Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
File: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft (raw, json)
Hash identifier: F6dGdW40BzkSau8+t2pppmtrLl0rRc226pm44RcNqSg=
Subject key identifier: A8:27:5C:7C:EB:BC:01:D9:5A:79:57:E6:EA:92:CE:90:59:3A:F1:B9
Authority key identifier: 11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
Certificate issuer: /CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Certificate serial: 019D371B9DB895AA5963991240FD12758D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
Manifest number: 173D
Signing time: Sun 29 Mar 2026 01:00:49 +0000
Manifest this update: Sun 29 Mar 2026 01:00:49 +0000
Manifest next update: Mon 30 Mar 2026 01:00:49 +0000
Files and hashes: 1: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl (hash: COTp5VV/ebNNyMcIHEbF4SdVOIuoA3Bltm5DniLv/CE=)
2: XHX6uA0vFND00gt2A2M8M6c_H2E.roa (hash: 0mS0wIrGW0SE8AZb8eImudM9dWAJb+YE0EwH1fJXNI4=)
3: Zn4NXMzR7VLtqK7XqBh-tq7jgUI.roa (hash: 3izC3/OYAiljeSsZynRDCUD3K7xrbO6bhr3QoS3ybSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:9d:b8:95:aa:59:63:99:12:40:fd:12:75:8d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Validity
Not Before: Mar 29 01:00:49 2026 GMT
Not After : Mar 30 01:00:49 2026 GMT
Subject: CN=a8275c7cebbc01d95a7957e6ea92ce90593af1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:8d:4e:8a:0e:4a:95:98:b5:f0:07:e9:b4:
33:18:bd:86:1c:58:57:a0:ae:21:09:f9:27:89:4e:
95:91:05:06:b4:d6:67:23:3e:37:39:ad:33:13:7d:
79:a3:a1:5c:5b:75:c1:c5:a0:5d:7c:b5:dd:11:5a:
fb:1c:b5:df:b2:4e:54:62:16:76:14:da:56:f4:f0:
20:34:bf:99:2c:37:15:6d:f6:9b:94:76:e9:1a:91:
be:e2:9a:6b:ed:8c:14:4a:87:90:3b:65:64:4e:74:
fb:22:5b:65:d9:a8:08:0b:09:d8:ab:e6:f8:5e:19:
ec:23:89:d0:6c:55:d3:cd:e0:23:4e:f0:9b:5c:8d:
f3:de:2a:cf:12:f5:f0:e1:48:8e:03:d0:35:ec:eb:
37:66:0d:6a:f9:09:ed:8a:cc:6c:06:cc:17:19:0c:
28:7f:d1:51:ad:0e:d7:55:78:e1:7e:e8:6c:69:4a:
29:cd:22:3c:51:dd:a3:1a:d3:e7:ce:7a:1c:75:23:
68:d6:1b:ef:d2:1a:1d:85:8e:a9:04:b9:60:7e:67:
38:42:9a:3f:dc:4b:fb:79:11:43:d1:84:d3:62:4f:
53:ef:22:e9:d6:e8:82:1e:1b:0e:1e:4c:dd:dd:e2:
2b:92:c0:81:78:43:01:19:11:44:16:e0:d7:42:0b:
22:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:27:5C:7C:EB:BC:01:D9:5A:79:57:E6:EA:92:CE:90:59:3A:F1:B9
X509v3 Authority Key Identifier:
keyid:11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b1:2b:62:ae:4c:c0:d8:7e:93:f9:e0:96:67:6a:bf:76:d7:
6e:c0:2f:b6:a6:1c:ad:66:a0:d0:54:75:f8:6a:fc:a3:91:e1:
dc:25:2c:e3:d7:9b:c1:ca:5b:7a:6d:64:8e:49:9c:eb:c4:df:
24:c9:63:a7:16:a7:9f:9f:ea:00:e3:24:e2:b5:42:e2:01:a7:
45:f7:79:65:1e:c1:95:98:61:39:33:65:fb:7d:96:fd:8f:b1:
0d:2d:ef:51:8a:a1:b7:2f:be:cb:e8:af:f9:23:9d:fd:41:c6:
58:68:68:73:a8:e9:bb:a4:36:8d:9c:47:49:ff:88:77:a7:7c:
1a:d6:f8:1b:d3:e9:ae:cf:48:25:6c:e8:3f:16:a6:bf:b5:bd:
0f:76:0d:dd:e2:af:89:2e:2e:23:9c:70:ed:fb:b0:bc:41:7e:
cd:3f:a9:6a:4f:3c:52:87:e7:41:fd:74:4d:c3:e2:69:8d:0b:
2e:bf:0f:bd:13:a0:f4:36:93:f9:8a:1e:8b:5b:f1:ca:90:9c:
74:da:8d:73:44:7a:26:58:73:23:8c:4e:61:c5:e5:ac:d6:97:
99:a8:fd:0f:1f:da:0a:35:ba:17:b2:3d:24:5a:9f:91:7e:73:
ee:1f:f8:c1:e9:a0:ea:ba:cc:9a:b5:62:d9:31:9d:a8:63:e2:
1e:42:13:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 03:34:45 2026 by rpki-client