Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
File: EqZX80JMjdVSFa-FO5MwfDZsU4o.mft (raw, json)
Hash identifier: Oy9Ki5A1hnZ7ztidXRsaWas5w3gojwBz5X04QAWFlEE=
Subject key identifier: B9:53:BC:77:23:8C:F3:5C:16:CB:16:A5:24:AB:D1:67:D1:81:48:1B
Authority key identifier: 12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
Certificate issuer: /CN=12a657f3424c8dd55215af853b93307c366c538a
Certificate serial: 019CABD92AA07BE9D95449CC9509443A9A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
Manifest number: 0B4C
Signing time: Mon 02 Mar 2026 00:01:01 +0000
Manifest this update: Mon 02 Mar 2026 00:01:01 +0000
Manifest next update: Tue 03 Mar 2026 00:01:01 +0000
Files and hashes: 1: 1-UyB4g1-cmvqpCraiZLvR0iEtJ4.roa (hash: XMvfp6a9q4gSOZObHK0cOehlAVogxv8AYtQ776Cti90=)
2: EqZX80JMjdVSFa-FO5MwfDZsU4o.crl (hash: V5DsP2Y26YflutQ1sh2ZIVNDawoWqkj2BcMMa8SIW+s=)
3: nnum7eYXax698Y9cnPBAhFzNiqg.roa (hash: EmYj5IWpVJ41RT8+2EZ/sS/gm4FE/uOxW4VF97fOsGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:2a:a0:7b:e9:d9:54:49:cc:95:09:44:3a:9a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12a657f3424c8dd55215af853b93307c366c538a
Validity
Not Before: Mar 2 00:01:01 2026 GMT
Not After : Mar 3 00:01:01 2026 GMT
Subject: CN=b953bc77238cf35c16cb16a524abd167d181481b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4c:9b:ef:29:08:3b:d8:61:ef:b3:04:5d:39:
7f:3d:6e:50:44:f8:79:d6:61:b6:31:cb:02:8d:7a:
f8:63:40:97:28:ef:15:00:6f:c3:39:90:44:63:8c:
0c:37:80:53:a5:7c:6e:e4:1d:8c:04:67:cc:40:76:
df:71:e4:be:b7:8a:8d:73:51:e1:d4:61:7a:0c:0a:
fe:d6:fd:42:16:a9:83:7a:04:e3:bd:b5:3a:24:d7:
ea:f4:9c:e7:ed:2f:6f:7c:09:de:96:2c:4d:8d:1b:
22:f6:62:4d:d0:cb:c4:88:e9:db:a7:88:57:3a:97:
17:2f:d6:fd:c0:40:38:b4:b0:35:2e:ac:f7:61:81:
6c:cb:8c:58:6c:a0:6d:c9:b1:f9:40:09:76:5c:0b:
6b:3e:c6:85:f2:06:1f:d9:03:8b:ab:b6:46:e6:3d:
a4:8d:bc:32:22:76:b7:9b:e3:50:89:14:9d:3e:ab:
02:02:fe:f0:77:1f:5a:b5:45:6d:34:2d:c6:38:d2:
80:de:ab:20:92:b9:52:61:ff:87:87:2f:96:cf:ec:
a2:49:af:da:21:a9:d2:06:ea:5d:00:a5:4e:79:98:
23:29:fd:e9:7e:4b:38:3b:ed:b3:9c:f7:d6:69:f9:
a8:15:2d:46:64:d2:36:38:69:f0:27:18:d7:15:46:
b0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:53:BC:77:23:8C:F3:5C:16:CB:16:A5:24:AB:D1:67:D1:81:48:1B
X509v3 Authority Key Identifier:
keyid:12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a9:0b:40:af:9c:68:76:9e:90:ad:36:a5:3f:e6:f3:67:6c:
ca:4a:2c:49:a1:4e:ff:e7:17:f6:0e:32:9d:f5:01:e7:5b:1d:
e3:30:41:48:60:f9:1a:5d:e2:77:07:ed:7e:96:43:dd:09:68:
02:d3:38:77:82:ba:f8:fe:d6:90:90:9a:e5:b6:77:d5:99:7d:
b1:dd:01:bc:14:22:4a:1e:af:62:06:7d:b5:ff:7e:2e:40:b3:
66:47:10:cb:56:7a:97:a0:c4:92:4f:bd:ab:eb:9e:15:19:b4:
ca:54:a1:a5:1a:55:fe:c6:cf:48:3a:d0:76:ce:3d:e6:e0:17:
3b:42:14:65:5e:71:82:a4:da:b9:4a:9d:14:3c:bb:74:92:72:
89:83:d8:06:63:7b:eb:de:a8:57:13:3c:c2:4c:4c:d1:9d:80:
3a:1a:75:d0:c8:f1:7f:d5:34:c8:7f:b0:44:25:31:e3:9c:36:
96:37:16:04:ff:c2:cb:23:f3:8f:11:f1:a0:a6:fa:39:46:fd:
79:2b:64:ca:f0:28:1e:04:6f:f4:59:1a:8d:9d:6d:92:81:17:
8e:d0:7c:56:3e:c1:ab:c1:38:e6:99:22:68:2b:aa:8d:02:7d:
14:40:eb:55:79:6c:12:29:87:5a:f1:57:b3:07:96:8a:6a:80:
67:01:06:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:39:06 2026 by rpki-client