Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
File: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft (raw, json)
Hash identifier: jYoVOPcHRNzP0P+OJxjL+gQZ0gi4FnLNMjBi/IwPwtU=
Subject key identifier: DD:F7:74:7E:D0:D5:F5:F9:71:A7:96:26:D5:77:77:25:F2:6A:D1:17
Authority key identifier: 11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
Certificate issuer: /CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Certificate serial: 019CAA213856EBB92A3BF6C986454DCA97B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
Manifest number: 16F4
Signing time: Sun 01 Mar 2026 16:00:29 +0000
Manifest this update: Sun 01 Mar 2026 16:00:29 +0000
Manifest next update: Mon 02 Mar 2026 16:00:29 +0000
Files and hashes: 1: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl (hash: SKbfUVwI7F4BRWeUnxzKUTHBMkof/lHQC02JFr8hyNM=)
2: XHX6uA0vFND00gt2A2M8M6c_H2E.roa (hash: 0mS0wIrGW0SE8AZb8eImudM9dWAJb+YE0EwH1fJXNI4=)
3: Zn4NXMzR7VLtqK7XqBh-tq7jgUI.roa (hash: 3izC3/OYAiljeSsZynRDCUD3K7xrbO6bhr3QoS3ybSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:38:56:eb:b9:2a:3b:f6:c9:86:45:4d:ca:97:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Validity
Not Before: Mar 1 16:00:29 2026 GMT
Not After : Mar 2 16:00:29 2026 GMT
Subject: CN=ddf7747ed0d5f5f971a79626d5777725f26ad117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:81:9c:75:03:69:2c:3f:ff:4f:62:ba:0f:
b3:27:20:31:91:e6:99:b0:e9:8a:91:78:fd:b4:69:
11:12:4f:8c:ba:23:cd:46:2f:45:03:2a:a4:97:b0:
57:47:b7:4f:1e:ae:0a:3f:82:04:5d:6d:f0:67:ec:
f3:2a:8a:73:f8:16:97:d8:81:af:ad:6c:90:6e:c2:
6e:63:5c:79:43:b4:b1:d3:5b:14:e7:62:49:61:82:
6f:1c:d0:c2:0f:fa:89:6a:e0:76:96:54:a0:70:b0:
87:be:d6:c6:93:37:e2:18:58:07:54:3a:b1:68:62:
0f:55:d6:e8:a5:e4:dc:3e:af:44:6c:90:99:68:d6:
c2:79:e8:13:82:6d:69:02:36:3c:64:37:cc:93:e6:
78:97:26:83:1d:73:6e:42:a6:d8:47:9a:ba:20:52:
cd:a1:b2:08:68:c2:2e:61:27:bc:48:a4:f6:ff:0f:
96:bc:3a:03:c3:f3:93:37:29:b7:4c:1f:de:e9:fd:
06:dc:c7:ce:66:bd:39:a3:da:74:4f:01:d8:21:34:
f0:eb:ea:2e:17:d3:47:d8:7c:92:4b:89:e5:4c:c7:
f7:7f:37:40:d3:14:d5:42:f2:a8:8a:37:e8:0a:b3:
eb:02:4e:dd:58:f4:fa:fa:c6:cd:27:7f:5e:f6:67:
b5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F7:74:7E:D0:D5:F5:F9:71:A7:96:26:D5:77:77:25:F2:6A:D1:17
X509v3 Authority Key Identifier:
keyid:11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:31:8c:ab:8c:6d:37:e1:25:6f:87:ee:55:af:cb:01:7c:06:
3a:7d:4b:e1:f8:e0:b8:33:2d:7e:a7:9d:77:30:ad:86:6b:ff:
06:ed:d5:30:fa:73:77:69:da:57:27:4b:6c:e7:25:d9:bd:d4:
f4:14:64:92:7b:97:aa:f9:7b:17:8b:85:59:33:32:64:2d:e3:
13:65:1f:b5:a5:d7:81:2d:85:18:e8:06:04:34:f7:2a:fd:fb:
52:d9:46:e7:c8:02:c7:b4:af:6f:20:66:45:0b:93:9c:01:a4:
e3:57:5e:ae:16:04:b4:89:46:5b:af:41:c4:3d:5b:8b:40:81:
e7:42:90:36:a1:a7:b3:21:5a:d2:10:48:95:0a:2c:2a:74:c2:
e4:0e:c8:31:24:69:ca:e4:00:ee:66:90:64:6c:cd:51:82:ea:
39:df:37:49:0f:e9:9d:ba:14:54:c1:16:bd:8a:49:53:00:55:
eb:21:f9:53:a3:f9:72:7c:6d:7b:dd:32:43:fe:c1:d7:bb:45:
43:37:19:b5:ec:51:b8:a6:f7:e7:35:44:2b:1d:78:15:32:5d:
c7:fc:04:c1:ed:92:a7:81:63:66:d4:f1:bb:18:0b:8d:2a:e4:
f0:bc:f6:a4:a4:01:ca:56:d0:e2:dc:37:0e:78:41:ca:c3:bb:
1c:5c:44:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:18:59 2026 by rpki-client