Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
File: EeKnjdx_E58MIqKmNmK0gSrlEy4.mft (raw, json)
Hash identifier: 82MpTnnCMkHaIOR684wEQQt+aioTZ/aWnNb1nCF1nrE=
Subject key identifier: FE:68:47:5B:CD:B6:C1:F7:8C:95:F7:E0:B7:66:B2:AF:11:71:84:C0
Authority key identifier: 11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E
Certificate issuer: /CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
Certificate serial: 019D9962839DF39BDF6ED0810515847F90FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
Manifest number: 0FAC
Signing time: Fri 17 Apr 2026 03:01:03 +0000
Manifest this update: Fri 17 Apr 2026 03:01:03 +0000
Manifest next update: Sat 18 Apr 2026 03:01:03 +0000
Files and hashes: 1: EeKnjdx_E58MIqKmNmK0gSrlEy4.crl (hash: YQGNXLQQQ0Ddpdf1OYy/oW8DO0qLv1pJW02JIwtKcuo=)
2: POucus2LMmIxqaTenZUYFWd30rE.roa (hash: Fxl3jbCqABLrA9is5dq2ro7XsbiBSbOlCmya+1YduAg=)
3: pWXZtCsdY4YY3ukaTshaoyzjeSc.roa (hash: aOl1H4Qz0lJuDr1Yv2a145gjt3ffANHgu1PQv3jNCUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:83:9d:f3:9b:df:6e:d0:81:05:15:84:7f:90:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
Validity
Not Before: Apr 17 03:01:03 2026 GMT
Not After : Apr 18 03:01:03 2026 GMT
Subject: CN=fe68475bcdb6c1f78c95f7e0b766b2af117184c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ec:2e:1f:72:46:0c:60:0b:25:3d:ac:70:3e:
45:14:b8:29:fc:df:46:f7:e5:25:35:3f:76:c9:6e:
fb:3d:68:ad:dd:1b:1d:46:31:98:95:b1:b0:75:9d:
83:7b:fe:30:56:14:6f:5b:43:eb:d3:b0:14:ab:d1:
0d:2a:aa:4f:0f:34:5d:0b:0b:02:b4:3a:83:4e:ea:
e4:95:e8:9c:3a:5c:c4:8c:d7:95:29:f3:40:3b:f3:
e8:4a:4c:1b:bf:75:f3:64:08:c9:13:6a:52:56:38:
e8:dc:dc:34:f7:76:31:60:cf:03:b7:3d:53:81:ba:
8c:fb:cb:de:7b:7c:c2:23:72:df:21:79:ae:7c:7f:
d5:6d:48:e3:d7:4c:56:e6:d2:fe:a6:f2:96:cc:c6:
80:55:99:d1:ea:81:19:e5:ea:80:51:75:f0:09:3a:
2a:c7:44:2a:78:ef:db:56:a9:2b:e5:34:23:78:50:
9a:38:e5:fc:53:d8:ef:09:57:ba:d1:12:37:09:13:
21:78:fb:0c:43:cf:74:5e:62:48:5f:f5:74:8e:f0:
e5:40:74:bd:40:5e:99:b0:ad:4f:ab:d1:c2:df:5a:
08:94:d7:c1:64:aa:a4:b1:bb:88:ad:98:d1:31:5a:
b7:31:56:a6:19:e0:09:0a:8f:d3:1d:98:c7:52:f8:
ff:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:68:47:5B:CD:B6:C1:F7:8C:95:F7:E0:B7:66:B2:AF:11:71:84:C0
X509v3 Authority Key Identifier:
keyid:11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ad:a9:29:6d:64:ff:ac:43:14:3d:27:87:90:b5:81:9f:dc:
97:be:b7:4e:93:37:57:f8:b8:a8:92:68:59:dd:58:9a:a2:92:
41:1b:2a:eb:5f:f1:1b:f3:02:4d:c1:97:5a:11:6e:99:79:1c:
82:23:94:a6:be:38:08:5c:41:a7:e3:fd:74:1e:98:42:48:8b:
fb:6e:c9:fd:a6:be:14:da:1a:d9:ba:3c:20:7a:84:b8:20:e9:
7b:aa:a1:49:48:06:1c:eb:d9:9f:fc:c9:f9:ff:86:af:73:d3:
f1:8f:56:0e:99:f9:ad:53:64:f1:60:05:5d:75:0f:fa:ef:0d:
98:ae:75:e3:39:33:4d:7c:43:1e:53:f5:b1:82:69:69:6f:cd:
f2:71:d9:bb:cd:0c:ff:68:d2:67:69:c4:7a:5b:8b:b7:70:6f:
c9:7d:44:fd:18:de:9b:1e:88:d9:5f:fc:6a:a1:07:9d:83:c2:
11:1d:74:95:53:6b:9a:aa:1e:c0:6d:fe:a7:d6:33:50:39:72:
3b:9c:b4:8d:07:70:09:01:6a:26:09:7e:27:1e:61:07:9d:50:
0b:bf:f0:f2:d5:ad:25:16:7c:a9:f6:f9:d9:41:58:47:a9:66:
d4:e4:f1:b9:9b:3f:fc:2c:59:45:6e:42:ef:86:72:d4:b9:09:
27:e9:29:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:25:07 2026 by rpki-client