Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft
File: EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft (raw, json)
Hash identifier: v3T/swPGP2uWub617Ah9BsHRhL1/yw3B0nHQhwlKVi0=
Subject key identifier: 58:2A:68:A7:17:CA:01:D7:4C:49:F3:E5:B1:57:AF:EB:91:FD:73:97
Authority key identifier: 12:2A:54:1C:AF:13:83:41:BD:32:79:89:40:DE:20:60:52:91:03:41
Certificate issuer: /CN=122a541caf138341bd32798940de206052910341
Certificate serial: 019D382DCED174A434E0E5D6D3815E6EC9BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft
Manifest number: 0F11
Signing time: Sun 29 Mar 2026 06:00:19 +0000
Manifest this update: Sun 29 Mar 2026 06:00:19 +0000
Manifest next update: Mon 30 Mar 2026 06:00:19 +0000
Files and hashes: 1: EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl (hash: hPyKsUjXUMwgB7swjpEg6+zamJ6OBQ3hgGYzaZPf82A=)
2: XssTGMPxxOCZ2WxNfY8_hLsfUHo.roa (hash: bz8eC8kW/3X8iLzaEmg9hdIfrTofSiP4NWhs554tpoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:ce:d1:74:a4:34:e0:e5:d6:d3:81:5e:6e:c9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a541caf138341bd32798940de206052910341
Validity
Not Before: Mar 29 06:00:19 2026 GMT
Not After : Mar 30 06:00:19 2026 GMT
Subject: CN=582a68a717ca01d74c49f3e5b157afeb91fd7397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:90:a7:fc:73:77:b7:1b:c0:08:e7:65:0e:a0:
cd:7f:f8:ca:e7:fb:80:72:6c:89:37:21:5a:e2:7b:
39:b4:c1:f0:d5:b0:fb:b0:ea:d2:7a:59:6a:eb:03:
68:b2:b8:a9:4e:7e:99:ea:eb:5c:d7:d4:22:c7:49:
bf:33:47:a5:0e:98:f2:06:d5:b1:ab:d8:7b:c3:0f:
73:d7:a2:c2:17:38:45:95:77:67:15:3e:9b:03:e7:
f1:d5:4f:94:cc:a3:f6:fa:7e:61:5d:15:ab:f0:bf:
b5:56:6b:ba:d8:2d:6c:12:d0:cd:c9:9f:08:88:8a:
24:79:0d:7e:76:91:23:e9:7a:54:19:21:22:25:4a:
ba:1c:76:2d:bf:e3:f5:6e:ca:a3:09:37:d9:ef:f5:
3f:40:d8:7e:3b:a6:68:0f:a7:37:54:8b:d2:30:f0:
c9:f0:5b:b8:bb:6b:23:2e:da:a9:b2:00:35:2b:ce:
63:cb:a0:b2:60:92:93:7a:94:59:cd:0e:c5:c9:58:
f9:60:76:9c:1d:2d:0e:77:ab:9c:c8:55:4a:6b:e6:
00:86:10:aa:a1:46:f6:c7:53:dd:a9:64:35:b5:83:
ae:ed:79:78:8a:15:21:25:bb:12:db:1a:8b:38:c6:
3d:f0:31:44:4e:48:3d:6a:18:d8:2a:38:48:cc:13:
ac:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2A:68:A7:17:CA:01:D7:4C:49:F3:E5:B1:57:AF:EB:91:FD:73:97
X509v3 Authority Key Identifier:
keyid:12:2A:54:1C:AF:13:83:41:BD:32:79:89:40:DE:20:60:52:91:03:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:af:73:17:9c:2d:da:96:d4:c1:39:89:13:35:49:60:3b:e5:
54:87:b5:09:33:9c:7c:5e:1e:65:f8:21:6d:48:c9:3a:6a:07:
e5:0b:dc:cc:93:5e:94:c5:c0:f9:5b:66:4e:d5:2a:07:aa:97:
5c:99:90:a3:2d:67:ba:4c:ab:ef:8a:01:5f:cd:41:3c:c1:a7:
76:1b:b2:01:9a:c5:fb:c0:c0:56:1d:c6:80:30:92:d6:e8:3e:
56:13:c9:08:2f:40:bc:b9:36:93:f4:52:6a:6e:d1:60:6a:68:
3b:99:6b:83:09:a0:78:9d:80:38:5b:20:bc:b1:26:51:f8:2c:
ba:ea:d8:d5:28:d3:dc:0c:f2:54:4a:99:df:09:12:91:36:b2:
56:63:8e:e7:53:d2:dc:bb:3a:82:46:70:91:c5:bf:47:6c:a9:
33:95:e0:77:ab:60:cf:18:9b:e4:df:a5:d0:dd:44:fb:5b:95:
f8:95:c5:e2:5b:da:a4:32:8b:2e:b1:fb:47:82:18:39:9d:dc:
e5:de:1a:64:32:4a:85:3d:92:4e:71:c3:7a:04:06:2f:a3:8e:
cc:30:95:d6:c2:35:b4:de:1f:03:6a:54:c6:9b:13:90:e6:7f:
6b:bd:7b:c3:87:40:22:f7:31:97:d4:33:ed:43:b0:01:f8:e2:
e6:26:90:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lc7RdKQ04OXW04Febsm7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMmE1NDFjYWYxMzgzNDFiZDMyNzk4OTQwZGUyMDYwNTI5
MTAzNDEwHhcNMjYwMzI5MDYwMDE5WhcNMjYwMzMwMDYwMDE5WjAzMTEwLwYDVQQD
Eyg1ODJhNjhhNzE3Y2EwMWQ3NGM0OWYzZTViMTU3YWZlYjkxZmQ3Mzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypCn/HN3txvACOdlDqDNf/jK5/uA
cmyJNyFa4ns5tMHw1bD7sOrSellq6wNosripTn6Z6utc19Qix0m/M0elDpjyBtWx
q9h7ww9z16LCFzhFlXdnFT6bA+fx1U+UzKP2+n5hXRWr8L+1Vmu62C1sEtDNyZ8I
iIokeQ1+dpEj6XpUGSEiJUq6HHYtv+P1bsqjCTfZ7/U/QNh+O6ZoD6c3VIvSMPDJ
8Fu4u2sjLtqpsgA1K85jy6CyYJKTepRZzQ7FyVj5YHacHS0Od6ucyFVKa+YAhhCq
oUb2x1PdqWQ1tYOu7Xl4ihUhJbsS2xqLOMY98DFETkg9ahjYKjhIzBOsRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgqaKcXygHXTEnz5bFXr+uR/XOXMB8GA1UdIwQY
MBaAFBIqVByvE4NBvTJ5iUDeIGBSkQNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlwVUhLOFRnMEc5TW5tSlFONGdZRktSQTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8yNTI3MTgtODAyNS00M2MzLWI4NzEt
N2ZkOWFkZjA4MDMwLzEvRWlwVUhLOFRnMEc5TW5tSlFONGdZRktSQTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8yNTI3MTgtODAyNS00M2MzLWI4NzEtN2ZkOWFkZjA4MDMw
LzEvRWlwVUhLOFRnMEc5TW5tSlFONGdZRktSQTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHq9zF5wt
2pbUwTmJEzVJYDvlVIe1CTOcfF4eZfghbUjJOmoH5QvczJNelMXA+VtmTtUqB6qX
XJmQoy1nukyr74oBX81BPMGndhuyAZrF+8DAVh3GgDCS1ug+VhPJCC9AvLk2k/RS
am7RYGpoO5lrgwmgeJ2AOFsgvLEmUfgsuurY1SjT3AzyVEqZ3wkSkTayVmOO51PS
3Ls6gkZwkcW/R2ypM5Xgd6tgzxib5N+l0N1E+1uV+JXF4lvapDKLLrH7R4IYOZ3c
5d4aZDJKhT2STnHDegQGL6OOzDCV1sI1tN4fA2pUxpsTkOZ/a717w4dAIvcxl9Qz
7UOwAfji5iaQUw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:44 2026 by rpki-client