8:9E:05:20:E7:D1:33:C7:C7:0D:B5:5C:14:9F:EB:B1
Authority key identifier: 7A:20:A8:7B:82:F6:98:BB:E9:49:0A:42:1A:3D:1B:41:61:85:5F:5A
Certificate issuer: /CN=7a20a87b82f698bbe9490a421a3d1b4161855f5a
Certificate serial: 019D37C0443AC94C094A1A7AA4BA53EBCAC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
Manifest number: 08C2
Signing time: Sun 29 Mar 2026 04:00:40 +0000
Manifest this update: Sun 29 Mar 2026 04:00:40 +0000
Manifest next update: Mon 30 Mar 2026 04:00:40 +0000
Files and hashes: 1: eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl (hash: JHSaqJldjh8qkLWF5OY/id5T/fZa4n9nO7x/oUTsL5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:44:3a:c9:4c:09:4a:1a:7a:a4:ba:53:eb:ca:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a20a87b82f698bbe9490a421a3d1b4161855f5a
Validity
Not Before: Mar 29 04:00:40 2026 GMT
Not After : Mar 30 04:00:40 2026 GMT
Subject: CN=d9467cbbb89e0520e7d133c7c70db55c149febb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a8:6f:b7:72:25:24:6b:45:b4:9d:06:ee:41:
9d:fc:08:ad:67:9f:06:55:cc:a8:40:a9:6d:d0:42:
2a:a5:e6:cc:a2:bc:2b:32:f6:8c:fe:40:1e:ab:1f:
46:c5:69:1a:1b:8f:5b:d9:71:1a:c2:6a:24:a1:17:
a2:fc:c0:15:67:2e:10:89:52:95:47:f1:5e:6d:35:
88:cc:ee:09:e1:86:a6:93:f6:be:54:d1:8f:1e:8b:
5b:3a:63:ef:fe:83:b2:6a:53:f4:75:80:ad:17:da:
18:ba:82:88:f3:a2:3f:59:46:cd:67:a4:2b:91:6e:
80:c2:43:5c:8a:44:7f:10:6b:26:1b:e3:19:8b:db:
ef:00:ff:9a:ca:a6:66:89:8e:1e:6d:f3:fa:00:8b:
0c:c0:28:28:15:6e:19:ec:70:36:ea:8d:95:b2:82:
75:05:a1:db:dd:e9:ab:f2:ea:50:47:5f:22:13:91:
92:7b:8e:96:4c:c2:57:ea:07:8e:c3:6e:9b:dc:92:
55:13:c0:01:fa:e0:eb:5e:ee:04:db:d4:e3:37:80:
db:9d:ab:ae:38:4e:0d:56:a6:e1:f0:f4:bb:3a:e0:
2d:f8:cb:b2:5c:08:c5:cd:04:01:b0:bc:ef:cc:a6:
ad:be:3b:67:7a:5a:3d:ea:35:07:f3:37:f4:1f:79:
a3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:46:7C:BB:B8:9E:05:20:E7:D1:33:C7:C7:0D:B5:5C:14:9F:EB:B1
X509v3 Authority Key Identifier:
keyid:7A:20:A8:7B:82:F6:98:BB:E9:49:0A:42:1A:3D:1B:41:61:85:5F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:69:85:27:aa:86:fc:6f:f4:a0:4b:96:e6:6c:d1:e7:56:01:
f3:45:15:bc:01:bd:36:28:95:40:7e:bf:d1:7a:8e:83:b8:df:
78:8b:dc:dc:d0:f9:a1:c6:5a:dd:11:08:86:4f:05:43:2b:98:
a4:ce:9e:7c:8e:a9:91:c0:dc:a1:cf:4f:10:34:8c:44:3d:f5:
8c:9e:45:74:9b:1a:08:eb:f9:34:94:b3:6e:88:3e:95:97:48:
0c:12:03:c0:1b:2f:f0:63:46:7c:21:f4:a1:6f:59:74:37:d9:
2d:f3:91:4a:36:16:8d:81:bc:fb:3f:32:80:29:fa:3d:0b:cf:
b9:96:d5:1e:47:e8:e8:d4:28:1e:8c:1e:17:f1:f0:a4:2f:53:
6b:0a:80:7a:ca:e3:d3:39:4f:c5:ad:6c:93:08:60:6a:ce:fd:
38:23:18:aa:59:fe:9f:e5:44:79:d8:9e:3d:c9:01:91:ec:69:
0a:2a:0e:96:84:f5:ce:44:18:bd:4b:4f:c6:85:7e:65:a7:1b:
94:cd:2b:44:a3:26:3f:41:59:94:cf:33:92:bf:93:8c:e1:76:
de:b3:75:3e:d4:85:9f:2d:a2:33:d3:21:db:52:43:00:d7:4d:
0a:8b:b5:97:88:3e:d3:0d:76:6a:a5:89:07:37:d7:f2:e3:aa:
67:c6:19:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wEQ6yUwJShp6pLpT68rFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMjBhODdiODJmNjk4YmJlOTQ5MGE0MjFhM2QxYjQxNjE4
NTVmNWEwHhcNMjYwMzI5MDQwMDQwWhcNMjYwMzMwMDQwMDQwWjAzMTEwLwYDVQQD
EyhkOTQ2N2NiYmI4OWUwNTIwZTdkMTMzYzdjNzBkYjU1YzE0OWZlYmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjahvt3IlJGtFtJ0G7kGd/AitZ58G
VcyoQKlt0EIqpebMorwrMvaM/kAeqx9GxWkaG49b2XEawmokoRei/MAVZy4QiVKV
R/FebTWIzO4J4Yamk/a+VNGPHotbOmPv/oOyalP0dYCtF9oYuoKI86I/WUbNZ6Qr
kW6AwkNcikR/EGsmG+MZi9vvAP+ayqZmiY4ebfP6AIsMwCgoFW4Z7HA26o2VsoJ1
BaHb3emr8upQR18iE5GSe46WTMJX6geOw26b3JJVE8AB+uDrXu4E29TjN4Dbnauu
OE4NVqbh8PS7OuAt+MuyXAjFzQQBsLzvzKatvjtnelo96jUH8zf0H3mjmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlGfLu4ngUg59Ezx8cNtVwUn+uxMB8GA1UdIwQY
MBaAFHogqHuC9pi76UkKQho9G0FhhV9aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWlDb2U0TDJtTHZwU1FwQ0dqMGJRV0dGWDFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yZmJjY2EtNDAwOC00NDY1LTg5YWMt
MDFlMTgzYTkyZjA4LzEvZWlDb2U0TDJtTHZwU1FwQ0dqMGJRV0dGWDFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8yZmJjY2EtNDAwOC00NDY1LTg5YWMtMDFlMTgzYTkyZjA4
LzEvZWlDb2U0TDJtTHZwU1FwQ0dqMGJRV0dGWDFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmmFJ6qG
/G/0oEuW5mzR51YB80UVvAG9NiiVQH6/0XqOg7jfeIvc3ND5ocZa3REIhk8FQyuY
pM6efI6pkcDcoc9PEDSMRD31jJ5FdJsaCOv5NJSzbog+lZdIDBIDwBsv8GNGfCH0
oW9ZdDfZLfORSjYWjYG8+z8ygCn6PQvPuZbVHkfo6NQoHoweF/HwpC9TawqAesrj
0zlPxa1skwhgas79OCMYqln+n+VEediePckBkexpCioOloT1zkQYvUtPxoV+Zacb
lM0rRKMmP0FZlM8zkr+TjOF23rN1PtSFny2iM9Mh21JDANdNCou1l4g+0w12aqWJ
BzfX8uOqZ8YZbA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:21 2026 by rpki-client