Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft
File: EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft (raw, json)
Hash identifier: NKj+BKAZQat0en3Oyy/C8bnYVkP4p/dHDzAUY5hf2wQ=
Subject key identifier: 1A:F7:F7:AB:38:AD:14:44:D9:E2:5B:D9:71:D9:4A:6C:4F:30:85:43
Authority key identifier: 12:A6:28:50:1A:F6:5C:F5:FF:39:70:F3:12:34:14:C6:B8:0C:C0:A9
Certificate issuer: /CN=12a628501af65cf5ff3970f3123414c6b80cc0a9
Certificate serial: 019D9AE38D4794C9CA17DD0BDBDC41AF2CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqYoUBr2XPX_OXDzEjQUxrgMwKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 10:01:37 +0000
Manifest this update: Fri 17 Apr 2026 10:01:37 +0000
Manifest next update: Sat 18 Apr 2026 10:01:37 +0000
Files and hashes: 1: EqYoUBr2XPX_OXDzEjQUxrgMwKk.crl (hash: eBSqS+SIpX0pUroO6yRelKqzuiY7kdMpn+AZsOftAFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EqYoUBr2XPX_OXDzEjQUxrgMwKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:8d:47:94:c9:ca:17:dd:0b:db:dc:41:af:2c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12a628501af65cf5ff3970f3123414c6b80cc0a9
Validity
Not Before: Apr 17 10:01:37 2026 GMT
Not After : Apr 18 10:01:37 2026 GMT
Subject: CN=1af7f7ab38ad1444d9e25bd971d94a6c4f308543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d8:4a:28:18:b2:17:f7:61:85:b4:21:0a:98:
d6:8d:c1:0c:80:4e:f6:f4:d0:38:08:52:33:1c:21:
6e:38:01:1d:ef:d1:8c:a0:a4:83:b9:80:b8:53:14:
d2:60:48:70:58:e8:24:86:cd:09:dc:7d:59:5e:46:
2a:06:d9:69:c3:b8:8b:4f:1e:ed:a2:19:fe:5a:45:
2b:2b:15:e9:58:04:8b:0a:1e:45:f2:46:df:1c:6f:
af:13:62:96:e4:fa:d0:d4:d6:3b:3a:67:18:2e:50:
4c:0a:9e:bf:11:9f:84:0a:34:76:e7:c8:c9:e5:27:
bb:63:32:99:3e:e7:2e:a8:8b:ec:d1:2c:f4:48:4b:
62:cd:1a:31:4b:00:60:14:67:90:39:f8:f1:ca:2b:
80:14:27:43:12:9d:e1:5a:a4:e6:6a:97:ce:f6:a0:
72:82:b0:25:d4:83:4e:c7:27:89:06:6c:70:b9:55:
ae:6a:90:63:07:7f:4a:03:b7:d5:0c:9f:25:fd:8b:
a3:05:5b:5c:5c:0f:3e:98:45:14:6c:f0:be:90:78:
88:f1:65:55:80:c5:3b:c7:80:53:d5:78:49:41:dd:
35:8a:f4:bb:2c:d3:b0:20:f9:a4:d5:26:2a:0d:0a:
70:25:c5:39:00:b5:0d:ac:c6:b9:73:c9:ad:ca:44:
15:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F7:F7:AB:38:AD:14:44:D9:E2:5B:D9:71:D9:4A:6C:4F:30:85:43
X509v3 Authority Key Identifier:
keyid:12:A6:28:50:1A:F6:5C:F5:FF:39:70:F3:12:34:14:C6:B8:0C:C0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqYoUBr2XPX_OXDzEjQUxrgMwKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:29:4f:e8:1a:3e:b3:6c:f6:f0:ca:7d:31:50:61:d0:69:50:
0b:4b:29:49:1a:88:15:ea:6d:38:97:76:12:ac:df:17:b6:71:
fb:2e:07:fb:c9:df:6c:bd:88:e0:09:3e:06:7b:dc:61:15:9d:
37:69:20:7b:39:52:ba:c1:91:b6:3f:33:81:ae:77:1b:b0:bf:
d2:e9:40:64:15:87:ee:24:3b:87:88:0f:c8:2b:2c:6d:ae:b6:
76:e9:51:ba:ce:eb:cb:70:53:08:ef:77:b2:66:fa:f0:97:83:
0c:1c:37:0d:57:31:75:af:56:b5:30:87:0a:5f:67:11:25:23:
ab:7e:ef:d4:c0:74:20:af:cb:34:7c:2d:ed:f0:2e:7e:98:c6:
36:5e:83:a7:eb:6a:53:5a:70:62:5a:c4:ee:db:7a:2e:d7:66:
61:cf:75:34:57:79:9d:2d:d0:86:98:d5:31:e1:28:5a:26:fd:
90:c8:73:fc:c6:b5:74:cf:56:41:bd:b1:34:0f:a1:74:5a:18:
1c:21:c4:47:98:e7:47:16:13:96:01:78:b4:6c:8f:8b:5a:41:
4c:fc:2b:5f:84:e9:ef:d8:29:6f:4d:d1:41:6e:03:7f:e3:e5:
f3:64:4d:f8:25:8b:56:e4:f1:fb:17:8c:b2:c4:e6:5f:fa:d5:
ee:d8:5f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:23:10 2026 by rpki-client