Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
File: EA5EySrUkxGKStK6gRRfHTShi8o.mft (raw, json)
Hash identifier: 7zys71huPgBZVdqn5NzXUyt8vOIfwdMD4Q3qg9k7l4I=
Subject key identifier: 00:9F:54:83:70:82:F8:0D:AB:69:F7:D6:9F:2E:D1:DD:E1:A3:9A:ED
Authority key identifier: 10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
Certificate issuer: /CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Certificate serial: 019D9AAC2812ABB67AB8AF78819DFAA40E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
Manifest number: 128A
Signing time: Fri 17 Apr 2026 09:01:06 +0000
Manifest this update: Fri 17 Apr 2026 09:01:06 +0000
Manifest next update: Sat 18 Apr 2026 09:01:06 +0000
Files and hashes: 1: EA5EySrUkxGKStK6gRRfHTShi8o.crl (hash: 2tUuaCAAv4Gg395OcSdHKZce8p1a6QvJviXdIuQdhrY=)
2: bttqOJvjdl84KdYPjPqF6BIYkr0.roa (hash: pBThqHeKOS0Gks/36PiEC85JnL2dOeWyKsS2nm104jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:28:12:ab:b6:7a:b8:af:78:81:9d:fa:a4:0e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Validity
Not Before: Apr 17 09:01:06 2026 GMT
Not After : Apr 18 09:01:06 2026 GMT
Subject: CN=009f54837082f80dab69f7d69f2ed1dde1a39aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bd:35:87:9a:b7:4c:24:08:e5:22:44:48:55:
fb:1b:26:af:3c:9f:ac:b2:51:66:ce:b7:97:eb:72:
66:6c:2e:bf:8c:a9:9f:d0:53:47:6b:ec:99:b3:d1:
e5:cc:a6:1a:33:26:a1:34:8a:d0:86:dd:7b:8b:4f:
0a:f1:33:ea:9c:17:a6:7f:2d:72:21:fa:a7:ac:25:
76:d8:51:a5:f6:fc:5d:a4:10:ee:66:a3:4b:cf:be:
e7:27:ee:2b:82:40:cc:ab:3e:5b:e7:38:a4:6c:58:
74:ed:ad:93:b1:1f:5f:97:de:d4:f6:78:df:f0:21:
97:c2:ec:af:fe:04:45:83:c1:22:d7:3a:9b:b5:db:
31:36:89:0b:c9:33:97:cf:aa:9c:5e:1a:56:54:42:
bd:36:91:a7:2a:dd:fa:bb:b0:89:27:3e:f9:82:1c:
bd:a6:c9:9d:1f:48:3a:f1:21:e9:22:69:9e:9e:86:
c1:34:0a:07:e7:4f:03:0a:cc:4f:b3:c0:59:3b:1d:
8f:0a:1c:a7:0c:b2:10:5b:d4:00:e0:6f:77:16:03:
ba:91:f5:4b:ce:06:95:41:1e:b1:41:82:06:f2:cf:
91:ee:19:b8:c6:4d:33:36:fe:89:ad:ad:75:b7:f7:
94:b5:e1:1d:8f:10:04:61:be:1e:23:d3:7a:83:d9:
6d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9F:54:83:70:82:F8:0D:AB:69:F7:D6:9F:2E:D1:DD:E1:A3:9A:ED
X509v3 Authority Key Identifier:
keyid:10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:73:46:57:d8:2e:e2:7a:a4:f8:e1:42:64:d9:ff:f5:73:57:
bb:78:d9:fa:ba:48:5a:c3:e9:e1:44:03:5e:ff:f8:17:25:bd:
03:3e:87:ab:65:df:e8:33:58:11:a6:61:6a:6a:f9:23:75:fb:
2e:10:5b:14:d2:ec:30:71:95:49:5e:26:ea:6b:d7:b5:28:eb:
a3:3a:ed:86:47:b1:39:30:31:f9:be:4f:d1:02:1a:9a:30:cd:
7f:9e:8d:f7:7e:d0:d3:6e:48:3b:ca:14:a3:ee:1e:b3:59:89:
f8:ee:2e:c8:32:b7:0b:f6:98:79:2e:b5:b4:b6:b6:d8:8a:d2:
d0:12:9f:94:a1:cf:90:0d:09:f9:27:18:6e:2a:85:ea:ad:a2:
37:42:e6:79:71:e5:f8:88:81:db:26:11:a2:02:8b:67:05:f4:
22:a6:06:a7:aa:81:c3:1d:cd:a1:76:5e:84:68:61:ac:01:6a:
90:67:c8:f0:b1:ba:32:2a:15:a7:61:72:1a:82:d2:7c:48:c3:
b3:31:46:0a:39:b8:17:5a:80:4e:12:90:a0:bf:00:42:58:83:
b0:03:0e:95:e4:ee:1a:94:69:9c:53:6a:4c:2c:44:e5:a9:83:
1c:20:ec:a2:3a:11:04:be:d7:a5:f5:37:ad:52:2c:d8:b0:a0:
c3:d1:56:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:43:37 2026 by rpki-client