Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
File: EQhLfTeLmTxfXnSfajRN4j5FrQA.mft (raw, json)
Hash identifier: JdLiCFf446bO5bOIGupsub59KEVd5yafqAnaLHPXtUw=
Subject key identifier: 49:FA:C1:1F:59:40:19:BF:7A:54:38:48:0B:95:48:D8:2B:97:45:60
Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
Certificate issuer: /CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Certificate serial: 019CAA582F867BA0F9AA155F6498DD706FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
Manifest number: 0F24
Signing time: Sun 01 Mar 2026 17:00:31 +0000
Manifest this update: Sun 01 Mar 2026 17:00:31 +0000
Manifest next update: Mon 02 Mar 2026 17:00:31 +0000
Files and hashes: 1: 0QygA5EjmnNvfod7LRYIvHW6VOU.roa (hash: 9mJbNM5RFQ2gh5+u4PI5yU3lzfK+jzemRH8Ny/3lnYI=)
2: EQhLfTeLmTxfXnSfajRN4j5FrQA.crl (hash: 6d+4+Eyx5qYM5/0M2WKlPHTHHMRixdNYqMjiE5EcM4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:2f:86:7b:a0:f9:aa:15:5f:64:98:dd:70:6f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Validity
Not Before: Mar 1 17:00:31 2026 GMT
Not After : Mar 2 17:00:31 2026 GMT
Subject: CN=49fac11f594019bf7a5438480b9548d82b974560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:72:4c:5e:0f:24:9a:f4:ec:b1:3b:12:5d:2a:
90:eb:c8:53:6a:8f:cd:de:b5:ba:ea:f7:77:68:73:
9c:64:b4:82:33:ae:85:aa:b2:98:ff:9c:78:90:1b:
17:85:51:5b:23:74:ac:26:56:db:32:aa:6f:49:93:
2c:65:b4:8a:23:22:c6:b3:98:ef:c2:bc:b3:7f:18:
6c:3d:b7:91:b3:ca:c4:64:84:58:41:6a:d7:60:84:
1b:3b:00:20:68:25:e2:a1:8d:4f:e0:64:7b:ae:69:
d7:dd:2c:a6:95:83:fa:81:d1:1e:25:44:47:1c:ac:
ac:0f:57:f8:e4:ef:0c:85:eb:d0:9d:c6:f6:e5:e3:
dd:f5:e5:07:4c:3f:d3:fe:98:11:8c:d4:aa:93:6e:
1e:3c:d2:70:0e:09:37:7c:cc:60:30:47:0e:c2:6a:
45:e0:91:f4:35:19:e4:6b:93:cc:84:f9:16:14:20:
e1:65:cf:9a:83:25:1a:b4:52:ab:c6:22:40:f7:ef:
78:4d:29:77:08:be:60:33:60:fe:34:48:71:6c:10:
d0:fe:22:7c:8d:12:08:d1:ad:6e:76:07:71:88:7b:
91:76:77:61:f8:f3:37:63:3a:a7:d2:68:37:51:bf:
2b:4a:38:e8:04:11:db:c0:b4:69:ea:db:5a:b9:7a:
e7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FA:C1:1F:59:40:19:BF:7A:54:38:48:0B:95:48:D8:2B:97:45:60
X509v3 Authority Key Identifier:
keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:66:49:df:94:ca:cc:bb:7b:06:b5:08:32:0d:43:81:de:95:
31:7d:33:48:4a:aa:d2:f0:d2:bf:2b:cf:dc:c9:fb:cc:0b:d7:
ca:14:bc:fc:ba:b6:87:48:da:9e:6e:2c:5c:b7:f7:0d:65:d9:
1c:c7:01:76:47:18:1e:fe:05:d1:4c:0d:a2:a2:9d:23:74:fe:
3d:33:e9:bb:ef:85:1d:7b:91:07:30:e9:5e:55:a9:be:15:33:
80:ad:ab:89:b5:75:61:08:38:af:c5:88:34:a1:4a:60:b3:96:
ff:7e:da:46:07:b3:00:5b:1f:50:71:ab:a9:97:d2:30:ea:00:
2e:2f:95:61:9e:45:7d:80:c2:e0:26:22:66:5d:f8:a0:d3:40:
04:bb:70:7d:9b:1b:e4:73:0c:23:ac:db:2b:c8:8a:c9:96:0d:
a9:db:06:58:73:56:ce:3b:c4:dd:b3:b3:b1:88:29:70:85:19:
41:06:3b:91:8f:b4:5d:29:6e:40:0f:34:f9:ae:fb:bc:25:32:
47:ec:3a:ea:b6:65:13:17:ba:ea:b6:07:6f:58:d5:31:0e:22:
fb:d2:aa:47:b7:64:3b:70:dc:d1:10:6b:ee:f6:e6:d5:c6:59:
f0:43:e8:6e:0a:37:97:3c:92:b2:a6:42:3e:3f:93:cc:bc:f4:
90:37:fd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:31 2026 by rpki-client