Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
File: EXoEqScBnDzi0MnbOjFJd6Cns1w.mft (raw, json)
Hash identifier: KYZPh2m2/8XQnnWvjLmeE7f3p+r4Ini0e5/R2JMTajA=
Subject key identifier: B9:D5:D4:A0:42:A5:6F:D0:5A:8E:04:FF:2E:7E:77:4B:62:01:72:82
Authority key identifier: 11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C
Certificate issuer: /CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c
Certificate serial: 019CABA1E20BC5F9F093A6C911A343402A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
Manifest number: 0516
Signing time: Sun 01 Mar 2026 23:00:38 +0000
Manifest this update: Sun 01 Mar 2026 23:00:38 +0000
Manifest next update: Mon 02 Mar 2026 23:00:38 +0000
Files and hashes: 1: EXoEqScBnDzi0MnbOjFJd6Cns1w.crl (hash: TXpj8vImaAkEeguIuZE3JYPiv2z5QIlA/jeGUJBVBBw=)
2: TJRxaYOzjaCJSFBaaOb3EycksAs.roa (hash: eOSY9kDDMBMljbLW+yYUj3pzdf96TWtB5cU/Op3wa8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:e2:0b:c5:f9:f0:93:a6:c9:11:a3:43:40:2a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c
Validity
Not Before: Mar 1 23:00:38 2026 GMT
Not After : Mar 2 23:00:38 2026 GMT
Subject: CN=b9d5d4a042a56fd05a8e04ff2e7e774b62017282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9b:d7:7b:8c:65:43:61:68:d5:b4:27:e8:56:
1d:eb:68:d0:c1:71:af:aa:4d:29:a8:c7:8c:77:90:
52:ba:67:32:36:3c:da:58:91:bf:23:f0:75:a8:72:
34:d7:ba:87:a1:93:56:61:25:96:72:06:25:ba:18:
38:11:31:c2:fd:e0:56:c1:67:fc:fe:26:d9:91:ba:
2b:08:79:3f:5a:8a:ef:73:2f:f9:9d:db:de:2e:db:
75:8b:34:ef:3f:db:19:de:3a:6e:5a:54:ad:31:d1:
07:61:a0:5c:9d:f5:12:c2:70:9a:c4:d9:42:e6:3c:
09:c4:b9:2a:86:9d:86:7b:c5:f3:0f:cb:3c:86:bb:
69:aa:2a:0a:b0:74:07:a6:20:4c:63:fb:58:09:a9:
5f:41:6d:04:e2:c5:45:f8:49:25:71:71:8b:6e:ae:
92:5c:9c:8b:d2:35:d6:2a:9e:b5:5f:a7:f1:53:f6:
88:6b:7f:6a:39:4b:2f:cd:44:47:38:b9:09:dc:4e:
ac:cd:8b:ab:b8:4e:d4:33:ad:5c:57:11:29:f8:20:
e3:f0:38:8c:95:72:3d:8f:36:a3:94:4b:ad:74:31:
7e:64:85:7c:9d:05:17:ab:91:4c:bd:00:1f:8b:86:
45:d8:88:9c:0d:6c:92:fc:2e:a4:75:30:90:43:86:
fd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D5:D4:A0:42:A5:6F:D0:5A:8E:04:FF:2E:7E:77:4B:62:01:72:82
X509v3 Authority Key Identifier:
keyid:11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b6:c1:b5:97:ee:13:f4:67:ff:ef:40:18:f6:1a:6b:ba:a2:
8a:47:60:5b:18:83:2d:61:0b:ef:ee:af:a0:8c:ce:2e:ed:25:
1b:65:20:ce:04:1b:1f:3d:3b:9a:5a:4d:9f:9c:3b:89:71:5e:
7e:20:ca:5e:96:22:4e:f2:14:da:96:80:4e:2a:81:b5:1c:3e:
e7:ce:78:e4:37:33:1b:45:67:ab:26:d6:6b:55:4b:2c:38:f8:
c9:e9:0d:11:ea:a7:14:3d:e6:39:2a:a2:ff:de:5d:dc:fb:80:
25:05:b3:67:96:bf:fc:e7:0e:7a:db:2d:cf:da:5b:b2:87:d9:
f6:2a:c2:04:7b:f5:1b:95:af:5f:5f:62:62:9a:8d:5e:7a:91:
4b:a5:e8:49:ce:46:3d:7e:df:c9:3e:1c:33:49:0b:a2:25:6e:
b3:d1:c4:b8:68:1f:23:a1:e5:a1:ef:19:07:41:9e:ed:9d:cb:
c5:13:9e:ef:81:8d:ce:7a:ae:c6:57:b2:10:3b:88:66:99:cd:
c4:0c:e4:3c:13:f3:1f:a6:40:61:bf:98:f4:2e:d0:82:09:07:
c7:7a:02:03:d1:4b:e6:9f:07:c6:f1:3d:c4:ab:88:4e:b4:39:
a4:b0:5c:cc:0a:fa:55:8e:14:ef:4e:ed:db:12:f4:db:0d:31:
35:0d:3d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:28 2026 by rpki-client