Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
File: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft (raw, json)
Hash identifier: lkOqIWmakguN2ZlZRrS8lzDYlrP27TsYYPHiOGh7sGY=
Subject key identifier: 81:6C:EA:E5:05:69:96:C4:A3:C6:17:43:CE:97:AD:D7:E9:51:8B:69
Authority key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
Certificate issuer: /CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Certificate serial: 019CAD59ABD7006BEF97A2BA2F012E14FE4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 07:01:00 +0000
Manifest this update: Mon 02 Mar 2026 07:01:00 +0000
Manifest next update: Tue 03 Mar 2026 07:01:00 +0000
Files and hashes: 1: 1-871CmDX8fagFE4cCLtEOvFlaJk.roa (hash: XbD+Hd0tYqjM6KWUuuQ0xXPJOZgVOM/iQcoQQ4UP8I0=)
2: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl (hash: /IrjzvJXplfUrBPvp6WLWyRvduhn3WhCYybF877XLHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:ab:d7:00:6b:ef:97:a2:ba:2f:01:2e:14:fe:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Validity
Not Before: Mar 2 07:01:00 2026 GMT
Not After : Mar 3 07:01:00 2026 GMT
Subject: CN=816ceae5056996c4a3c61743ce97add7e9518b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fa:8f:1c:6e:c0:16:1c:6f:14:6b:28:fb:2a:
97:da:21:19:62:c4:13:b7:2b:85:b6:fc:25:aa:cf:
19:7b:67:59:7c:43:4d:2f:eb:9c:70:3e:78:4b:c7:
78:80:a3:84:ef:1f:52:a3:2b:57:20:a1:df:98:c7:
ec:0e:86:f7:c9:4c:56:04:e4:c6:8c:90:be:bd:a4:
66:c6:34:34:61:a8:46:17:77:ec:e7:e9:4d:02:b4:
c1:1a:1d:9b:14:17:24:af:aa:25:be:8b:c3:36:fd:
d6:76:d0:59:28:27:d1:5d:9e:f3:b8:a1:c3:7e:8c:
94:04:11:c7:6c:34:a6:49:c3:1e:df:77:1e:4e:87:
11:e6:22:7e:82:f6:09:d3:16:b0:cf:bb:19:ad:5a:
36:03:ef:7a:70:c5:9e:8c:1a:e5:e2:3c:41:f5:17:
cc:3e:58:a6:60:c7:59:b3:7a:d0:d3:95:89:2e:e0:
b2:28:af:cc:fc:0f:0a:59:92:d9:d2:47:74:04:b2:
d1:d5:c8:65:cf:59:a6:d0:e4:1a:99:e4:68:5b:be:
da:de:ca:52:73:82:fa:fa:af:4e:cd:80:13:32:58:
db:d5:ba:e3:9d:9e:bf:60:92:fb:d0:f5:e5:57:76:
02:be:d9:0e:60:c9:f8:45:bd:da:e0:15:7a:91:22:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6C:EA:E5:05:69:96:C4:A3:C6:17:43:CE:97:AD:D7:E9:51:8B:69
X509v3 Authority Key Identifier:
keyid:12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4a:d3:9e:a5:cd:12:e2:5b:c7:bc:1e:7a:23:09:0a:09:d8:
c6:59:83:9d:b4:2f:d7:e0:6f:a4:11:99:56:76:05:13:52:21:
af:2d:17:94:dc:8f:4f:74:18:a0:e5:d4:47:0d:70:4c:92:73:
c8:b0:a3:84:58:5d:89:aa:3f:6e:50:e6:00:e0:e3:4a:7f:fd:
33:01:cc:2a:cb:46:01:da:d1:03:14:3b:2c:c6:30:7b:32:f3:
1a:5c:a1:91:06:98:01:45:bd:ba:ef:11:4e:ce:ef:f4:f7:e1:
24:7d:43:59:28:90:e5:dc:cd:76:2e:57:2a:8c:a4:bd:99:03:
a0:7f:9d:bd:eb:d8:fa:72:f2:e5:43:57:f6:b9:2f:f2:43:8a:
48:e6:87:e0:a3:93:6e:72:37:c8:b8:a2:2c:9c:6d:73:f3:72:
8b:86:e1:5d:9b:47:84:34:2f:71:e3:99:42:44:c3:9b:9b:0d:
79:be:cb:10:43:35:a2:97:2a:a8:14:62:24:a6:1d:1d:a9:8a:
85:4c:d9:f9:d3:2e:11:92:a6:9a:47:70:07:67:8b:02:a0:f2:
59:e8:f7:cb:67:b0:58:e5:8b:30:ca:d7:9c:65:3a:df:0d:7d:
c9:7d:19:a4:c9:d7:f6:fd:bf:fa:44:99:1c:9a:fc:b1:58:20:
29:a8:e1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:35:06 2026 by rpki-client