
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
File: EagjxkJx95aUakaCWW5zKDXMTsg.mft (raw, json)
Hash identifier: cMS4JMszFGWD8yxlnPzkPhHYuEN8VRrsAM85vVAtzMk=
Subject key identifier: 73:DB:62:59:CA:E6:B1:77:1B:01:68:6E:DE:4C:71:24:42:E5:EA:28
Authority key identifier: 11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8
Certificate issuer: /CN=11a823c64271f796946a4682596e732835cc4ec8
Certificate serial: 019CAB6BC4870EEA73D3873329BAC5290AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
Manifest number: 0EED
Signing time: Sun 01 Mar 2026 22:01:32 +0000
Manifest this update: Sun 01 Mar 2026 22:01:32 +0000
Manifest next update: Mon 02 Mar 2026 22:01:32 +0000
Files and hashes: 1: EagjxkJx95aUakaCWW5zKDXMTsg.crl (hash: 6lLTjtliw7EBffNQpwok/0SeCJEgqRohZQoGTr6srrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:c4:87:0e:ea:73:d3:87:33:29:ba:c5:29:0a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a823c64271f796946a4682596e732835cc4ec8
Validity
Not Before: Mar 1 22:01:32 2026 GMT
Not After : Mar 2 22:01:32 2026 GMT
Subject: CN=73db6259cae6b1771b01686ede4c712442e5ea28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c2:5d:a6:fb:e3:4e:0f:58:67:49:9b:69:3b:
60:c5:2d:3b:5f:24:bf:01:24:d4:f4:f7:ff:b4:a8:
c7:16:48:b3:7f:53:4c:8b:1e:7b:a6:89:0c:e8:21:
b7:8d:e5:5a:36:1d:36:b8:0b:66:08:a0:14:62:77:
70:c1:a3:82:ec:05:f9:e1:b3:2b:0c:16:f7:28:8a:
30:a6:b3:c2:9f:c6:d0:c9:e9:07:4a:1e:dc:24:a6:
fa:f7:8b:04:84:c0:65:7e:13:19:08:6c:40:a6:c9:
e3:60:fe:50:41:3f:e3:69:66:a3:be:97:d8:47:40:
22:08:64:d0:a7:53:94:0c:e6:17:69:f8:16:4a:0e:
40:41:7d:a9:fc:f1:83:27:c5:3d:76:ff:1c:62:0c:
c0:a4:4f:c9:14:e3:33:a3:36:3a:a6:41:49:67:c6:
5e:e1:3d:9c:d1:38:51:98:c4:33:ce:ba:b8:71:57:
fe:db:7e:1a:fb:29:80:a4:e6:e0:03:b0:ce:77:07:
53:68:80:a9:a2:cd:ab:a0:f7:93:21:34:7b:3a:da:
68:73:1d:c2:35:9a:7f:82:cc:42:f9:92:ba:70:04:
a2:2a:5c:47:48:26:54:b4:49:0a:51:11:e8:6e:62:
46:87:66:7e:97:ea:47:03:16:b9:42:80:7c:ed:f5:
6f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DB:62:59:CA:E6:B1:77:1B:01:68:6E:DE:4C:71:24:42:E5:EA:28
X509v3 Authority Key Identifier:
keyid:11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:62:2c:0a:14:41:a7:7b:bb:37:fd:b5:93:b1:41:67:e2:d6:
a3:b6:35:11:e1:3b:4c:21:80:b9:0d:b0:35:c0:fe:78:58:b8:
23:17:73:9c:1d:35:68:de:58:ff:2a:4b:97:78:91:65:c3:7a:
58:01:82:b8:9e:93:7f:fd:b7:61:7d:f7:39:87:70:91:a9:7b:
01:15:48:98:e2:c3:0d:c4:1b:70:ac:35:64:42:de:3e:01:0a:
5f:7a:80:5d:ab:67:8b:15:45:0a:e9:5d:a1:b1:4f:cd:de:a9:
60:20:49:9c:b5:3e:a4:6e:f7:cd:5d:4d:58:2e:b4:3f:c8:23:
ed:29:1f:cd:d6:c4:e6:92:3d:11:ff:e6:d4:6e:94:bc:24:35:
92:e9:03:d6:e1:0c:1f:51:6b:f3:77:01:93:69:3b:06:8f:95:
03:78:28:01:55:0a:18:b6:93:0f:9b:ef:7d:2a:f9:1c:59:97:
35:82:3d:e5:e0:8e:3a:0e:93:60:c5:10:a1:79:94:b9:fa:73:
64:4c:b8:d8:2d:51:94:cf:db:0b:0e:2e:87:b8:e3:58:f0:68:
a4:48:6d:1e:26:d8:22:09:d1:c4:26:77:9b:a0:21:95:fc:eb:
2f:9a:a7:65:31:d0:fd:4a:f7:ed:72:09:84:ba:59:f1:5e:0e:
6b:d7:0b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:58 2026 by rpki-client