Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
File: eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft (raw, json)
Hash identifier: bgp25z2AcAkgXtk6nRmq+US77JGuIGL6O9HXsUuVI0M=
Subject key identifier: 70:AF:3F:31:CC:BB:74:26:95:B0:25:70:7D:BD:76:1C:35:42:F2:F3
Authority key identifier: 79:A4:B1:FB:BA:D1:CB:6A:8B:1C:7D:33:73:7A:D7:2B:CD:9B:8D:9D
Certificate issuer: /CN=79a4b1fbbad1cb6a8b1c7d33737ad72bcd9b8d9d
Certificate serial: 019D3789B4B263C21ACBD9087716C51A0768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
Manifest number: C2
Signing time: Sun 29 Mar 2026 03:01:04 +0000
Manifest this update: Sun 29 Mar 2026 03:01:04 +0000
Manifest next update: Mon 30 Mar 2026 03:01:04 +0000
Files and hashes: 1: MHfXLodJ1lTLubHBUzEu-y-nQd8.roa (hash: v+heG+utge9KSHpg0rUF2i0HpIa/3KcrihN3fHNBOZo=)
2: ad2pJPLMCY9-MtsOQUWfkJzvGjk.asa (hash: znBGDedW1a6RheuPxFAgpjdNY4UU36DMoXaL/AWeESU=)
3: eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl (hash: YzAVPqMSQKxclt08qIgakr5M3jcFeMQzWzCpWubq81w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:b4:b2:63:c2:1a:cb:d9:08:77:16:c5:1a:07:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a4b1fbbad1cb6a8b1c7d33737ad72bcd9b8d9d
Validity
Not Before: Mar 29 03:01:04 2026 GMT
Not After : Mar 30 03:01:04 2026 GMT
Subject: CN=70af3f31ccbb742695b025707dbd761c3542f2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4d:46:81:a5:b8:3a:8e:a3:d0:3c:52:77:df:
f9:ba:dd:5e:d6:97:1f:71:06:ed:54:b2:33:68:d8:
ce:e8:d7:89:35:2e:a4:86:17:51:bc:ee:92:66:60:
8f:2f:e8:8f:99:6b:16:b3:57:ca:45:05:f0:c1:4f:
2b:22:bc:5b:b3:31:03:61:a0:a0:2a:eb:6d:3a:64:
a7:4a:33:26:48:f9:b6:62:15:1a:3b:e4:0d:f6:4f:
a0:87:47:2a:2b:d8:1d:61:e2:f2:1a:39:33:be:24:
8b:d3:31:10:22:26:21:22:e5:be:84:62:78:30:6b:
57:e3:19:2e:a1:b9:dd:9d:75:f5:ec:83:bf:30:16:
f4:ad:d1:0b:45:51:5f:09:a3:c8:dc:94:e9:d3:d3:
cf:10:6f:26:d3:3d:ab:b8:d2:d5:e0:5e:1f:6f:a2:
6a:8e:89:50:03:6a:cd:3f:a5:06:36:2f:bd:f5:5c:
2e:8b:7d:1c:3a:b8:ad:b4:f0:1d:ef:3c:03:37:f1:
d6:af:e5:30:09:5c:71:af:3b:b5:5c:3b:a9:87:a4:
d4:dd:00:b0:ef:bf:f0:0c:a5:06:32:42:c8:15:1c:
15:92:e2:c5:70:d9:8a:c7:1b:e1:13:d5:7d:ae:3a:
a5:c8:ae:f0:80:dc:2d:aa:51:09:dd:da:b9:08:91:
ab:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AF:3F:31:CC:BB:74:26:95:B0:25:70:7D:BD:76:1C:35:42:F2:F3
X509v3 Authority Key Identifier:
keyid:79:A4:B1:FB:BA:D1:CB:6A:8B:1C:7D:33:73:7A:D7:2B:CD:9B:8D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b0:28:6a:3c:1c:1b:0e:18:60:c3:40:e4:6f:f8:cb:6d:cf:
ce:f5:48:7e:2f:e6:64:4c:71:ea:be:18:f1:72:20:3a:85:f7:
9b:dd:fe:87:fd:a8:92:0f:24:9e:25:7b:3c:e3:ed:3d:33:cc:
08:79:18:22:5d:96:ed:d9:16:49:fc:1c:6f:6b:25:34:13:6f:
09:f0:01:8a:05:6b:3b:5d:ca:6e:56:81:4a:14:9d:48:cf:c9:
c7:a7:a0:97:4b:c3:3a:7d:42:98:bb:9c:6d:09:df:cd:b8:cf:
c8:8d:26:11:1c:93:1b:2d:d6:36:83:9f:e1:0c:cd:f1:21:d3:
80:24:7b:f0:c8:ff:d0:ff:78:0e:cd:f7:eb:c6:5e:02:17:f6:
56:6a:4f:d2:f0:21:2e:64:ac:e9:dd:96:3d:b4:53:76:a3:f2:
fb:1a:05:4c:e5:8a:8a:2c:fa:71:e8:bb:05:f2:49:4b:6c:8a:
47:0c:05:c9:e0:09:f0:ee:f6:4f:f5:fe:30:72:0c:be:73:db:
63:5f:30:89:f5:90:35:af:f1:35:6d:d0:8d:da:88:f4:0b:69:
56:e8:90:6a:1d:6e:e2:27:54:36:05:12:3d:86:ed:4b:f0:48:
1a:33:2d:30:20:90:2a:00:d4:91:c0:67:ff:0d:c4:24:eb:cc:
30:81:78:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:36 2026 by rpki-client