Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
File: r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft (raw, json)
Hash identifier: MSAlJvWTOj4/AA14IVZgkpXyWe6Y5XFbGtxJ7A4uvwE=
Subject key identifier: 1B:D3:66:39:85:83:84:B7:D7:03:9C:01:91:1C:A8:9B:78:36:86:59
Authority key identifier: AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
Certificate issuer: /CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Certificate serial: 019F1AFA6C2B0470BF791DB3134A599496F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
Manifest number: 1988
Signing time: Wed 01 Jul 2026 00:00:47 +0000
Manifest this update: Wed 01 Jul 2026 00:00:47 +0000
Manifest next update: Thu 02 Jul 2026 00:00:47 +0000
Files and hashes: 1: L-zvgoeGr5QCNNKdFrigYiUThmw.roa (hash: 5dCIcepW4WjNJw8oLPf6dUnoQSabbeGPDqnNUHTDSio=)
2: QiAgT2HWAVS4RtCxk3EgrUcgIYg.roa (hash: KFQ1WZMAZMiBqbCBbEMvQWQem6/MoMp+dWHnCpqq7zE=)
3: r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl (hash: wtodXlw1ef90zegabkEtW89qV1+bjUZxpmXGbsQg/fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:fa:6c:2b:04:70:bf:79:1d:b3:13:4a:59:94:96:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Validity
Not Before: Jul 1 00:00:47 2026 GMT
Not After : Jul 2 00:00:47 2026 GMT
Subject: CN=1bd36639858384b7d7039c01911ca89b78368659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5d:c4:84:9b:bc:5c:91:bc:2b:70:6b:65:3c:
a9:63:31:f8:ee:86:fd:dd:d1:57:8a:d8:a8:f2:c3:
aa:85:ad:c0:40:f0:62:bc:ba:93:77:7b:0a:4e:43:
79:d4:4a:73:c4:2a:28:0e:bc:8c:fd:a6:60:8d:45:
d0:b0:21:6a:63:cb:7a:71:df:da:01:00:f9:f3:80:
47:ff:e1:e3:42:40:77:b4:23:9a:51:c1:58:57:9b:
48:68:51:d0:7b:2b:b6:8d:77:22:e2:b1:f4:16:25:
9a:47:05:e5:f0:d7:df:be:ae:e9:03:54:1f:42:8c:
d3:2e:cf:01:19:86:05:9b:7b:f8:6c:ab:54:53:cf:
a7:30:2c:2e:87:fb:29:9c:9c:9e:a2:6d:d6:16:fe:
e2:22:9f:b9:a8:b5:ee:2d:be:f0:49:89:69:6c:76:
3a:5e:06:45:12:ca:76:44:aa:51:2a:09:54:c6:dd:
eb:32:12:47:5a:99:9d:71:fd:9a:23:5e:fa:7b:18:
6f:66:e8:f2:e2:47:3d:f6:c4:09:86:1b:e1:37:c3:
15:c8:b7:66:44:27:38:4b:94:20:77:90:39:b4:b2:
9c:4b:f5:ad:3d:92:8e:c9:cc:12:2a:cd:2b:c2:cc:
ac:15:e3:b6:41:01:d1:20:b6:70:a7:d1:53:39:47:
2c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D3:66:39:85:83:84:B7:D7:03:9C:01:91:1C:A8:9B:78:36:86:59
X509v3 Authority Key Identifier:
keyid:AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:16:ea:b4:67:6a:57:07:e3:f0:13:c7:b2:44:f2:2a:c1:6d:
e6:8f:e6:b1:9f:34:07:9f:d2:fc:70:5e:35:13:eb:dd:3d:2a:
4d:1a:2d:6d:1c:44:3e:fb:03:c3:a2:38:cb:3c:09:04:88:86:
2b:b1:c8:e5:4f:78:44:59:33:8c:15:54:63:f9:0e:7e:39:93:
b8:64:e2:ae:b1:a6:fd:5a:ab:83:09:6f:c8:21:3d:91:8c:c3:
4d:34:6d:9e:da:59:1b:af:ab:64:de:1d:c1:5b:34:63:10:f5:
a0:5b:13:c7:e8:e6:19:5c:61:8e:16:10:69:ae:9b:db:cb:3c:
c2:36:0d:bb:a7:6c:db:6a:06:58:27:65:9d:9a:55:e9:04:1b:
07:ac:39:5f:04:28:51:1a:f5:da:2d:0f:a0:07:d0:3a:35:76:
2c:dd:ba:11:54:29:8f:42:b6:3d:73:40:22:11:9e:87:a2:3e:
66:8e:7e:4e:2a:65:fb:5a:5e:78:33:b3:60:5f:17:a7:af:60:
20:f4:d3:dc:91:df:77:6c:2f:d7:0d:49:cc:18:d5:f8:20:42:
fc:17:41:ef:d2:a3:8f:bd:05:a0:b7:8c:bf:73:7b:7b:60:9c:
62:9c:9a:ea:70:18:87:2a:18:11:6c:9e:68:02:fe:ba:0c:bb:
9e:4f:d3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:36:42 2026 by rpki-client