Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
File: Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json)
Hash identifier: DvrhgUfibJqgX4DwGzgT20DrkJSXBb2IQMhwq5NK/bI=
Subject key identifier: 2D:6E:A0:C8:34:AA:42:5D:32:5F:A8:9B:7B:41:68:96:9E:A7:CE:73
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 019CAC10272A1B63346E2CB905250799D531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
Manifest number: 146D
Signing time: Mon 02 Mar 2026 01:01:05 +0000
Manifest this update: Mon 02 Mar 2026 01:01:05 +0000
Manifest next update: Tue 03 Mar 2026 01:01:05 +0000
Files and hashes: 1: 4eHXKjznACVbndG6iFpTFVUVkDU.roa (hash: OQWOo0J8qNH07VKmKOXFET9I4K0zlOhgBlJo3WSTOP8=)
2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: RcJr+LZTFb+iCx6PK7SMAfIc8LByt1+CYmyXPo29VZY=)
3: uRQkD95GTfY6rjF1uHaPVB0eyic.roa (hash: DCYgdJ7UhUeMQMpapAAECzMIhYagZDmIZ36JKYt3YbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:27:2a:1b:63:34:6e:2c:b9:05:25:07:99:d5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Mar 2 01:01:05 2026 GMT
Not After : Mar 3 01:01:05 2026 GMT
Subject: CN=2d6ea0c834aa425d325fa89b7b4168969ea7ce73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b2:ca:ac:cf:5e:a1:d4:82:d1:9d:27:f4:78:
cc:01:f4:7b:f2:1e:25:76:69:af:c1:62:06:8d:c5:
0e:86:50:11:af:cb:37:eb:48:4b:81:bf:ec:80:70:
cc:65:8d:c1:9e:ca:b0:a6:e9:7b:0a:d5:79:33:18:
ae:7d:0d:ef:13:70:45:b6:53:24:30:0f:0b:58:a6:
5b:7a:b4:de:3d:fd:f9:ae:bd:df:57:40:2a:6d:d2:
9f:f1:05:f4:9f:eb:b1:0d:8a:3a:2a:0f:a5:03:fe:
0e:13:30:30:7c:39:cf:64:07:3a:d8:41:64:39:5a:
52:a0:49:87:b8:3b:bc:69:d7:8d:46:3a:c8:fd:ca:
c0:50:6b:26:ba:4b:8f:45:fd:91:41:79:f4:02:34:
97:77:de:61:07:76:4e:83:40:3a:8e:21:70:82:72:
48:c9:a4:2a:19:bb:e7:22:64:0b:16:c8:f1:04:c7:
05:98:25:65:ae:a6:3c:c8:52:ee:46:e0:2c:de:3a:
06:19:ab:25:f5:50:8f:f7:0d:d7:13:eb:4c:18:1a:
74:f3:4e:91:33:ec:e5:dd:6c:6e:44:23:7a:03:16:
d2:72:38:63:40:85:cf:e9:68:f2:cb:46:1f:eb:a7:
37:41:94:b3:7f:4c:73:7f:b7:50:52:e0:a8:41:ed:
36:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6E:A0:C8:34:AA:42:5D:32:5F:A8:9B:7B:41:68:96:9E:A7:CE:73
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5e:61:7f:f7:7b:d8:1e:bf:53:82:8f:48:7e:50:09:12:99:
96:7c:a8:63:ab:24:85:fe:7c:f4:c2:ff:1b:db:6d:c7:32:2c:
38:86:57:8b:c4:f5:cb:c6:06:59:fb:ca:ae:46:12:de:88:22:
1a:52:71:80:d7:a1:f2:da:8c:f0:65:3b:f8:70:8f:24:bd:22:
c4:3e:df:02:d5:47:d2:f2:27:f9:a4:5f:e2:2b:c6:97:6a:61:
ec:84:52:3e:6e:78:97:8a:fb:bd:d5:62:75:c2:98:62:dd:a2:
76:27:b5:75:c4:a3:54:4a:ec:3a:f6:5c:05:6e:e5:f5:e0:e0:
89:4e:d7:19:7b:fe:4e:ce:3f:39:ce:76:f3:90:a9:e8:4b:8f:
8b:58:fd:6a:82:90:e9:6b:85:d4:46:6c:e9:6b:b4:d0:2c:0a:
53:a3:d3:7f:f4:e0:9f:a9:c5:a8:be:aa:d3:28:a9:8c:88:1a:
8a:4f:f9:71:12:85:da:b9:78:83:fe:30:60:5d:11:03:37:46:
99:86:2b:85:d0:7e:2d:1c:76:8a:cf:4f:1a:de:81:ec:67:b8:
cc:84:90:ef:a0:a0:ba:48:c2:fe:85:67:73:b7:a5:bc:19:5b:
0f:37:88:3d:30:a8:e2:ec:ef:03:61:c6:a2:f4:64:9f:10:01:
3b:56:ab:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:28 2026 by rpki-client