Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.mft
File: 64JTR370B4ekh0qzFSNEcKeBRzE.mft (raw, json)
Hash identifier: E1RddL/Fo+DTcfUIEsj00yIbl++pY26Qk3Nw2RPFrdw=
Subject key identifier: 19:23:C6:12:3F:8A:FB:7F:65:12:A9:03:27:53:AD:2E:C8:AE:EF:17
Authority key identifier: EB:82:53:47:7E:F4:07:87:A4:87:4A:B3:15:23:44:70:A7:81:47:31
Certificate issuer: /CN=eb8253477ef40787a4874ab315234470a7814731
Certificate serial: 019CA97C7AF45A7C53FA5882B52FAFA2677F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/64JTR370B4ekh0qzFSNEcKeBRzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.mft
Manifest number: 74
Signing time: Sun 01 Mar 2026 13:00:33 +0000
Manifest this update: Sun 01 Mar 2026 13:00:33 +0000
Manifest next update: Mon 02 Mar 2026 13:00:33 +0000
Files and hashes: 1: 64JTR370B4ekh0qzFSNEcKeBRzE.crl (hash: fK7zJWmMWKcNjZaVb964ZrI1pKAmknKNP94wpPGwp2I=)
2: GjVB6VNfky3Cv5QhaFAqU2u9HJ4.asa (hash: kqdn8mHVdB0J+vYDLZ9IAW32CYuXvCsidQRkLRwVd0c=)
3: c0G-pi-MHoUVy10JBLyR5eJ9LDE.roa (hash: DZTMStTrvuwcy5k73Rjjqjnb39nj0Wc3hKlmSRtn5ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/64JTR370B4ekh0qzFSNEcKeBRzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:7a:f4:5a:7c:53:fa:58:82:b5:2f:af:a2:67:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb8253477ef40787a4874ab315234470a7814731
Validity
Not Before: Mar 1 13:00:33 2026 GMT
Not After : Mar 2 13:00:33 2026 GMT
Subject: CN=1923c6123f8afb7f6512a9032753ad2ec8aeef17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f9:d8:33:d5:29:99:1a:b3:ad:47:39:5a:a9:
69:b0:4c:3a:94:80:8a:9b:cf:e4:b0:6b:f9:7f:39:
e8:40:75:d6:99:77:67:d9:74:f7:0b:50:86:5a:3b:
50:24:f3:31:51:e7:9e:dc:53:c1:8c:84:50:97:ad:
36:7d:1b:f6:34:fd:e2:2d:17:7e:ca:7a:93:3c:8d:
36:01:7f:c9:10:ad:8c:c4:f1:4c:08:1d:b4:2b:1c:
72:ae:1c:96:4a:e3:11:61:33:2e:24:c7:40:56:c3:
ba:80:b5:d0:b1:47:e6:8b:c0:e4:f0:38:8f:44:1b:
6a:aa:ae:b8:66:08:16:7b:3b:0d:d8:67:3a:c9:8f:
62:0e:09:d8:87:e6:b1:08:8b:16:2a:4e:a4:f5:7a:
93:fe:85:5d:77:42:27:be:b5:1f:91:1f:b1:c8:85:
96:a2:e0:6a:f0:9b:90:ff:8e:de:74:15:b4:db:94:
02:cd:58:1d:a2:2c:bc:9e:0b:4f:32:ed:3d:8c:38:
d5:0f:93:92:6e:52:7e:2e:07:27:b1:eb:79:25:83:
a0:95:9c:78:cd:9a:1c:91:58:4d:ea:89:da:24:08:
b2:ea:cd:94:51:19:ec:a9:16:4e:5f:5e:0e:d1:99:
58:13:d3:94:7c:46:bc:7f:1b:bf:1e:7b:57:de:d7:
a7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:23:C6:12:3F:8A:FB:7F:65:12:A9:03:27:53:AD:2E:C8:AE:EF:17
X509v3 Authority Key Identifier:
keyid:EB:82:53:47:7E:F4:07:87:A4:87:4A:B3:15:23:44:70:A7:81:47:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/64JTR370B4ekh0qzFSNEcKeBRzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6f:dc:b0:84:6b:b6:9c:aa:73:3a:e5:65:de:58:26:53:d7:
bd:9f:d9:b5:f0:50:2c:e6:ec:05:84:7e:21:c7:a3:26:4f:92:
8e:84:0f:31:43:07:35:06:78:b9:99:38:2a:7f:1a:0e:02:08:
7e:5e:cb:b0:8e:43:c5:f9:93:e7:21:e1:4f:93:1a:9c:f8:06:
37:ce:3c:2f:82:5e:60:a9:23:02:5d:c0:ea:92:73:11:12:14:
e3:a7:72:25:a3:1b:ba:35:0e:8c:2d:43:fd:37:d7:e0:f2:99:
fd:6c:4f:91:25:37:cb:8b:28:c6:81:59:bb:a2:b9:6f:09:65:
b1:18:b5:bf:43:cb:f7:63:54:8f:44:cb:ff:dd:5a:b8:1c:e9:
dd:ab:92:ad:b6:94:4b:f8:4e:7f:e3:61:fc:71:83:c1:aa:66:
66:be:dc:3a:2a:cc:9c:84:2f:99:c4:53:32:1f:68:1a:54:4d:
10:9a:4e:de:b5:2e:2e:61:32:d3:ef:d7:21:a1:09:65:6c:4e:
bf:25:65:4f:f4:fd:09:f8:63:9e:96:79:11:32:00:0a:59:b9:
45:fa:56:86:02:90:a5:68:70:90:33:9c:e3:6f:6c:0c:ec:c6:
95:07:85:03:88:d1:6f:4b:a7:8a:14:23:c6:1d:f5:6e:2c:a5:
ef:2f:c1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:06:18 2026 by rpki-client