Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
File: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft (raw, json)
Hash identifier: I4BtGSNZKug0RMXyHCWJ1mzVcw7sEzxN9Sp89qFBoNU=
Subject key identifier: E5:C3:20:4E:0F:E6:11:0A:13:38:53:DD:B6:EB:1C:1A:B9:A2:D4:33
Authority key identifier: 11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
Certificate issuer: /CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Certificate serial: 019D999908A407A55EA49FF06B945C743EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
Manifest number: 1770
Signing time: Fri 17 Apr 2026 04:00:36 +0000
Manifest this update: Fri 17 Apr 2026 04:00:36 +0000
Manifest next update: Sat 18 Apr 2026 04:00:36 +0000
Files and hashes: 1: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl (hash: uNTzvU7FfBVCb0RiKzwmleiW8EH9XSwxjz3S+EC+H+I=)
2: XHX6uA0vFND00gt2A2M8M6c_H2E.roa (hash: 0mS0wIrGW0SE8AZb8eImudM9dWAJb+YE0EwH1fJXNI4=)
3: Zn4NXMzR7VLtqK7XqBh-tq7jgUI.roa (hash: 3izC3/OYAiljeSsZynRDCUD3K7xrbO6bhr3QoS3ybSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:08:a4:07:a5:5e:a4:9f:f0:6b:94:5c:74:3e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Validity
Not Before: Apr 17 04:00:36 2026 GMT
Not After : Apr 18 04:00:36 2026 GMT
Subject: CN=e5c3204e0fe6110a133853ddb6eb1c1ab9a2d433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:52:4a:b5:05:78:bd:6e:bc:91:79:d7:e9:77:
ae:2b:d1:06:37:37:e0:6b:24:b2:48:cc:4e:8d:e8:
52:ee:b8:34:78:bf:ac:80:ef:4f:dc:d8:68:2a:f2:
b3:f1:31:ec:f2:fc:61:2b:0b:4f:4a:ae:fc:0e:b5:
2a:25:c2:e5:0e:b4:aa:01:a5:db:51:cc:18:f8:f3:
ef:db:26:f5:6c:6d:d4:8f:13:e2:a6:d5:0f:48:f4:
5a:1d:9f:0c:9c:77:29:f2:31:c7:b5:ec:44:9a:33:
48:b3:55:30:ee:32:d6:92:65:08:40:ce:ea:96:01:
2c:fc:b4:97:5f:b0:96:9e:e2:14:dc:57:8b:10:e5:
24:82:89:62:87:3b:6d:de:cf:b9:25:9b:fd:5c:10:
c0:8d:d3:f9:71:e9:dc:b6:b6:db:6f:24:6a:39:e2:
32:51:a1:d0:ff:15:ce:de:d7:78:9b:7a:99:ac:fe:
57:5f:3c:47:d7:45:29:fc:89:0d:e9:be:54:c1:35:
14:82:64:8b:97:1b:e7:8f:42:9e:78:43:f6:03:62:
ec:9c:91:27:bb:67:93:b8:36:df:f9:22:49:7d:48:
60:a3:ef:ed:5d:ec:c6:35:3a:e0:2f:53:57:1e:33:
c7:0f:88:c7:9a:92:12:5a:5e:b8:35:d8:10:c4:6b:
b5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C3:20:4E:0F:E6:11:0A:13:38:53:DD:B6:EB:1C:1A:B9:A2:D4:33
X509v3 Authority Key Identifier:
keyid:11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0f:7a:51:2a:4d:b3:50:f3:bf:7a:d5:f3:eb:90:bd:5b:11:
ec:1c:50:c2:47:b5:34:68:d5:06:f4:66:c6:b3:92:8f:93:f6:
35:2b:82:8a:9a:d7:93:ec:8c:da:4d:9a:0d:78:33:ff:eb:f1:
c9:0a:3a:c8:74:a5:82:89:9e:db:0d:ac:76:54:89:28:08:4b:
03:35:88:0b:21:67:00:aa:57:59:4f:b3:02:f1:0c:38:72:98:
30:8c:4c:63:47:4b:93:29:d8:b6:29:68:2e:f4:b7:f1:07:75:
4e:33:a3:97:54:f2:0d:d3:97:e0:d6:9f:7c:22:22:44:a4:97:
34:f9:b3:93:bc:67:eb:5a:50:4d:e2:99:49:d3:50:61:f0:4e:
bb:f2:55:6b:5c:b3:4a:95:d1:39:d1:fa:41:05:e5:d8:3d:16:
19:ac:ae:51:6e:ba:1d:3b:ad:08:e2:5d:b6:3c:35:70:64:cd:
1c:08:ff:39:37:67:f7:5a:c3:5a:4d:a4:2a:1c:ff:18:d5:08:
0d:f5:af:77:c9:c3:99:03:fe:fd:6e:6c:dd:fd:f9:73:31:42:
1a:41:9e:ae:0b:2f:33:79:72:27:aa:ac:72:a4:b6:2c:81:ab:
77:fe:c7:d1:5a:2b:16:dc:09:b0:39:65:41:38:5c:44:96:9d:
4d:96:2c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:20:23 2026 by rpki-client