Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
File: eQ7eZiID9FnpsZbSM4esKeSnxOU.mft (raw, json)
Hash identifier: CM3dahf9CMqXEvRJ0s7DE+VK/WFCjB19iZoWxgDsn0M=
Subject key identifier: 50:7E:20:B8:1A:D5:05:93:52:BF:D6:5D:FC:51:73:D8:18:54:80:14
Authority key identifier: 79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5
Certificate issuer: /CN=790ede662203f459e9b196d23387ac29e4a7c4e5
Certificate serial: 019D389BD956ACFD61A9B92218AE7DBC5AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
Manifest number: 055E
Signing time: Sun 29 Mar 2026 08:00:30 +0000
Manifest this update: Sun 29 Mar 2026 08:00:30 +0000
Manifest next update: Mon 30 Mar 2026 08:00:30 +0000
Files and hashes: 1: eQ7eZiID9FnpsZbSM4esKeSnxOU.crl (hash: LMa8OTi8RmyRroQTY2UFqKtadqiX+B1fpb4n3nOnpMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d9:56:ac:fd:61:a9:b9:22:18:ae:7d:bc:5a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790ede662203f459e9b196d23387ac29e4a7c4e5
Validity
Not Before: Mar 29 08:00:30 2026 GMT
Not After : Mar 30 08:00:30 2026 GMT
Subject: CN=507e20b81ad5059352bfd65dfc5173d818548014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:15:32:08:34:90:56:88:54:f7:f3:9e:4e:9c:
3c:50:da:ca:c3:39:38:be:01:3d:ab:b1:ed:2f:52:
41:6f:a9:c0:fd:14:72:9e:87:66:7c:2e:24:4b:53:
71:37:82:54:fc:7e:8b:90:99:cc:5c:6c:c7:37:40:
4e:fb:c2:70:07:83:89:d1:22:8d:05:9c:24:d6:ac:
98:8c:e9:42:e8:f2:4a:23:7c:9e:85:a6:98:49:63:
65:60:85:2a:6b:d0:c7:1b:03:cf:51:15:22:ca:78:
92:a8:06:b2:b0:e0:45:7a:1f:56:cf:7b:63:4b:ed:
54:dd:99:f0:4f:bd:27:8d:d2:6f:e9:b7:0d:3b:8a:
c4:25:7c:7d:9c:ca:14:a6:79:76:21:3c:c2:04:0b:
9d:9d:81:d0:16:b5:68:9f:81:77:77:69:27:ad:59:
2b:89:15:d7:22:3c:a4:0e:d7:49:05:79:d0:3e:c5:
b8:96:63:27:c7:9d:b2:4c:25:d3:ba:dc:b4:72:51:
f7:4f:73:9a:6f:c6:1f:a5:c5:01:63:0e:e2:0f:12:
de:40:6f:66:d3:d2:9a:b2:1e:50:36:fb:c9:bb:bf:
3d:4c:69:fe:48:ea:f6:fe:a0:bf:1d:dc:d1:ce:a5:
fc:e8:57:17:9e:4f:f6:24:c6:6a:18:f9:62:bd:07:
cb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7E:20:B8:1A:D5:05:93:52:BF:D6:5D:FC:51:73:D8:18:54:80:14
X509v3 Authority Key Identifier:
keyid:79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:2b:3b:aa:1a:dc:94:fd:b4:59:91:ca:be:34:65:62:f3:80:
c5:02:25:fa:c3:ef:b2:c8:7f:ee:0e:54:fb:c7:3b:50:e8:47:
61:d1:00:ba:ee:b2:53:aa:1c:ee:d1:99:42:29:3f:72:bb:26:
4f:8a:8b:e6:d7:79:0e:eb:61:d0:61:2f:7a:cf:28:3e:53:7b:
69:ab:40:11:b9:ac:56:4d:20:7c:22:5a:55:a5:db:0a:48:94:
56:7b:55:02:bc:3d:ac:8a:da:2a:25:d1:76:75:84:72:72:fc:
30:c9:50:70:b3:04:59:17:ca:8a:f7:7f:f0:0e:56:33:6d:d9:
f5:dc:9a:e0:cd:d5:64:5c:c2:4d:38:b2:ac:05:58:54:fb:2b:
ab:c4:a4:1e:1a:20:94:5c:91:3b:0b:13:f9:42:66:fc:9f:c4:
6e:1f:ff:94:0e:cf:74:5c:46:10:bd:1d:10:af:69:98:47:84:
96:57:e3:a8:53:4a:76:c2:b6:fa:ba:f6:1a:d2:b5:10:fb:b6:
3b:7b:9f:60:25:39:03:18:3a:2c:5e:38:59:7e:ee:ae:58:31:
03:ad:37:72:f8:25:10:91:c2:49:f9:dc:8e:4a:7a:82:6f:de:
64:cc:43:27:9d:3a:d5:f9:ef:5a:14:3a:1b:31:c4:b3:56:db:
70:77:d4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:10 2026 by rpki-client