Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
File: EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft (raw, json)
Hash identifier: bND0DwoCy9bxh1FHZ0lrnEuNUb2Mr092dVKp0pIWL0g=
Subject key identifier: 6A:ED:6A:60:63:6F:E6:C1:EE:F2:59:07:8F:B9:76:C6:8C:97:7B:60
Authority key identifier: 12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
Certificate issuer: /CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Certificate serial: 019D389BDF989B9D761A3C819220CE8B539E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
Manifest number: 0A8A
Signing time: Sun 29 Mar 2026 08:00:32 +0000
Manifest this update: Sun 29 Mar 2026 08:00:32 +0000
Manifest next update: Mon 30 Mar 2026 08:00:32 +0000
Files and hashes: 1: EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl (hash: IbaOHg6mTSwYTetxJti43HK7tUrZEOLTrm+DNxBck0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:df:98:9b:9d:76:1a:3c:81:92:20:ce:8b:53:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Validity
Not Before: Mar 29 08:00:32 2026 GMT
Not After : Mar 30 08:00:32 2026 GMT
Subject: CN=6aed6a60636fe6c1eef259078fb976c68c977b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:cd:54:6e:12:89:58:e7:b3:b3:b0:78:3a:
c2:3e:85:cc:01:a8:db:d2:9a:ae:36:81:88:bf:82:
73:a4:d1:d9:75:92:c4:e8:29:d0:1a:9f:b8:d5:46:
a5:4b:3e:d1:76:32:e8:89:93:eb:71:62:e7:37:b7:
4a:2b:ad:cd:b9:1c:c1:66:6f:f4:c1:39:2e:26:ee:
8a:69:06:dd:56:bc:eb:2d:af:6f:e3:fc:a1:dc:97:
e1:a6:3d:b3:42:a4:c0:e6:dc:9a:57:75:f4:7c:c7:
4a:3a:c2:09:ac:4c:c9:56:34:09:60:ab:d4:f3:7a:
9f:36:36:1b:ee:db:b1:ce:92:e5:d0:57:d1:dd:ff:
1c:2a:85:93:95:11:5c:c6:20:5d:30:15:f3:09:69:
d4:77:c4:00:51:e0:75:16:da:6c:fb:93:9c:77:02:
8c:89:db:ec:6b:6d:34:04:c5:76:77:d4:41:4c:27:
15:5b:1f:c7:32:1d:2e:73:f8:2b:39:d8:36:68:6d:
a7:0d:0c:3c:9a:77:61:0b:e5:c4:9c:df:3e:f0:af:
af:af:c5:76:1e:e5:3f:b1:25:74:c9:0c:df:d0:fd:
f1:2c:f6:10:d0:86:b4:46:39:92:17:0a:9b:97:7f:
b3:f7:0d:a4:5a:db:23:9d:3a:03:ce:94:43:50:e0:
ab:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:ED:6A:60:63:6F:E6:C1:EE:F2:59:07:8F:B9:76:C6:8C:97:7B:60
X509v3 Authority Key Identifier:
keyid:12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ed:69:24:6e:28:b2:2c:7d:60:4c:5d:5b:50:8f:f7:51:98:
c6:e5:c5:16:a5:04:93:5b:44:84:0f:6a:6e:e1:ac:e6:9c:3d:
18:ba:a4:e6:f9:33:88:5b:07:84:f2:74:5b:e0:63:b2:dc:f5:
6c:cd:fb:fc:68:cf:79:6b:67:3b:bb:7c:3b:fa:01:90:01:9e:
f0:ab:51:f7:9b:ec:bd:97:e9:f2:a2:f9:28:de:4f:a8:20:4c:
0f:9e:56:cb:d3:94:26:66:53:36:15:e2:72:24:64:b8:e0:96:
b8:a2:53:0f:27:8b:ed:10:f5:1c:4f:83:46:f2:09:b0:fe:8f:
fb:75:ab:f9:e9:2e:28:3d:9a:71:55:79:da:70:9d:ab:36:c1:
a0:1e:0f:f6:9e:1d:d8:06:ec:98:95:b4:21:05:15:25:4f:6d:
96:9b:72:b3:c3:aa:43:c8:39:ee:5f:5a:1f:6e:d4:71:71:26:
57:d7:fb:6e:e5:7a:4e:a3:cc:87:09:0e:35:b7:93:86:8b:9d:
97:b0:4e:93:5d:85:0e:23:92:8f:b0:ff:11:71:83:a8:3c:96:
bb:15:e4:73:f1:a5:2c:1f:15:40:2f:cf:a8:ce:8d:48:a9:f9:
a9:ba:90:14:4c:ac:95:72:64:2b:b7:ba:29:06:ee:14:6d:ca:
55:e6:a8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:28 2026 by rpki-client