Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
File: eQ7eZiID9FnpsZbSM4esKeSnxOU.mft (raw, json)
Hash identifier: GZND+Zw046erXYJABX5FkSW11BTmZRXz3djzQwFX+/c=
Subject key identifier: A5:4A:97:0F:EA:1C:12:1E:28:C0:0E:60:EE:AA:E2:8F:5F:F9:DD:B8
Authority key identifier: 79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5
Certificate issuer: /CN=790ede662203f459e9b196d23387ac29e4a7c4e5
Certificate serial: 019CABA209D51BF8C6859583FD544518F9BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
Manifest number: 0515
Signing time: Sun 01 Mar 2026 23:00:49 +0000
Manifest this update: Sun 01 Mar 2026 23:00:49 +0000
Manifest next update: Mon 02 Mar 2026 23:00:49 +0000
Files and hashes: 1: eQ7eZiID9FnpsZbSM4esKeSnxOU.crl (hash: LTTmHZygX98LMr/RgM0WUgYxrBpgRcmhf/IAp55G5Ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:09:d5:1b:f8:c6:85:95:83:fd:54:45:18:f9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790ede662203f459e9b196d23387ac29e4a7c4e5
Validity
Not Before: Mar 1 23:00:49 2026 GMT
Not After : Mar 2 23:00:49 2026 GMT
Subject: CN=a54a970fea1c121e28c00e60eeaae28f5ff9ddb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:64:41:b1:da:d4:82:ba:60:11:b2:c3:d5:21:
83:7a:d9:46:70:ac:0a:7d:19:e3:d5:d9:4c:48:44:
7e:59:36:6a:1b:a6:bf:ee:32:cb:fe:fe:fc:a4:05:
37:51:66:1f:f6:b2:8a:bd:8b:dd:63:a3:07:d4:c9:
47:8e:2d:ca:9f:07:87:4c:07:f3:fc:e8:63:e0:1d:
77:f3:04:1e:0c:c6:f9:57:7d:82:31:fd:a9:76:81:
55:0a:c8:e6:08:1f:06:fa:15:94:10:15:6a:96:f7:
3c:4c:18:7e:2c:51:e6:ea:e2:8a:6e:2d:8e:3a:42:
70:56:1f:79:03:0c:92:69:cb:e8:9e:fb:2f:96:5e:
b5:ac:df:0c:5a:58:07:3c:97:98:b1:6f:4f:50:56:
db:43:d5:eb:bf:c5:09:50:72:c5:10:93:9c:40:c2:
27:74:a7:a7:3f:99:53:68:ae:ef:09:4b:86:e7:ad:
5a:89:d9:dd:95:c0:00:55:34:25:f2:58:da:a8:e6:
19:ab:28:01:dc:9b:ef:ff:6b:2f:9c:94:b3:2f:e3:
0a:09:6e:71:e3:90:7a:28:23:c2:9c:cf:4e:72:a1:
4c:7f:bf:05:8c:43:87:d4:39:de:ed:b0:d4:f7:69:
09:5c:0c:0f:74:20:dc:13:cd:d6:91:b8:76:8f:80:
b8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4A:97:0F:EA:1C:12:1E:28:C0:0E:60:EE:AA:E2:8F:5F:F9:DD:B8
X509v3 Authority Key Identifier:
keyid:79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:fb:28:4d:47:2d:18:18:ee:1e:fc:d7:c4:01:2f:ed:4e:43:
ab:fb:7e:cb:d1:61:38:85:cd:39:f4:a2:23:f9:10:09:63:a2:
01:9a:95:ef:31:5b:6e:25:a8:f8:f2:bd:c8:32:1d:02:38:5c:
59:c6:f4:0b:32:c8:71:5c:c6:3e:eb:ed:22:c3:bf:2f:ff:d9:
f2:75:88:ae:98:da:ec:d0:66:bc:8f:e0:3c:17:9e:ef:36:2e:
99:03:95:48:68:28:c3:fd:72:ce:c1:55:6d:67:f9:20:79:12:
7c:ce:32:2c:83:f9:bd:a6:33:87:49:29:6a:b3:d9:0d:c6:ee:
c7:fe:8f:00:b1:3f:2e:c5:71:dc:de:11:0d:d9:f3:e2:b4:93:
e0:67:d2:86:9b:38:bd:d5:bb:e2:65:80:b7:19:e5:4c:8d:ec:
53:2c:b1:21:27:b8:7a:55:58:29:c5:f4:a9:07:77:c5:88:4a:
aa:2d:87:1d:87:9e:9e:a7:b4:22:5f:32:a5:a6:cf:14:f5:52:
02:bb:69:1d:97:46:47:25:43:f4:f9:1f:53:d8:fc:1c:b6:f8:
a2:cb:7b:6a:7f:81:2f:55:53:50:b5:d5:35:8e:7d:ca:31:e8:
54:20:74:6c:81:ac:6b:5a:a6:58:de:17:8c:cb:19:2c:c6:18:
8e:24:09:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:38 2026 by rpki-client