Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
File: ee4R2MQpe-xUvTBUMMpHct-shHo.mft (raw, json)
Hash identifier: qO/223ss+MnZJEX87N6lTXQS/gDvfHrYmPgLhCF3CH4=
Subject key identifier: CF:70:D2:4E:AC:86:30:A6:E4:F1:A6:35:C2:4C:53:94:77:04:35:62
Authority key identifier: 79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A
Certificate issuer: /CN=79ee11d8c4297bec54bd305430ca4772dfac847a
Certificate serial: 019CE5C8528CA6EC02D7511B7E7677BF39C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
Manifest number: 0C72
Signing time: Fri 13 Mar 2026 06:00:36 +0000
Manifest this update: Fri 13 Mar 2026 06:00:36 +0000
Manifest next update: Sat 14 Mar 2026 06:00:36 +0000
Files and hashes: 1: ee4R2MQpe-xUvTBUMMpHct-shHo.crl (hash: DgKnjl+p0g26Eh45gGrtfpXIlYo+tDp39n62C3hWT+8=)
2: nkXiZoMMW3zafsjty-VJgGg0Xzc.roa (hash: F3sEH4KSkZNHFk1f1SP7LzRoEDV0ahVUx0fynXewv18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:52:8c:a6:ec:02:d7:51:1b:7e:76:77:bf:39:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ee11d8c4297bec54bd305430ca4772dfac847a
Validity
Not Before: Mar 13 06:00:36 2026 GMT
Not After : Mar 14 06:00:36 2026 GMT
Subject: CN=cf70d24eac8630a6e4f1a635c24c539477043562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:90:35:eb:e2:51:b1:dd:88:08:89:59:de:
7b:04:4d:62:68:16:1c:39:35:a2:f1:c4:e6:1a:81:
2c:2a:5d:b9:70:d2:c4:fe:c7:70:c3:3a:8c:40:99:
63:d9:5a:88:84:38:7a:5c:0d:af:da:d3:ca:37:3c:
d7:cd:ea:a8:bf:08:d8:64:08:08:99:5b:01:dd:97:
fb:28:36:3f:64:20:f1:30:58:d3:42:fd:79:ec:44:
56:97:5b:06:e8:90:88:ca:58:c0:23:7b:d5:57:40:
c7:d4:a4:64:05:d5:55:6a:68:93:5e:e4:75:a8:d4:
ee:26:26:b4:34:45:fb:18:74:7e:f7:de:5d:2c:d9:
d6:64:d2:c1:75:73:4d:ef:5e:fe:e7:70:5a:17:0a:
49:88:b2:e1:25:00:96:af:eb:3a:30:bf:a9:da:c7:
5b:37:b4:c2:a8:bc:d8:c0:5f:b8:cd:df:d9:e3:bb:
3f:9d:1e:6e:93:10:41:f1:ad:5b:17:f9:7d:d7:fe:
6b:a0:40:f6:df:ec:6c:ed:ec:91:f6:e7:9f:13:bc:
80:fb:d6:80:4e:3f:cb:fb:5d:b5:c9:5e:3a:7e:de:
c4:c5:0e:37:59:77:95:9d:ac:15:3c:18:61:44:ae:
57:79:1b:0a:a1:71:d5:ee:89:4c:7d:23:52:2a:58:
2e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:70:D2:4E:AC:86:30:A6:E4:F1:A6:35:C2:4C:53:94:77:04:35:62
X509v3 Authority Key Identifier:
keyid:79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:8e:d8:ba:1f:06:6a:a6:82:27:13:ee:ef:d0:6d:d0:93:9a:
93:c4:cb:aa:d6:48:5f:96:48:5b:0a:58:78:ec:55:3a:cf:22:
6a:bd:02:99:27:3b:fe:8a:db:33:62:33:3a:03:73:21:cb:6e:
c2:10:7c:a5:ed:8d:a4:c8:7d:4a:1f:61:ad:28:c7:d2:fc:8a:
d2:ba:0c:33:f3:34:4e:2b:db:9e:a3:ba:ac:3a:89:b3:0e:db:
cc:34:ed:da:70:0f:5b:17:90:90:8a:c8:5c:50:9d:1d:dd:1c:
47:01:9b:a1:c3:0f:ff:8b:fd:00:60:c8:5a:b0:fc:fa:76:c2:
5b:14:11:9e:1e:45:da:a1:61:56:45:b0:ef:0f:6f:5c:8a:58:
7f:5f:4c:88:f7:30:a9:c7:4d:2c:be:2b:fa:d3:44:9e:a9:70:
e1:53:21:f9:ea:9e:0a:c7:5f:25:20:1e:11:de:21:2c:9e:47:
03:16:1a:d2:fa:6d:66:8a:9a:98:37:49:01:f7:a2:31:af:c2:
b7:28:6c:74:ee:0d:30:cc:ba:82:6d:52:a3:e9:76:0b:b9:9a:
9a:bf:12:12:33:da:c8:83:e4:d4:20:07:fa:d9:4b:c2:fa:01:
a2:76:c0:6a:64:44:fc:ac:b6:09:7d:36:0c:ba:08:3e:02:1a:
30:da:1c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:38:52 2026 by rpki-client