Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
File: ep6pPHnsxdXKkDAazTqJLW4uHnM.mft (raw, json)
Hash identifier: TcIMtoH96NQZ1R8S9dU0Ad3sWgH6R78RcsFfMutec8w=
Subject key identifier: F5:58:D3:FC:77:FF:46:FB:48:CD:AC:0A:52:D3:92:04:F7:4B:57:BE
Authority key identifier: 7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73
Certificate issuer: /CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73
Certificate serial: 019CACB4A8813E693039E3B37E94B784FB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
Manifest number: 131C
Signing time: Mon 02 Mar 2026 04:00:46 +0000
Manifest this update: Mon 02 Mar 2026 04:00:46 +0000
Manifest next update: Tue 03 Mar 2026 04:00:46 +0000
Files and hashes: 1: ep6pPHnsxdXKkDAazTqJLW4uHnM.crl (hash: apFSDwUgSlOgF2dUdAmjO+b+QvitVpL0MXikmcivvM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:a8:81:3e:69:30:39:e3:b3:7e:94:b7:84:fb:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a9ea93c79ecc5d5ca90301acd3a892d6e2e1e73
Validity
Not Before: Mar 2 04:00:46 2026 GMT
Not After : Mar 3 04:00:46 2026 GMT
Subject: CN=f558d3fc77ff46fb48cdac0a52d39204f74b57be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:68:3a:e6:4a:09:ce:3f:6e:d8:56:43:5c:92:
1b:82:1b:93:08:46:11:84:8d:a5:e9:7d:6c:10:32:
a7:ff:28:82:96:4b:69:2d:46:a1:e0:37:e9:74:de:
68:71:b4:d5:82:d3:38:9d:4d:fa:95:e5:52:77:06:
c5:8a:d2:ca:e2:ac:43:38:97:8d:60:58:52:18:00:
d0:98:4f:d6:6d:6c:ea:69:00:e2:7b:3f:ce:84:d8:
b7:f4:c2:f5:a0:5a:a0:45:36:dc:59:50:3c:15:54:
b6:c6:5f:c0:3e:59:63:90:f0:5b:66:4e:38:68:b0:
89:04:16:f1:7a:31:39:c5:fa:e6:98:c8:f0:8f:9a:
76:ba:f8:0a:c5:49:a1:28:aa:77:b5:e9:77:4c:d3:
9b:8b:d6:31:3f:c6:8e:10:c5:e1:f2:d1:f8:d9:08:
45:43:d8:a2:61:d7:37:c7:28:5e:ee:c7:f3:f8:8e:
5e:06:b0:15:97:13:26:f3:2c:02:03:5d:0b:76:d7:
b8:2d:8a:66:80:ca:32:53:08:28:38:c3:65:90:a1:
ff:37:33:96:20:7e:27:d6:d1:e1:f2:02:89:37:b7:
3a:f1:06:32:19:c5:17:33:e1:f0:b9:38:86:00:78:
ae:53:50:6b:24:1c:2e:0e:25:59:a0:10:3a:ba:ed:
1b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:58:D3:FC:77:FF:46:FB:48:CD:AC:0A:52:D3:92:04:F7:4B:57:BE
X509v3 Authority Key Identifier:
keyid:7A:9E:A9:3C:79:EC:C5:D5:CA:90:30:1A:CD:3A:89:2D:6E:2E:1E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ep6pPHnsxdXKkDAazTqJLW4uHnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5fdc37-f30d-470a-9a01-4cccb4c7918f/1/ep6pPHnsxdXKkDAazTqJLW4uHnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ec:33:e3:f4:f1:06:a6:45:38:7f:c7:de:a5:92:03:a9:cc:
df:47:41:e6:64:06:91:b8:9d:a2:62:a8:42:19:1e:b9:ee:a1:
1d:c6:52:0d:b8:d2:5c:8d:ac:bf:0b:b7:52:2c:fd:a7:1d:dc:
38:e9:21:ab:22:b3:4d:37:50:b4:e2:ee:19:f7:2a:f4:87:bb:
0c:5e:ad:b0:27:a6:62:1c:01:e4:18:fa:db:67:73:c3:ad:72:
9c:d0:05:0f:b6:3e:f8:b7:ad:14:25:38:a1:18:18:e5:45:d8:
c0:c6:78:67:fb:1d:c8:64:bb:22:38:f1:fa:7c:46:6f:2c:19:
56:2f:be:d6:db:67:65:75:b7:75:75:60:f2:b7:50:ef:84:25:
01:87:89:3c:81:a2:9c:f3:88:0e:38:e1:9a:5e:c0:8d:c5:8b:
fc:98:4a:61:28:82:4d:e2:d4:7e:32:dd:68:88:89:62:fb:06:
77:ab:ed:6c:ca:fc:b0:f4:bd:67:ad:37:64:8a:0b:e0:67:01:
aa:a5:40:18:b0:c2:93:35:e8:95:79:53:e8:a1:79:a8:d2:f5:
db:85:8d:25:4f:14:a9:51:a3:16:3b:64:cc:60:99:09:a4:27:
01:47:7e:fa:f7:af:58:0f:44:04:ee:e0:fc:a7:d9:5c:6d:98:
c2:94:a6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:34 2026 by rpki-client