Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
File: eZNZZNoXA44j06SJCaE6JfsOWOs.mft (raw, json)
Hash identifier: Kxt1fZ4WhBuE+Qu0WAPH/uuUGm3hHUctNJvL7QFZh6M=
Subject key identifier: 89:85:AD:00:C3:28:96:97:6F:60:2F:6A:42:3B:23:57:F3:3D:06:AE
Authority key identifier: 79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
Certificate issuer: /CN=79935964da17038e23d3a48909a13a25fb0e58eb
Certificate serial: 019D37C01815CF2DBA9C13C77FC97504C87E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 04:00:29 +0000
Manifest this update: Sun 29 Mar 2026 04:00:29 +0000
Manifest next update: Mon 30 Mar 2026 04:00:29 +0000
Files and hashes: 1: FnCe4GQUHfME91aEBmjNKoeoN3E.roa (hash: 2f0BNR92jRHqrOKp3b4PoOH7gnturQoCE8376hKSgYc=)
2: eZNZZNoXA44j06SJCaE6JfsOWOs.crl (hash: vpRF0kjf3A4KttzITWbwBAlFucXboDF2NTGVlkok02w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:18:15:cf:2d:ba:9c:13:c7:7f:c9:75:04:c8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79935964da17038e23d3a48909a13a25fb0e58eb
Validity
Not Before: Mar 29 04:00:29 2026 GMT
Not After : Mar 30 04:00:29 2026 GMT
Subject: CN=8985ad00c32896976f602f6a423b2357f33d06ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d7:98:38:ff:2c:9a:ca:7b:73:e6:7e:fb:30:
73:5a:30:2d:75:82:66:0d:8b:35:af:ad:f6:16:0f:
e6:aa:06:be:a5:2e:e2:2b:27:5d:41:7d:63:02:bf:
d3:04:00:e5:6d:28:3b:91:19:43:2b:5a:c3:c5:91:
ab:fb:98:3a:cd:b2:38:00:e6:0a:cf:5f:8a:57:c5:
20:c7:d2:42:ac:cc:41:91:5b:52:ac:55:9d:fd:c1:
6c:5a:78:96:93:44:11:95:07:b5:5f:40:8d:0d:ad:
70:5f:3c:1a:21:20:d8:95:37:30:c2:70:46:ea:64:
5b:e6:23:3c:ab:72:25:3f:94:8a:04:8b:c0:bf:41:
cc:20:52:bd:99:6a:49:c1:62:77:47:b3:cf:03:1b:
39:b6:b4:20:b2:54:6e:22:c1:c7:0c:fe:4a:11:63:
75:09:1d:e2:85:92:b1:af:b1:67:02:f6:75:47:7a:
2a:ff:0f:5f:1c:5a:53:4e:5b:49:8e:95:88:00:e4:
e9:a2:c4:88:99:38:21:cc:8b:be:ad:c8:02:06:0a:
a9:bf:07:e5:58:3e:e5:d9:b4:33:89:eb:56:0b:6a:
27:6e:be:54:3a:73:c2:2f:e7:14:c1:a6:2a:9e:9a:
55:98:da:04:0a:8c:62:2d:82:96:a1:9d:72:7a:3c:
2d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:85:AD:00:C3:28:96:97:6F:60:2F:6A:42:3B:23:57:F3:3D:06:AE
X509v3 Authority Key Identifier:
keyid:79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:db:53:18:e6:3e:25:2d:84:4c:be:ad:37:1a:0c:93:12:1e:
6d:37:17:b2:20:4c:39:5f:dc:b5:0f:17:51:12:e6:c4:26:ad:
21:a2:05:05:6f:4d:56:a9:5c:15:04:63:1b:38:12:87:94:25:
4e:14:56:79:29:d2:57:ab:2c:8c:35:e8:d3:88:4c:5e:a4:74:
88:52:c2:fc:bf:99:dd:a0:50:ae:23:10:c8:a0:e6:44:b1:b4:
e9:e1:65:8b:be:77:d0:17:29:9e:45:a1:37:06:be:71:76:be:
e9:a9:60:79:7f:36:91:a4:be:37:b9:8d:64:fe:92:40:a1:3a:
e2:27:d9:f0:82:b9:69:7b:f6:1d:57:d4:29:5c:7c:0a:6c:12:
7d:81:eb:0f:66:ad:1e:23:13:22:74:84:7c:5d:76:be:10:69:
a5:05:77:ab:dc:fd:7b:3c:a9:8e:03:35:5b:28:74:35:85:4c:
8b:8d:1b:1f:1e:cd:64:10:96:24:51:1a:b8:70:a0:cf:a7:40:
5b:61:26:5a:d7:e0:f3:9d:67:e0:e4:dd:af:9b:d0:08:e6:94:
33:ea:78:c0:0a:0e:47:10:a8:0a:b9:99:e0:64:d5:b3:c2:73:
ae:a3:b2:67:ee:e6:48:a7:2e:56:4b:1f:e8:47:15:ff:7d:37:
f2:36:51:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:08 2026 by rpki-client