Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
File: eZNZZNoXA44j06SJCaE6JfsOWOs.mft (raw, json)
Hash identifier: Q/9UHBZtNlklo/NcRTGI9jTDNofkTEZqEH6d4sUFsXM=
Subject key identifier: 1D:63:20:5B:5B:55:3A:F6:AD:4C:2B:07:AD:F4:44:48:F4:C7:C9:05
Authority key identifier: 79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
Certificate issuer: /CN=79935964da17038e23d3a48909a13a25fb0e58eb
Certificate serial: 019CACB4AEBDD217FEFEBECA69050C8F70B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 04:00:48 +0000
Manifest this update: Mon 02 Mar 2026 04:00:48 +0000
Manifest next update: Tue 03 Mar 2026 04:00:48 +0000
Files and hashes: 1: FnCe4GQUHfME91aEBmjNKoeoN3E.roa (hash: 2f0BNR92jRHqrOKp3b4PoOH7gnturQoCE8376hKSgYc=)
2: eZNZZNoXA44j06SJCaE6JfsOWOs.crl (hash: S/c5rI4bzy7/fjDe8P+vY9vVx0xy3ofJfN4QnpnjHYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:ae:bd:d2:17:fe:fe:be:ca:69:05:0c:8f:70:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79935964da17038e23d3a48909a13a25fb0e58eb
Validity
Not Before: Mar 2 04:00:48 2026 GMT
Not After : Mar 3 04:00:48 2026 GMT
Subject: CN=1d63205b5b553af6ad4c2b07adf44448f4c7c905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1b:58:63:48:e2:cf:47:1a:2d:95:8a:24:bd:
42:45:fb:00:2b:f2:12:3b:cb:35:2a:f7:33:80:7f:
82:21:e0:6b:12:83:30:4c:7f:87:70:64:90:e7:5b:
bd:c5:44:22:6b:d6:d6:78:b3:3c:5a:92:44:be:3f:
bc:ec:bc:09:e8:72:a9:6c:68:3f:e9:7a:f4:29:dc:
7e:a2:ad:16:c3:2c:cc:bd:60:2d:9e:de:85:f5:de:
5a:59:ff:cc:29:9e:ed:46:26:7b:86:4c:a5:ab:e4:
e6:82:62:00:dd:9b:0d:0c:b6:40:77:69:8c:7d:af:
ab:1a:9d:b2:76:0f:b7:24:c2:f6:cc:02:6f:02:76:
eb:61:6a:b5:15:3e:f3:b9:20:5c:f0:0b:17:85:5e:
e8:08:01:0d:6e:dd:e8:e8:66:b7:8a:d7:88:c6:4e:
fe:f1:c2:01:46:40:aa:13:ef:5d:3f:03:1e:90:8b:
75:f6:99:f5:f1:59:4f:8d:76:72:e0:10:fa:45:74:
50:8d:1d:ac:e9:99:9d:40:86:a0:1f:01:37:ab:bc:
1c:68:a3:98:ad:d8:3b:43:6c:c9:17:4d:0b:4b:89:
bf:56:a1:7c:6c:12:57:e2:d9:be:6b:5e:d1:eb:6e:
25:b0:76:e1:ec:c3:18:a0:78:86:7d:f1:63:21:f5:
33:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:63:20:5B:5B:55:3A:F6:AD:4C:2B:07:AD:F4:44:48:F4:C7:C9:05
X509v3 Authority Key Identifier:
keyid:79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:8d:bf:5c:42:83:74:2b:53:95:c1:cc:70:dd:c7:51:c9:0b:
1b:bf:0a:03:b6:a4:c9:b0:7a:44:b3:21:e0:9b:26:6a:71:2a:
9f:f2:2a:1f:8c:35:9c:d6:e2:12:d0:fe:a4:19:45:ef:35:fb:
91:0d:e5:f1:4c:63:87:d6:fb:ab:5e:4d:cd:80:ef:e0:77:cc:
f7:f3:81:e4:48:fd:76:d2:ce:74:f4:8d:a3:f5:9f:78:1d:ba:
d5:2a:58:b4:3c:83:08:86:f5:f5:67:4f:2b:b0:e7:82:a7:8c:
99:10:ea:0b:52:6b:68:bd:e7:b5:4c:0e:0d:b3:f9:8c:bc:db:
c9:f1:76:c5:95:cb:07:9a:46:45:a4:d4:a2:df:dd:84:b2:d6:
2f:5c:04:3f:3f:3b:10:a0:83:96:0c:67:71:16:1f:00:33:06:
99:4e:80:06:87:da:60:76:63:dc:73:55:ae:b8:99:f7:77:0f:
56:9a:68:9e:87:9a:35:24:dd:2c:cf:14:96:bd:fc:61:06:d4:
24:1a:e8:2c:48:4c:b2:77:11:51:a3:82:17:0a:be:4e:a0:4f:
33:2e:aa:39:21:86:ab:bc:d6:12:05:37:98:b6:a6:95:75:40:
33:58:c8:cd:53:b7:17:86:f6:7f:d0:e3:38:c7:ef:2e:ff:1a:
3a:0f:8f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:00:52 2026 by rpki-client