Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
File: Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft (raw, json)
Hash identifier: h7wjaluh7VjnBmc9r76E+jgBS4hI6CbphQOnseya3Lc=
Subject key identifier: 72:3B:C4:B7:77:8C:02:C6:ED:D2:A4:79:8C:8E:D4:16:57:5E:34:19
Authority key identifier: 12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2
Certificate issuer: /CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
Certificate serial: 019D996284CAC957903F46BA1D31847EB3D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 03:01:03 +0000
Manifest this update: Fri 17 Apr 2026 03:01:03 +0000
Manifest next update: Sat 18 Apr 2026 03:01:03 +0000
Files and hashes: 1: Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl (hash: Wfoqa3pAfdxqirtYtFrcjEwTHpUcnQE/w2pEXknD1g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:84:ca:c9:57:90:3f:46:ba:1d:31:84:7e:b3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
Validity
Not Before: Apr 17 03:01:03 2026 GMT
Not After : Apr 18 03:01:03 2026 GMT
Subject: CN=723bc4b7778c02c6edd2a4798c8ed416575e3419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:23:10:a6:f3:ed:2f:5e:c5:26:d9:08:5f:67:
ab:36:f4:10:c0:fd:92:a7:a5:78:f5:7a:2f:10:21:
60:a6:65:b0:8a:a6:42:36:c7:d5:1c:9d:bb:ce:95:
5d:cd:67:d0:ad:68:9a:62:37:02:37:79:5a:4c:7d:
84:0e:9c:e9:f1:40:fc:07:82:c2:b8:8d:4a:a7:41:
ba:db:30:d5:53:ae:23:4c:9d:c8:01:81:d2:d7:67:
7a:a6:2b:f2:f8:02:da:51:a7:ec:36:e7:50:d5:e2:
2d:7d:21:53:5b:e3:dc:29:e0:07:0b:da:a3:2b:bd:
58:9f:13:69:fc:d2:a8:7c:a7:ab:71:28:bf:77:19:
e6:6d:ed:16:04:2c:34:e4:33:6f:81:7b:64:6d:91:
c8:d5:59:66:68:5c:fc:35:d5:69:a7:65:3d:a4:91:
9b:74:ca:1a:d4:40:52:de:6f:70:c8:20:88:40:36:
a7:60:5f:a6:cc:fe:66:fe:22:8a:35:86:23:01:87:
5d:1c:48:07:d8:18:61:fd:b5:75:2d:1a:3c:19:cd:
57:e6:9b:31:2b:d2:15:71:9e:dc:a6:50:3e:38:fd:
da:58:b6:d5:44:26:7e:67:0e:8b:61:57:68:ee:06:
d4:bb:f7:75:22:98:30:de:b8:81:06:d9:d9:b0:24:
c0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3B:C4:B7:77:8C:02:C6:ED:D2:A4:79:8C:8E:D4:16:57:5E:34:19
X509v3 Authority Key Identifier:
keyid:12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5b:fa:dd:48:61:7f:51:89:7d:07:1d:c0:a2:47:0b:1e:30:
d2:1a:5d:ab:60:81:95:88:fc:df:4a:be:70:0e:9a:08:5b:9b:
7d:a6:a7:ab:1b:e1:10:10:1f:6b:04:f5:63:20:e7:a5:cc:e9:
55:94:95:73:c6:3f:6a:b4:b4:45:d0:1b:2f:bf:f5:a1:3f:be:
3a:0e:f7:a3:30:2d:b0:42:24:3e:81:65:24:0d:fa:4b:80:fa:
79:10:b3:4a:e4:39:d0:66:a5:59:64:6c:bc:c4:d0:0b:16:b0:
d0:b5:10:8a:74:8e:83:9a:dc:0b:4e:54:88:38:11:af:14:65:
e4:c1:ac:5d:19:8f:cc:ab:69:a8:39:a5:7c:d8:66:42:33:4f:
16:15:2a:af:08:1b:48:d6:d5:ac:00:8d:8c:1a:0c:bb:10:29:
bc:d0:b8:2a:20:86:99:45:7f:94:b8:a1:7a:f3:e6:76:b2:ac:
69:88:bc:e7:e4:5c:ef:ee:5e:21:6c:12:e5:30:2a:ed:70:4d:
9e:1c:68:87:9e:cf:19:98:e7:88:de:b0:bb:42:59:47:8f:f3:
7a:98:e6:37:ea:97:a3:0d:62:f2:b0:43:c7:e0:68:fa:8c:0a:
e4:aa:36:47:f2:f5:39:5c:ab:20:cc:0c:14:7a:b8:f2:17:39:
72:a8:c0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:20:45 2026 by rpki-client