Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
File: EghcVAwRT8iVegJQu0n0hLdDV7k.mft (raw, json)
Hash identifier: azDOhsJyAogv7DSk6m32AQjlxi+Pfu6Fe5Rjak+xZ6M=
Subject key identifier: F4:F5:B5:04:C8:D6:8F:FD:98:9B:59:28:41:3F:69:D3:A1:D8:4B:77
Authority key identifier: 12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9
Certificate issuer: /CN=12085c540c114fc8957a0250bb49f484b74357b9
Certificate serial: 019CAAFCF36E8FE551F04571A4B48FDED84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
Manifest number: 09CE
Signing time: Sun 01 Mar 2026 20:00:29 +0000
Manifest this update: Sun 01 Mar 2026 20:00:29 +0000
Manifest next update: Mon 02 Mar 2026 20:00:29 +0000
Files and hashes: 1: EghcVAwRT8iVegJQu0n0hLdDV7k.crl (hash: lwY2FH2x83yM4p1cbDsPMtYoj8U2+r6QCbA1SoMj4DQ=)
2: ygqyotocEDdtoHHhWJzx1G-yxq8.roa (hash: HyJom2GJVsUQou508bUlOx3xP/oj3d9zeLR3dffhdIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:f3:6e:8f:e5:51:f0:45:71:a4:b4:8f:de:d8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12085c540c114fc8957a0250bb49f484b74357b9
Validity
Not Before: Mar 1 20:00:29 2026 GMT
Not After : Mar 2 20:00:29 2026 GMT
Subject: CN=f4f5b504c8d68ffd989b5928413f69d3a1d84b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:d7:13:89:2d:ff:f3:3a:51:b0:de:b7:f3:
54:b2:b5:a7:59:1e:a6:54:e1:49:2e:19:c5:2c:78:
56:37:f4:4f:65:78:d6:81:68:ec:b4:6e:19:17:7e:
32:d8:ca:ac:ef:ef:45:99:3b:1b:90:60:4c:53:53:
68:3b:94:ab:82:d1:11:c7:b7:c4:5b:b6:7a:5a:d0:
27:99:7a:bb:aa:50:52:d4:0b:95:c8:08:43:00:f7:
a5:1b:f1:b3:72:0c:fa:80:9f:9a:94:03:f5:ed:51:
6a:2a:7f:05:db:f1:ee:81:4b:43:f4:7a:76:3a:39:
0f:5d:bf:69:b9:f3:94:dd:88:ef:6e:d3:4c:33:46:
c8:7b:f8:d1:2b:7d:50:48:6f:03:ef:84:c4:68:21:
e9:69:95:64:d3:4a:35:e9:d6:d6:c5:06:78:fa:3a:
0f:18:b8:80:04:8b:49:a9:0b:6c:aa:a0:cd:4c:25:
d2:90:0d:40:0a:58:2b:75:18:dc:13:e5:4c:50:24:
4e:6e:27:0e:5d:78:47:dc:c3:78:41:11:f0:63:75:
5c:23:b5:2a:86:ae:f5:e6:48:8e:6b:69:dc:7b:10:
6c:60:0d:f8:64:b4:9a:57:2a:c0:bb:af:d6:70:7e:
95:bb:a2:6f:19:5f:e4:9a:57:88:aa:75:55:45:5c:
93:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F5:B5:04:C8:D6:8F:FD:98:9B:59:28:41:3F:69:D3:A1:D8:4B:77
X509v3 Authority Key Identifier:
keyid:12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:aa:e2:1b:43:a6:b9:32:b4:06:82:63:e2:37:e7:dc:56:76:
44:2f:10:cc:8f:9a:4a:4f:91:ba:31:15:c8:36:9c:4a:24:9e:
5b:a4:c7:7c:24:f5:aa:88:e2:df:a6:6a:a3:f7:fa:4c:21:c4:
4f:99:ce:bd:86:08:c1:41:75:15:4f:6f:f2:26:98:fa:36:e0:
73:f9:76:ce:3d:10:0c:11:02:81:a4:9a:c3:b4:be:d3:02:1f:
44:35:b3:85:54:5c:03:45:3c:92:35:64:63:af:56:af:a2:75:
72:88:6f:63:7d:8d:2a:f7:d0:00:81:e6:63:8c:ee:c9:f5:fc:
a4:de:cf:67:18:95:5f:f3:33:41:49:bd:e6:ea:2e:5a:e2:db:
af:1c:c1:c8:4f:ec:cb:81:89:43:6f:bd:74:75:b5:91:9c:6a:
98:07:3d:aa:c4:a6:81:4a:bf:4c:f5:63:cf:6b:34:d0:e4:68:
52:4d:14:5d:7c:96:a7:30:da:8d:cb:2e:92:6f:c9:2a:e2:30:
12:ea:11:7d:9d:e3:4f:21:de:07:d2:d0:7f:eb:84:15:58:43:
0a:a8:03:4e:51:e3:de:80:b8:3f:b1:e6:b9:ef:58:24:32:c2:
27:ee:a0:6e:e2:08:ba:56:f2:e2:0b:6c:4e:fd:f7:ab:21:84:
64:3e:41:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:36 2026 by rpki-client