
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft
File: eYCaQAStlYNQpkbViavLPP3z7S4.mft (raw, json)
Hash identifier: k9hHk+tK4z1fYeNKogEGyBeEbERsQLszj9qxKmKhBns=
Subject key identifier: F7:9D:32:8E:6F:66:20:1D:C8:20:0D:F9:D3:C6:76:30:C0:95:FA:1A
Authority key identifier: 79:80:9A:40:04:AD:95:83:50:A6:46:D5:89:AB:CB:3C:FD:F3:ED:2E
Certificate issuer: /CN=79809a4004ad958350a646d589abcb3cfdf3ed2e
Certificate serial: 019CAC477F4E6E4E1C05FE18BC51AFF5F656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYCaQAStlYNQpkbViavLPP3z7S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft
Manifest number: 09C9
Signing time: Mon 02 Mar 2026 02:01:32 +0000
Manifest this update: Mon 02 Mar 2026 02:01:32 +0000
Manifest next update: Tue 03 Mar 2026 02:01:32 +0000
Files and hashes: 1: eYCaQAStlYNQpkbViavLPP3z7S4.crl (hash: VRXB9plJ5nux+bc9XqD5TUJsF2QbYlcTO9+fR0321/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYCaQAStlYNQpkbViavLPP3z7S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:7f:4e:6e:4e:1c:05:fe:18:bc:51:af:f5:f6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79809a4004ad958350a646d589abcb3cfdf3ed2e
Validity
Not Before: Mar 2 02:01:32 2026 GMT
Not After : Mar 3 02:01:32 2026 GMT
Subject: CN=f79d328e6f66201dc8200df9d3c67630c095fa1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:66:f2:e1:ce:e8:a3:16:2c:d8:43:c8:9e:
01:30:f4:6d:87:96:88:b9:82:6d:e8:ea:06:80:4c:
ec:ea:17:06:b8:81:c9:44:86:9c:4a:14:a3:97:b4:
16:8f:8c:98:a9:27:b8:26:7c:d3:42:d9:82:a4:a0:
13:8e:a5:ef:9d:52:0b:99:ad:d8:5f:34:fc:0d:4a:
0d:ab:9c:ce:e3:01:74:fa:16:c8:54:9f:45:23:05:
00:f0:7f:91:00:71:9b:b9:bf:11:0b:9f:91:23:5c:
67:14:e0:dd:e0:ae:8c:de:3d:1a:a7:5b:4f:1b:06:
36:8a:4c:83:ba:25:46:34:4e:72:c9:bf:f7:da:53:
bd:f3:14:d8:5a:a1:78:89:0d:d6:ac:36:6e:b2:4a:
68:88:db:6c:53:d1:36:5b:ab:e7:73:60:9f:e3:69:
7e:a1:b4:d1:4a:60:90:66:0b:cf:41:c6:92:26:8e:
0d:a0:a3:f0:1d:48:f7:75:7c:16:71:69:a2:f6:e2:
f2:fa:8e:af:fa:6a:fd:ca:cd:7a:72:10:a5:46:27:
b9:ed:21:7e:0b:e2:b7:88:e2:62:e2:71:29:66:d8:
44:0d:82:08:c5:ca:13:62:45:08:6c:90:b0:7f:1a:
da:bd:9e:10:9a:74:28:f6:11:41:a7:f6:cb:97:4c:
b4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9D:32:8E:6F:66:20:1D:C8:20:0D:F9:D3:C6:76:30:C0:95:FA:1A
X509v3 Authority Key Identifier:
keyid:79:80:9A:40:04:AD:95:83:50:A6:46:D5:89:AB:CB:3C:FD:F3:ED:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYCaQAStlYNQpkbViavLPP3z7S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:70:2b:fc:b6:be:f9:8b:e0:42:03:95:4d:f8:59:40:09:f5:
09:1c:b1:44:07:81:4f:57:63:02:d4:90:47:6f:cc:c5:e3:f8:
c9:60:c9:fc:59:e2:1f:de:1b:8d:83:14:ab:31:79:73:17:e3:
74:57:18:12:ff:43:c0:84:00:52:10:b8:2f:9a:77:54:b4:dc:
9d:dd:c5:7d:71:15:52:5a:87:58:f1:0d:d0:54:08:7d:3f:6e:
26:44:84:7e:83:b5:a7:25:9a:ee:3b:cb:6c:35:16:01:a6:58:
9b:ec:97:9d:b2:ce:28:a1:18:86:6e:39:0d:6a:ff:47:bb:8d:
f3:0e:e5:00:68:ab:68:6d:1a:4d:71:be:5a:23:aa:b8:f5:b6:
cd:24:3b:ea:c0:7e:90:ec:bb:9a:ad:64:ff:a0:9f:ff:54:aa:
63:8a:bb:ac:35:ca:8b:4e:07:79:db:58:33:34:76:1a:55:96:
8b:ef:a4:da:67:1c:b3:93:a3:21:ec:3e:70:71:d9:ba:cc:01:
54:5b:50:e2:a3:3c:72:58:94:b7:af:be:01:3d:13:a6:fa:b4:
06:2d:18:a7:c6:54:29:36:ba:c3:2b:6f:f8:b8:ad:04:0c:6a:
99:ad:af:71:33:7a:8a:98:41:2e:21:b2:a8:a6:49:6e:ab:89:
49:af:66:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:40 2026 by rpki-client