Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
File: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft (raw, json)
Hash identifier: +91ZWJ2J6ArXKIFbufXarkJwMaNNC6yzCTEJVnf47FY=
Subject key identifier: 36:62:AB:71:54:7E:05:80:94:17:8D:3C:10:B4:F2:96:EF:85:08:3F
Authority key identifier: 78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED
Certificate issuer: /CN=78fd422a1ddee016ee5f5a23101b93043af764ed
Certificate serial: 019D3A54353A4A4F95518B6F622CB4023984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
Manifest number: 06F2
Signing time: Sun 29 Mar 2026 16:01:30 +0000
Manifest this update: Sun 29 Mar 2026 16:01:30 +0000
Manifest next update: Mon 30 Mar 2026 16:01:30 +0000
Files and hashes: 1: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl (hash: EjqhGPgLM2rXF045XeZRO3svaa+WlAR4OXiJ8gltNLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:35:3a:4a:4f:95:51:8b:6f:62:2c:b4:02:39:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fd422a1ddee016ee5f5a23101b93043af764ed
Validity
Not Before: Mar 29 16:01:30 2026 GMT
Not After : Mar 30 16:01:30 2026 GMT
Subject: CN=3662ab71547e058094178d3c10b4f296ef85083f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f4:ed:89:f0:0a:fa:93:d0:5e:80:3a:7d:bf:
26:5a:27:21:fa:54:ac:47:4c:9a:62:54:fd:43:df:
c5:38:94:d1:02:b1:7f:0b:06:a1:98:8b:72:d3:77:
2e:bf:fe:8a:c3:68:c3:67:c8:f3:6c:a0:16:2d:9f:
ff:4d:f6:a9:01:02:e6:c9:06:8e:f2:49:61:15:39:
ae:87:c4:b0:33:73:1e:5d:4f:95:7e:6e:e8:ca:6b:
11:e5:45:af:14:1f:63:f0:be:df:73:f3:b9:cc:42:
2f:97:ae:7d:b7:22:48:15:df:25:bf:75:69:7d:5c:
9d:09:5d:ef:b2:40:5a:41:02:d8:96:5e:b2:e0:36:
29:2a:1d:02:d7:cc:96:7f:26:9f:f3:17:e1:c3:80:
9e:12:45:7c:0c:cb:03:a4:e7:b1:39:4d:6f:9f:13:
d4:7d:c1:0a:7c:66:91:63:80:72:1d:f3:b4:2e:0b:
47:3c:e1:1a:ad:34:84:06:bd:45:eb:09:c9:f1:54:
af:11:f2:80:10:72:2e:e7:74:fb:b8:64:f5:6a:92:
92:a0:5e:3f:49:6a:b0:90:d5:db:e6:90:50:c8:e9:
72:21:d5:13:c5:5e:f3:6d:a0:ae:8f:cf:2d:7a:1c:
e6:bb:e8:63:d4:1f:4c:0b:07:54:b2:54:9c:1c:e5:
dc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:62:AB:71:54:7E:05:80:94:17:8D:3C:10:B4:F2:96:EF:85:08:3F
X509v3 Authority Key Identifier:
keyid:78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9a:36:a3:d0:d8:d6:58:df:50:e0:ed:b3:0c:36:3d:87:9c:
01:0a:20:e2:a1:7b:b5:10:aa:8b:d0:eb:1c:3c:ac:13:c3:7a:
62:1e:e6:b1:61:a1:2f:4a:ba:e9:85:ca:d2:ef:db:43:c6:16:
8f:13:4d:f5:ea:8c:2f:b7:34:aa:c5:9e:8e:c1:fb:50:a8:68:
4f:50:11:a1:dc:8d:da:e7:4e:42:62:4e:ff:2c:57:07:7f:12:
a8:f6:25:dc:75:0e:e2:3c:bd:25:8e:11:c2:85:f9:53:38:85:
d2:80:9e:80:43:25:ae:64:46:0e:b8:21:65:ec:e9:c3:f7:94:
cc:8d:f9:d4:23:3b:6f:44:67:ba:66:91:d3:57:e7:e0:95:05:
04:a1:ac:cf:35:89:15:a8:a9:18:70:4a:6d:c2:25:2b:6e:69:
40:02:54:41:be:33:2e:28:b9:08:bb:73:d6:03:ea:c3:63:ed:
73:e9:ac:65:bf:c7:a3:fd:8a:8e:48:21:72:f1:a5:75:26:a9:
94:e7:fa:c0:df:77:7c:72:3d:d7:a7:b7:44:ed:b1:6f:be:91:
28:46:d7:b5:8e:e4:2c:97:71:1b:9a:9c:16:c1:7d:92:a6:28:
aa:b8:71:d5:31:85:1b:86:09:2e:8e:ca:06:43:27:f6:c6:92:
97:90:76:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:35 2026 by rpki-client