Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
File: EghcVAwRT8iVegJQu0n0hLdDV7k.mft (raw, json)
Hash identifier: qAceD+oomw+F7GWDIDMAHgGOpyEGrq3TPulNlcDmPV8=
Subject key identifier: 27:30:9D:22:D3:98:6E:59:91:80:17:62:12:19:FA:D4:C8:82:D5:4C
Authority key identifier: 12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9
Certificate issuer: /CN=12085c540c114fc8957a0250bb49f484b74357b9
Certificate serial: 019D9A74C5E50278A5DBB95DE827DFB4E709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
Manifest number: 0A4A
Signing time: Fri 17 Apr 2026 08:00:37 +0000
Manifest this update: Fri 17 Apr 2026 08:00:37 +0000
Manifest next update: Sat 18 Apr 2026 08:00:37 +0000
Files and hashes: 1: EghcVAwRT8iVegJQu0n0hLdDV7k.crl (hash: mu04SZ6ySYswydvcDZB7KRfha+3sPyemWM3BLZEyWwU=)
2: ygqyotocEDdtoHHhWJzx1G-yxq8.roa (hash: HyJom2GJVsUQou508bUlOx3xP/oj3d9zeLR3dffhdIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:c5:e5:02:78:a5:db:b9:5d:e8:27:df:b4:e7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12085c540c114fc8957a0250bb49f484b74357b9
Validity
Not Before: Apr 17 08:00:37 2026 GMT
Not After : Apr 18 08:00:37 2026 GMT
Subject: CN=27309d22d3986e59918017621219fad4c882d54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:7a:4e:58:21:75:0b:07:0b:bf:c3:10:cc:
dc:da:7d:4c:63:43:33:4b:8d:91:22:79:e3:fc:a1:
09:57:ba:ee:4c:72:0e:fa:0c:f4:e0:fd:79:34:37:
a4:31:03:d8:d6:f8:24:17:a1:3a:3c:0e:f4:ca:c6:
57:7f:78:aa:41:91:d2:57:3e:5d:c6:aa:42:19:72:
bc:83:be:84:86:da:ae:a2:ac:de:df:c8:87:c3:22:
34:ca:39:b6:52:d2:f3:30:a9:81:ca:54:6b:82:b3:
0b:11:ff:7b:dc:f4:25:e7:49:df:07:a2:a6:70:7b:
97:33:70:f8:53:4f:bb:ad:1b:bf:5f:e7:d3:0d:44:
7d:b8:7e:d3:f2:af:7d:96:f3:ca:a9:4a:c9:f0:06:
a6:23:1e:0c:19:c8:9e:7d:89:bc:3a:80:ba:d5:f7:
91:19:23:3f:e8:c9:3b:d9:9b:65:62:20:44:3c:4e:
3a:0f:7c:0d:67:0f:5a:dc:a8:1d:6c:fb:e2:39:39:
4b:89:2f:99:87:c6:aa:b7:8a:bb:f7:e9:ca:88:7b:
25:63:68:69:bf:09:b0:33:dd:64:84:dc:b9:7d:9a:
91:9b:44:31:29:d5:44:c2:79:c6:e1:5c:54:df:f2:
d4:31:37:5c:6a:f3:d1:38:cd:56:29:0a:a9:fd:02:
16:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:30:9D:22:D3:98:6E:59:91:80:17:62:12:19:FA:D4:C8:82:D5:4C
X509v3 Authority Key Identifier:
keyid:12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:bb:23:0d:96:c9:f8:0f:b4:1f:93:72:7a:26:d0:0f:f4:33:
9e:01:2e:14:22:60:48:e7:b8:c6:1d:45:54:a6:2f:d3:c0:42:
0b:22:ca:f4:61:4d:f0:d2:75:ea:cc:9c:21:14:4b:8f:28:ef:
f3:5b:bb:96:37:40:90:e3:ce:f9:ab:e5:37:7e:40:68:ab:be:
a4:ed:c8:63:e4:c5:9c:cb:5f:e1:b8:3d:3c:db:ba:e5:82:16:
6c:0c:2e:51:29:f8:a3:89:8f:77:60:6a:28:f4:10:88:b6:0b:
fa:01:06:e6:34:ce:4d:0e:99:35:0a:66:74:fa:1a:a0:ba:2b:
14:17:88:ae:f9:bb:8e:f5:62:79:c5:c0:b3:6a:07:ba:cf:6b:
1b:33:2c:4b:09:50:a9:c0:f9:71:54:40:5b:8f:59:00:a5:c9:
f6:33:f3:53:d1:b0:dd:39:c3:17:cb:32:5b:b0:19:ea:cc:51:
2b:dc:5a:dd:62:ae:85:80:5b:87:a8:0e:e4:52:e9:ee:75:a3:
95:d1:b5:4b:d5:38:06:7e:ba:d3:25:a3:ac:f6:17:84:80:b0:
20:a9:fd:5d:81:f9:18:93:73:a1:30:a2:ef:c0:cd:12:de:49:
3f:93:26:4e:d2:2a:ae:52:82:3e:aa:09:ed:c3:23:5c:e2:a2:
70:42:ec:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:57:09 2026 by rpki-client