Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
File: EghcVAwRT8iVegJQu0n0hLdDV7k.mft (raw, json)
Hash identifier: pdnh2ySdfLI30hGtl0Nv0dV3OX1c4oB36ASJ+Mm3BN0=
Subject key identifier: BF:3D:63:31:9B:2B:9F:AA:ED:81:37:5B:A6:13:6D:BF:2F:C2:DF:69
Authority key identifier: 12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9
Certificate issuer: /CN=12085c540c114fc8957a0250bb49f484b74357b9
Certificate serial: 019DA41C835D20C5D97B3F294AAFE15A38D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
Manifest number: 0A4F
Signing time: Sun 19 Apr 2026 05:00:25 +0000
Manifest this update: Sun 19 Apr 2026 05:00:25 +0000
Manifest next update: Mon 20 Apr 2026 05:00:25 +0000
Files and hashes: 1: EghcVAwRT8iVegJQu0n0hLdDV7k.crl (hash: SRxeO2pq+YTOlB396F2cSXyx0JqYPiwK06yp/VCanuA=)
2: ygqyotocEDdtoHHhWJzx1G-yxq8.roa (hash: HyJom2GJVsUQou508bUlOx3xP/oj3d9zeLR3dffhdIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:83:5d:20:c5:d9:7b:3f:29:4a:af:e1:5a:38:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12085c540c114fc8957a0250bb49f484b74357b9
Validity
Not Before: Apr 19 05:00:25 2026 GMT
Not After : Apr 20 05:00:25 2026 GMT
Subject: CN=bf3d63319b2b9faaed81375ba6136dbf2fc2df69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:48:8b:53:7c:77:d0:49:50:1b:bf:80:9e:5d:
70:5a:79:49:fc:a2:80:a0:df:35:71:a0:ba:eb:5c:
27:3e:a1:83:e5:4e:33:1e:2f:26:0c:a4:d3:7a:2f:
d7:83:57:95:99:31:b4:35:e2:8f:b0:be:82:cf:f3:
72:cd:a4:fb:14:85:f4:fe:24:c6:7d:65:cd:e9:61:
3b:c6:1b:7c:88:88:7f:d4:56:b6:62:6c:8f:c7:e2:
e8:07:00:56:37:33:92:af:86:d2:28:9b:ae:f5:fa:
de:04:43:f1:a3:d1:1f:5c:3e:c2:78:45:c3:54:ab:
6b:2e:7b:90:1a:d1:2b:d5:fe:51:86:c0:cd:da:a6:
7a:06:42:85:d7:19:7c:37:76:ed:55:3d:75:46:e3:
85:c1:62:b8:16:7f:6c:ee:98:5e:15:3c:77:2c:5e:
de:57:71:c2:c7:17:a2:8e:c4:0c:61:bc:b5:dc:8b:
e0:4f:37:f6:a0:91:ea:3f:db:cf:03:32:3c:9d:f1:
56:22:b6:1c:bc:f0:36:f3:74:f9:ee:98:f1:29:21:
65:47:53:07:9f:6a:e7:02:1e:0e:b6:47:2a:cb:36:
c6:a6:b4:d7:12:35:c9:9a:dd:55:a1:68:d0:e9:e5:
59:0d:f2:32:0b:7b:e0:7f:fd:b7:7f:47:89:b1:90:
bc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3D:63:31:9B:2B:9F:AA:ED:81:37:5B:A6:13:6D:BF:2F:C2:DF:69
X509v3 Authority Key Identifier:
keyid:12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9d:5c:ff:64:7e:af:ad:4d:ee:2a:66:f3:e6:ad:50:7a:72:
c6:5f:41:f9:f0:07:70:1e:6a:d2:c2:bf:04:ec:aa:c6:a3:f3:
2e:ad:d9:9e:9f:01:40:fd:af:0d:e4:02:6d:7c:67:15:05:02:
b0:10:5f:49:94:1f:8a:f4:d3:2d:b2:68:e3:50:7c:6d:7f:60:
02:35:c7:49:a5:09:40:51:1f:e4:27:2e:4b:7e:58:36:18:97:
77:ef:9d:b7:b5:3e:2c:46:8d:78:3f:ca:1e:fa:ba:ef:2a:53:
25:2c:ae:ed:3f:80:cb:4d:ce:d6:17:41:bd:27:dc:da:f0:aa:
93:92:36:85:12:89:15:bb:78:28:e9:df:e4:e8:bf:ac:6c:7d:
18:3f:9b:51:df:3a:a4:85:23:8f:46:b4:02:35:04:25:70:88:
a1:cf:62:e4:a1:df:a3:ad:30:2c:44:bb:57:9a:07:c8:4b:24:
9d:0e:96:23:a3:af:e3:cc:c4:2d:e8:36:c4:a0:da:ec:90:1e:
c1:21:f0:7e:e0:53:f7:6a:8e:06:34:d7:20:84:ca:fe:91:c0:
b0:e2:4c:7a:8b:43:72:7d:e2:13:33:99:48:be:48:94:da:06:
53:d0:20:8e:f6:db:4b:8c:a7:0b:00:b2:4a:bc:f8:61:1e:0c:
6c:73:4f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:27:59 2026 by rpki-client