Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
File: EiDdK5LaKExjzsRvb2pBwBOpyIE.mft (raw, json)
Hash identifier: W9fwa/Pr99atgG1bRTLFz/3it/aiT6+4vdbIcNT054c=
Subject key identifier: 2A:26:0A:95:68:64:29:61:44:F6:75:E4:D2:EA:FA:E6:3A:D2:3A:4B
Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
Certificate issuer: /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Certificate serial: 019CAA58BBD9E69FA1F4679AC3EDD7C2A036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
Manifest number: 113C
Signing time: Sun 01 Mar 2026 17:01:07 +0000
Manifest this update: Sun 01 Mar 2026 17:01:07 +0000
Manifest next update: Mon 02 Mar 2026 17:01:07 +0000
Files and hashes: 1: EiDdK5LaKExjzsRvb2pBwBOpyIE.crl (hash: jWWBqx6z5vSJ9CeqZJf7OXffeKji/gzJSsuRSjjAvsQ=)
2: M1xpquK399A5wByDEtKHq_wqClk.roa (hash: zVgRyEKABrkhckv/3fAzW08qm0hqJsbaTBszAR7kayA=)
3: kkk3yXE8XoIEDRsGs9EdkpoqcD8.roa (hash: k6wchoXLvZ9SOEunorfauAloLI47oJBy9bourGp1I0s=)
4: muPGRcmARPddaHREVLuAaLLzFEM.roa (hash: 8DfdChKzrQe9Wu4l2fprWgGRtA6D3e1jiM5zqPRZkgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:bb:d9:e6:9f:a1:f4:67:9a:c3:ed:d7:c2:a0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Validity
Not Before: Mar 1 17:01:07 2026 GMT
Not After : Mar 2 17:01:07 2026 GMT
Subject: CN=2a260a956864296144f675e4d2eafae63ad23a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:ba:5b:3e:f3:49:65:0b:34:6a:ee:02:cc:
b2:71:14:c8:d6:2c:23:5a:1f:ea:39:db:69:18:c6:
b8:58:52:7d:a7:1e:e3:ed:41:ab:22:a6:b3:10:3d:
86:64:cc:82:4f:7a:b2:53:40:53:f8:f9:61:1c:21:
6a:1e:05:9d:b4:e5:4a:6b:25:cd:a2:50:d7:1b:47:
9c:7b:96:b5:5a:da:dd:8c:e8:63:e5:28:0d:24:e8:
5a:4f:37:4d:6b:ff:de:4a:40:da:48:2b:56:d5:a1:
2d:b2:f2:ff:08:cf:66:9b:30:8b:9e:74:d7:c7:6f:
1a:26:2c:3d:d1:c5:18:bc:6c:fb:42:d0:c5:73:65:
a9:1d:36:66:a9:6b:b8:10:ac:c4:35:02:8a:19:46:
ba:3e:b4:ec:ea:3b:3f:a7:63:08:88:f8:32:53:96:
63:75:15:8b:dd:d7:64:6b:6e:76:fe:1c:97:10:77:
1f:cc:85:68:86:45:c3:0c:3a:60:46:34:7b:78:44:
51:4f:fc:f3:3d:4b:cf:27:53:83:bc:e2:7c:c3:d5:
4d:a9:75:48:1b:3f:d1:48:35:2e:cd:2f:bc:2f:19:
75:ee:f6:02:e9:4e:0d:22:99:83:1e:a5:6a:b5:65:
a9:94:58:75:03:19:d2:b0:0d:cd:9f:2b:69:c5:b2:
b9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:26:0A:95:68:64:29:61:44:F6:75:E4:D2:EA:FA:E6:3A:D2:3A:4B
X509v3 Authority Key Identifier:
keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d1:73:27:29:27:62:e2:e5:a8:85:6b:e1:bb:62:54:4a:c5:
34:58:c2:1d:cb:6d:de:50:9d:0f:1b:76:c8:30:cd:65:5b:fb:
f1:d3:c7:8c:07:7c:64:8e:30:70:df:34:98:dd:ab:6c:cf:f8:
fb:08:26:77:a0:ba:a9:16:2d:73:d5:0c:bb:18:96:4b:de:bc:
11:fd:a9:5f:d5:79:61:6d:87:c4:9b:fa:66:c9:6b:0f:97:1d:
9a:1a:6b:79:0c:e0:f4:3f:2c:45:77:07:53:02:45:af:e8:4f:
02:70:e4:c0:61:a2:b6:95:4b:fa:67:a1:f3:5c:c7:dc:62:97:
24:ad:2b:6c:0a:57:18:9c:02:ae:50:29:39:ee:86:c0:63:97:
db:73:34:e4:1b:06:e8:de:a3:2b:f2:8a:94:0f:a4:bb:2a:ac:
00:d4:1e:a6:83:8f:87:22:7e:81:04:08:c5:8b:a7:f7:71:d1:
f7:79:5f:98:13:0c:d7:f7:34:69:a8:c1:85:90:6a:0c:3a:17:
65:3c:9e:41:d3:80:9e:38:08:d9:f4:b9:12:50:ff:7b:da:c8:
f0:3d:2c:df:00:a7:f8:54:6b:7e:42:b8:d7:6f:e3:a1:e9:87:
66:66:09:01:8a:ac:db:6f:de:4b:27:f3:c6:29:0c:0e:5b:fa:
8a:d7:37:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:40 2026 by rpki-client