Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
File: EasXfkpP_uueof01dmw7iocxHeg.mft (raw, json)
Hash identifier: D+7D56RhjT6my2PswnOH0YOnlIBVqV1xdtvIh1O0wbo=
Subject key identifier: 85:97:C8:96:81:5F:BC:09:F4:B7:1A:C7:2B:00:CC:A0:D2:92:1F:E7
Authority key identifier: 11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8
Certificate issuer: /CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
Certificate serial: 019CAAFD5D15955EA9A441B5DF8F3AD935E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
Manifest number: 078D
Signing time: Sun 01 Mar 2026 20:00:56 +0000
Manifest this update: Sun 01 Mar 2026 20:00:56 +0000
Manifest next update: Mon 02 Mar 2026 20:00:56 +0000
Files and hashes: 1: EasXfkpP_uueof01dmw7iocxHeg.crl (hash: 1AF2+mDqUbUl0qhC92b7sK+eHzF+8gUaR2TSzpC5RFM=)
2: pOa9KIHkvR1N9UVxd0Y5yCq1Nbk.roa (hash: 1RmAXKNphGOVS4U4lNBANNahDEgoMen7DHDul6xwB5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:5d:15:95:5e:a9:a4:41:b5:df:8f:3a:d9:35:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8
Validity
Not Before: Mar 1 20:00:56 2026 GMT
Not After : Mar 2 20:00:56 2026 GMT
Subject: CN=8597c896815fbc09f4b71ac72b00cca0d2921fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a6:b4:b2:1c:ce:91:ac:ea:86:3e:15:bb:34:
a0:b4:57:29:c8:d1:77:9a:02:2c:d3:ad:09:55:c6:
02:80:2a:73:c7:51:5c:37:a5:01:e9:10:ba:38:f0:
c9:20:e9:80:33:f0:61:eb:bb:2b:df:86:bd:32:9e:
a5:4c:ce:12:50:3d:bd:a2:94:5a:58:0f:a9:05:9a:
be:03:21:62:b0:05:63:f1:68:e1:47:dc:84:e6:03:
23:95:11:8b:da:69:85:47:0b:f1:9e:64:a5:10:a4:
4f:67:ab:92:f2:85:51:4e:55:17:69:e0:74:71:2f:
e3:24:7f:ac:0a:fd:c8:ac:83:53:49:d1:08:a2:38:
bd:33:72:af:0d:f8:06:63:29:4a:76:ef:f2:ee:64:
89:4c:fc:18:32:d8:db:e2:8c:85:6f:8b:65:37:dd:
b4:d0:5e:74:2a:de:1e:f0:be:8e:cb:8a:c9:9b:e3:
7f:b7:a0:fb:d4:50:95:4a:22:ce:49:97:4b:3d:7c:
e9:a2:1e:15:fc:27:f8:95:9a:80:fe:cb:f0:97:1e:
8e:5b:a8:31:36:19:ee:0f:4b:29:91:a2:fd:a9:67:
c6:7d:c0:22:79:10:7d:92:f5:43:25:f7:41:58:f3:
96:83:f8:aa:31:d1:64:53:b4:ab:ea:05:f2:a7:ee:
5e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:97:C8:96:81:5F:BC:09:F4:B7:1A:C7:2B:00:CC:A0:D2:92:1F:E7
X509v3 Authority Key Identifier:
keyid:11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1b:2d:ce:81:61:68:cc:24:a9:ef:50:89:20:0b:85:22:9b:
6e:29:cf:94:b7:85:60:15:04:25:1a:e0:14:ac:a3:26:a7:0b:
08:7d:70:9c:89:22:82:9a:1d:2c:fb:49:38:43:55:6b:79:6a:
4e:ef:27:dc:eb:9e:73:b6:90:2c:06:78:56:6b:f5:19:70:a7:
77:6a:71:86:be:96:05:82:3e:78:ed:62:48:ac:e8:17:ba:58:
11:65:1c:68:3e:62:27:2b:40:9c:94:3b:cf:e7:69:de:dc:44:
7b:e0:58:74:eb:49:c1:df:42:ea:22:b1:16:aa:33:a5:ea:9c:
13:a4:70:b9:90:ab:f5:34:46:83:da:fc:c9:09:1d:dc:c9:a7:
74:f4:5d:1e:a0:42:62:26:d1:eb:8d:6a:94:87:ce:d8:fe:15:
7d:7c:a6:60:1c:d8:4c:b8:9a:b7:25:e2:c1:0b:ea:c7:e7:43:
68:e1:55:70:ed:c7:d2:b0:b9:0c:36:21:a0:a4:47:4c:cc:b5:
fe:66:55:3c:72:6c:4d:1b:29:e9:59:f5:7f:1f:63:43:45:cb:
cb:8f:2b:67:4a:57:10:33:01:c4:98:6c:40:58:ff:b2:37:4e:
e2:13:68:21:3f:7c:fe:19:87:2b:4d:e1:2b:62:71:6a:44:df:
23:9e:06:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:12 2026 by rpki-client