Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
File: EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft (raw, json)
Hash identifier: 25IxE+yH/53Fld8DkghiGTI9Lr6Zbbs746r4gYa2B4Q=
Subject key identifier: FF:4B:E1:F4:79:DA:99:A0:A2:AD:B3:54:B1:2D:9C:A9:08:7A:C0:5A
Authority key identifier: 11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE
Certificate issuer: /CN=110aaf9016a68752fc9132149b91e8fab16e24be
Certificate serial: 019CAC46CDE8D5BF747E7C03F5C8F50EA464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 02:00:47 +0000
Manifest this update: Mon 02 Mar 2026 02:00:47 +0000
Manifest next update: Tue 03 Mar 2026 02:00:47 +0000
Files and hashes: 1: EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl (hash: CFvbukChd9Foh08CFj23yAMqwPvB6RtqslX8s6UypW8=)
2: U_-2UYbUafidz0RvuYiVijfVX6M.roa (hash: ZQqMuemSiQ1z6tjxPqoZVYUGHROLqLybPtB8D6Kleus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:cd:e8:d5:bf:74:7e:7c:03:f5:c8:f5:0e:a4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110aaf9016a68752fc9132149b91e8fab16e24be
Validity
Not Before: Mar 2 02:00:47 2026 GMT
Not After : Mar 3 02:00:47 2026 GMT
Subject: CN=ff4be1f479da99a0a2adb354b12d9ca9087ac05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bf:fc:d8:2d:e4:44:a8:e1:38:3d:4a:28:e9:
36:69:08:fc:13:c1:7e:2c:0d:0e:10:7d:ae:0e:84:
b5:17:62:67:86:50:61:b2:55:05:6d:08:b0:1d:70:
88:d0:0a:02:c1:2e:74:eb:0f:4f:33:1a:01:09:8a:
f9:34:ab:bf:45:df:db:7d:0f:c9:76:5a:65:a5:b6:
f9:2c:c9:61:f2:ab:99:48:45:8f:e4:a8:ba:5a:2e:
a7:88:56:3f:b6:c5:7f:9a:0b:e8:24:23:d3:7d:62:
ef:4f:3f:15:c7:31:78:e4:f0:5d:45:f2:53:ab:33:
43:2b:c1:48:8b:2f:31:8f:d1:de:7b:21:4d:72:c7:
27:57:9f:2e:29:f6:c3:45:d6:3f:19:37:2f:d3:2b:
3c:58:4d:f9:2a:ec:b2:ac:eb:ad:6b:0f:5e:e5:be:
bf:2f:11:c8:d0:d9:d2:13:b0:fa:4e:3e:2d:10:f1:
c6:02:94:6c:cf:2d:04:9e:a2:57:2d:2d:28:a9:75:
43:ce:17:a2:56:ad:4e:fd:60:1f:96:2f:29:92:6f:
f5:51:fe:42:3d:b1:80:8b:d4:e1:b6:d3:9e:c4:9b:
d4:e7:28:27:fa:5c:b9:b3:b8:82:e0:23:47:78:1d:
6b:2d:13:c0:e4:cd:90:cb:dd:ad:ce:2d:9f:c9:f9:
bc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4B:E1:F4:79:DA:99:A0:A2:AD:B3:54:B1:2D:9C:A9:08:7A:C0:5A
X509v3 Authority Key Identifier:
keyid:11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cb:95:fa:91:dc:b5:27:d3:ae:60:f4:08:b7:a5:cf:c2:55:
11:d9:b3:9d:8a:b3:a7:a2:14:07:1e:b5:dc:4e:f3:2a:d9:67:
fc:54:f6:71:85:38:73:00:6c:03:52:3e:81:38:0a:1e:31:02:
5e:a1:6f:54:75:72:35:a2:f8:09:ae:12:b8:c8:2c:12:5a:3c:
1e:70:72:72:2d:b2:82:2c:9f:61:ee:ac:8e:ad:cf:5f:e8:7a:
6a:88:8b:c1:51:8a:25:89:d6:ea:d1:10:96:da:d9:fd:bd:ca:
17:83:db:96:45:74:46:2c:af:af:92:73:8d:ad:a1:35:88:a3:
2b:6d:43:13:12:06:40:ad:26:a4:91:21:c5:27:31:d1:56:d8:
a4:69:47:6b:ea:3b:e5:d8:c6:ff:f8:c0:08:19:ff:82:b5:a3:
38:75:0a:68:41:42:e5:0a:bd:0a:ff:be:70:b0:4a:2a:75:49:
c8:9e:e2:e7:85:72:d2:83:4b:39:69:15:ef:f4:8b:e3:fe:d8:
81:f0:05:c7:4e:92:f0:ff:6b:2a:69:94:c6:b1:af:3b:8a:8f:
d0:5a:54:b7:fc:85:73:69:42:84:b1:81:74:cd:a2:86:3b:65:
24:aa:62:36:3f:90:b3:fb:07:13:cc:c2:95:07:d9:dc:bf:56:
69:f0:5d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:51:38 2026 by rpki-client