Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
File: eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft (raw, json)
Hash identifier: p2IWczicnKxW6hEgGbupxRhCykirkSmRgpw1Y3Bp2As=
Subject key identifier: CF:79:5E:36:6C:28:49:34:3C:B5:D7:C4:AB:04:AC:20:5E:55:84:DC
Authority key identifier: 79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D
Certificate issuer: /CN=7995f91e998225015f47063c328e0c501d68b59d
Certificate serial: 019D38656D6EA2330824B6028668CBA2A7A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
Manifest number: 1367
Signing time: Sun 29 Mar 2026 07:01:04 +0000
Manifest this update: Sun 29 Mar 2026 07:01:04 +0000
Manifest next update: Mon 30 Mar 2026 07:01:04 +0000
Files and hashes: 1: eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl (hash: gkEkCVGX+1Kkg8mC2KeOczdQjCbzSqtCAgrTSCw5TYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:6d:6e:a2:33:08:24:b6:02:86:68:cb:a2:a7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7995f91e998225015f47063c328e0c501d68b59d
Validity
Not Before: Mar 29 07:01:04 2026 GMT
Not After : Mar 30 07:01:04 2026 GMT
Subject: CN=cf795e366c2849343cb5d7c4ab04ac205e5584dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:a3:45:93:17:31:50:d0:1c:62:23:02:a6:
4f:01:f8:39:3a:2c:e8:cc:6d:c8:60:cb:f3:df:a3:
73:93:e1:d1:83:a7:50:bd:2a:9a:59:a4:80:62:a2:
cd:f3:0b:e1:9c:25:23:c2:35:e7:7b:7b:02:e4:92:
f6:df:2c:a2:67:de:91:0e:b3:9a:1f:8a:2f:23:cb:
65:9a:b0:62:4a:d2:51:53:21:fc:57:7d:bc:79:ff:
f9:c9:33:d0:6b:be:cd:cb:8f:7a:89:0e:d6:19:e7:
45:13:6e:6d:32:35:23:9a:6e:d1:35:2d:d6:94:9f:
8e:fa:c4:08:0b:4c:ef:90:10:7d:17:35:b1:a8:cf:
d1:84:fd:37:46:e1:80:32:2a:83:09:fa:fa:00:a0:
5a:78:b4:47:f1:fb:66:00:9f:58:6b:68:c5:75:2b:
bc:46:fb:2c:5e:91:ae:4f:26:91:f8:b6:7b:c3:d7:
06:da:6a:5c:b0:b1:08:e7:20:8f:ee:76:3c:84:a4:
3c:ea:f1:12:37:94:62:87:48:51:0e:78:90:26:eb:
b7:f6:fa:ab:e5:1d:b8:00:59:d6:29:11:d3:23:5b:
91:3d:ea:0d:a3:95:6f:22:d4:62:79:44:d6:16:19:
01:68:cc:26:d8:7c:36:d1:61:87:d6:fd:65:01:77:
a3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:79:5E:36:6C:28:49:34:3C:B5:D7:C4:AB:04:AC:20:5E:55:84:DC
X509v3 Authority Key Identifier:
keyid:79:95:F9:1E:99:82:25:01:5F:47:06:3C:32:8E:0C:50:1D:68:B5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b411f5-a7f8-4b84-85e3-a09d6c5d3552/1/eZX5HpmCJQFfRwY8Mo4MUB1otZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:90:70:cc:5f:78:ea:e2:a4:2e:1a:3b:b8:fa:24:a9:a5:f7:
a4:ec:4e:5c:bb:50:6c:7e:35:66:75:df:a1:67:e1:10:6f:e5:
ab:e2:45:5f:21:9b:c5:49:ba:c0:79:fe:29:45:e4:de:95:13:
7e:38:6e:c8:3d:83:1e:0d:eb:3c:5a:bd:3a:5a:c6:fe:37:11:
fa:53:e4:3d:72:91:d7:04:4d:e6:31:9d:0b:5a:ad:32:5e:95:
2b:f8:fc:9a:be:c0:92:79:65:76:2e:be:a4:b6:6d:17:8e:09:
b1:a6:aa:5a:40:35:53:71:73:f8:e3:62:00:63:58:46:85:e9:
f3:91:92:94:9c:d0:4a:cd:ab:30:8a:ce:de:b6:b5:5d:2b:3b:
50:90:c4:11:11:b3:82:ad:24:ee:db:4a:c6:56:7b:fe:9e:ed:
bb:5c:a4:75:66:48:68:80:f2:f4:69:86:12:85:ec:47:ea:c3:
4e:28:4e:7e:3f:1b:97:15:1f:d0:27:a4:fc:bb:5f:62:b2:c2:
fa:f9:9b:e6:3b:a0:bf:f4:9a:91:b9:e0:f6:52:93:e4:cc:19:
42:01:df:8b:5b:d2:a8:5f:c0:48:f3:e6:96:66:bb:17:85:52:
20:03:9c:bc:c2:29:c9:b4:cd:68:9e:99:3e:05:0c:f1:ac:10:
da:8d:a9:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZW1uojMIJLYChmjLoqeiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OTVmOTFlOTk4MjI1MDE1ZjQ3MDYzYzMyOGUwYzUwMWQ2
OGI1OWQwHhcNMjYwMzI5MDcwMTA0WhcNMjYwMzMwMDcwMTA0WjAzMTEwLwYDVQQD
EyhjZjc5NWUzNjZjMjg0OTM0M2NiNWQ3YzRhYjA0YWMyMDVlNTU4NGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ+jRZMXMVDQHGIjAqZPAfg5Oizo
zG3IYMvz36Nzk+HRg6dQvSqaWaSAYqLN8wvhnCUjwjXne3sC5JL23yyiZ96RDrOa
H4ovI8tlmrBiStJRUyH8V328ef/5yTPQa77Ny496iQ7WGedFE25tMjUjmm7RNS3W
lJ+O+sQIC0zvkBB9FzWxqM/RhP03RuGAMiqDCfr6AKBaeLRH8ftmAJ9Ya2jFdSu8
RvssXpGuTyaR+LZ7w9cG2mpcsLEI5yCP7nY8hKQ86vESN5Rih0hRDniQJuu39vqr
5R24AFnWKRHTI1uRPeoNo5VvItRieUTWFhkBaMwm2Hw20WGH1v1lAXejCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM95XjZsKEk0PLXXxKsErCBeVYTcMB8GA1UdIwQY
MBaAFHmV+R6ZgiUBX0cGPDKODFAdaLWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVpYNUhwbUNKUUZmUndZOE1vNE1VQjFvdFowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iNDExZjUtYTdmOC00Yjg0LTg1ZTMt
YTA5ZDZjNWQzNTUyLzEvZVpYNUhwbUNKUUZmUndZOE1vNE1VQjFvdFowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9iNDExZjUtYTdmOC00Yjg0LTg1ZTMtYTA5ZDZjNWQzNTUy
LzEvZVpYNUhwbUNKUUZmUndZOE1vNE1VQjFvdFowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpBwzF94
6uKkLho7uPokqaX3pOxOXLtQbH41ZnXfoWfhEG/lq+JFXyGbxUm6wHn+KUXk3pUT
fjhuyD2DHg3rPFq9OlrG/jcR+lPkPXKR1wRN5jGdC1qtMl6VK/j8mr7Aknlldi6+
pLZtF44JsaaqWkA1U3Fz+ONiAGNYRoXp85GSlJzQSs2rMIrO3ra1XSs7UJDEERGz
gq0k7ttKxlZ7/p7tu1ykdWZIaIDy9GmGEoXsR+rDTihOfj8blxUf0Cek/LtfYrLC
+vmb5jugv/Sakbng9lKT5MwZQgHfi1vSqF/ASPPmlma7F4VSIAOcvMIpybTNaJ6Z
PgUM8awQ2o2pvg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:56 2026 by rpki-client