Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/80e0c2-bab4-4713-8eb1-e651397ce855/1/EEpFXrMfY-OQ4hqnf8wq8qw0NXc.mft
File: EEpFXrMfY-OQ4hqnf8wq8qw0NXc.mft (raw, json)
Hash identifier: ZgnWwqu2KnmIuGlquCRW/OrgKz/aaEeWGaR8woqscXc=
Subject key identifier: 65:0C:C1:77:74:0E:F0:75:45:79:A6:A0:0C:45:4C:32:09:D1:5D:56
Authority key identifier: 10:4A:45:5E:B3:1F:63:E3:90:E2:1A:A7:7F:CC:2A:F2:AC:34:35:77
Certificate issuer: /CN=104a455eb31f63e390e21aa77fcc2af2ac343577
Certificate serial: 019CAEDA18616FECD5A75E396A6453B5212F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEpFXrMfY-OQ4hqnf8wq8qw0NXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/80e0c2-bab4-4713-8eb1-e651397ce855/1/EEpFXrMfY-OQ4hqnf8wq8qw0NXc.mft
Manifest number: C8
Signing time: Mon 02 Mar 2026 14:00:54 +0000
Manifest this update: Mon 02 Mar 2026 14:00:54 +0000
Manifest next update: Tue 03 Mar 2026 14:00:54 +0000
Files and hashes: 1: EEpFXrMfY-OQ4hqnf8wq8qw0NXc.crl (hash: MIuOnHjFE++lpBtAMx1JFsqKmoC9sSj+ApXg4qYZh8M=)
2: w31idblgiUNKUk_LIT-LzFwAO0k.roa (hash: Vze4y124S1wqVoT3H487SgKmVoNpkquz3RZVumGNXCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/80e0c2-bab4-4713-8eb1-e651397ce855/1/EEpFXrMfY-OQ4hqnf8wq8qw0NXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/80e0c2-bab4-4713-8eb1-e651397ce855/1/EEpFXrMfY-OQ4hqnf8wq8qw0NXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EEpFXrMfY-OQ4hqnf8wq8qw0NXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:18:61:6f:ec:d5:a7:5e:39:6a:64:53:b5:21:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=104a455eb31f63e390e21aa77fcc2af2ac343577
Validity
Not Before: Mar 2 14:00:54 2026 GMT
Not After : Mar 3 14:00:54 2026 GMT
Subject: CN=650cc177740ef0754579a6a00c454c3209d15d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c2:c3:fe:d6:f8:bb:9b:3b:7e:01:9e:50:d4:
49:8d:4a:43:e1:1e:80:62:60:55:c4:46:62:d9:00:
bd:6b:74:3e:f6:41:db:a3:da:41:ab:c0:4b:e8:68:
1e:a9:af:3d:f3:c2:18:c6:4d:01:df:91:a7:ee:f7:
5a:a3:54:5c:ad:43:5f:c5:7f:56:72:81:ff:f6:b3:
0c:b8:c1:0d:e6:7b:d6:cf:e9:82:c5:9e:68:54:ad:
7e:d9:bb:f2:d2:61:e3:b0:5b:a5:b5:5e:ae:cf:7f:
c1:73:0a:b3:e0:98:3f:bd:65:e3:67:f8:d6:1d:e9:
9d:27:85:78:ed:a5:45:f7:11:87:3f:70:fd:a3:d8:
88:9f:46:c2:dd:b5:2a:34:9b:87:30:00:79:fd:eb:
72:7f:d9:bd:7a:8b:84:ad:09:43:33:22:2d:e9:95:
1b:f8:48:f3:f5:11:62:1e:0a:42:fa:ac:7c:65:a9:
cb:d0:6c:86:84:1d:93:0d:0d:20:cb:0f:c8:60:c3:
3c:92:25:b4:23:70:09:f3:bc:70:e6:1e:e3:97:6e:
80:ae:61:7a:7b:91:0c:08:4c:21:49:68:08:b3:19:
03:4b:46:43:34:b7:67:5c:1b:8a:e0:b9:22:7d:20:
3c:c4:29:cc:95:80:f6:02:f2:9d:8b:f9:ff:a6:57:
cd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0C:C1:77:74:0E:F0:75:45:79:A6:A0:0C:45:4C:32:09:D1:5D:56
X509v3 Authority Key Identifier:
keyid:10:4A:45:5E:B3:1F:63:E3:90:E2:1A:A7:7F:CC:2A:F2:AC:34:35:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEpFXrMfY-OQ4hqnf8wq8qw0NXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/80e0c2-bab4-4713-8eb1-e651397ce855/1/EEpFXrMfY-OQ4hqnf8wq8qw0NXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/80e0c2-bab4-4713-8eb1-e651397ce855/1/EEpFXrMfY-OQ4hqnf8wq8qw0NXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:cd:29:c2:23:d3:bf:63:1f:19:f8:15:8c:f7:7f:c5:e1:77:
36:86:e5:6a:3e:52:79:ad:6c:f8:23:98:1a:23:63:4a:fa:97:
d6:0d:26:e7:8c:55:ad:cf:94:00:46:fe:98:65:3b:15:eb:0a:
f5:17:59:c0:9d:a4:51:41:d8:25:bf:4b:e7:c8:30:73:94:22:
b7:74:90:1d:00:d3:37:08:a4:0b:82:cd:3d:67:12:91:a2:57:
43:d1:b7:8b:20:f0:6b:80:b5:a5:80:8d:61:58:20:da:fc:6d:
ba:e6:83:4b:bf:9e:0f:c3:1f:39:87:61:b3:64:92:41:a8:72:
e5:59:15:d4:4a:e2:18:da:4e:b6:92:75:97:8a:a0:0a:87:f6:
8b:ec:2c:16:ef:70:7e:79:c3:64:66:37:5b:73:b2:3e:73:58:
2e:60:95:98:8c:cb:93:97:4f:54:e7:09:cc:ad:83:15:d1:f8:
d0:37:47:f5:ba:5c:0f:14:5e:9b:7a:fe:85:d3:0e:3e:5a:a6:
2d:6a:ce:74:79:04:a4:2b:c6:70:82:6f:17:5f:04:76:d4:81:
22:f7:64:b9:d5:0e:69:e3:2c:ab:b7:8a:21:99:37:40:5e:9a:
07:9e:7b:08:d9:1f:66:69:ca:20:9e:c7:5a:e2:03:5b:d4:f6:
aa:d1:79:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:27:10 2026 by rpki-client