Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
File: eKwxY10JG-YVV0MxH-HbfHrzR3s.mft (raw, json)
Hash identifier: OCNRaCeja7tHbgiv63nY2UK87Om3qnNnQ2CEGvbrfHk=
Subject key identifier: 1E:92:5A:CA:11:12:B0:55:DB:9F:C0:EA:D8:50:D1:D5:A2:09:65:18
Authority key identifier: 78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
Certificate issuer: /CN=78ac31635d091be6155743311fe1db7c7af3477b
Certificate serial: 019CC8D1342AD4981BC11C0CC77E48C4E764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
Manifest number: 0CAF
Signing time: Sat 07 Mar 2026 15:01:19 +0000
Manifest this update: Sat 07 Mar 2026 15:01:19 +0000
Manifest next update: Sun 08 Mar 2026 15:01:19 +0000
Files and hashes: 1: VTBtuhupQkN3XNWCGG-SctrmNSc.roa (hash: MVRP12soTEVvkQMP4sWQe+ZD2ED7nGpPqffJ2oNbKlE=)
2: Yx6WCtdaJX-lZhNYpyoP3qTRTWA.roa (hash: SA4NVslryO/GKYfRH6uU7OXQ/zmv533QvWL9j3NGE/I=)
3: eKwxY10JG-YVV0MxH-HbfHrzR3s.crl (hash: x2fxeXC9x0SFQ++lSNLg2ExNseavjsxWZYwp28nsqcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:d1:34:2a:d4:98:1b:c1:1c:0c:c7:7e:48:c4:e7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ac31635d091be6155743311fe1db7c7af3477b
Validity
Not Before: Mar 7 15:01:19 2026 GMT
Not After : Mar 8 15:01:19 2026 GMT
Subject: CN=1e925aca1112b055db9fc0ead850d1d5a2096518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:78:77:68:6d:4a:ea:d9:45:c4:af:75:d8:3d:
77:7d:29:5e:3d:1a:ed:d3:d7:1a:8e:18:df:e8:bd:
a1:12:a0:e1:46:9d:2d:9d:88:0e:a5:a2:1c:3d:42:
77:f9:ba:5b:fb:c1:cb:5d:de:99:66:59:fb:ef:1f:
5a:49:fe:e4:c7:e0:ea:7b:40:89:22:d6:82:24:2b:
06:60:3b:66:b7:7c:0a:64:e2:56:37:7c:91:e5:73:
80:34:9c:10:0a:aa:64:27:51:63:b5:c8:d9:79:aa:
1c:8f:2e:5a:20:f6:71:6c:f4:f1:6e:59:ae:1c:3b:
7c:26:05:42:97:f0:7f:0a:cc:67:fd:70:4e:67:76:
3b:45:54:41:67:38:51:95:23:d4:19:5e:a7:d2:6a:
51:ab:cb:2f:21:d4:fe:e0:97:16:a6:e7:db:6f:b6:
ac:a2:d9:2f:05:2f:e0:54:b9:59:3a:e2:f0:bf:97:
bb:89:23:14:3c:30:93:e7:9f:e7:2e:ad:6b:12:ed:
d7:f2:48:28:67:b8:6a:87:97:ea:98:fd:e4:36:2a:
47:52:91:c9:e0:1f:18:cc:95:a4:6c:13:de:5b:9c:
b5:e4:fa:ed:25:5f:11:7d:98:a9:b7:86:da:5f:67:
a1:51:d0:3d:bb:2f:bd:e0:1e:cd:f8:39:d7:b6:69:
87:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:92:5A:CA:11:12:B0:55:DB:9F:C0:EA:D8:50:D1:D5:A2:09:65:18
X509v3 Authority Key Identifier:
keyid:78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c1:0e:8c:48:64:23:89:ce:c2:41:f8:0f:49:53:c5:50:27:
04:d6:87:80:32:0e:46:43:ad:12:4d:2c:10:6c:f7:da:31:f3:
0a:32:42:d8:a4:f6:73:55:f8:59:27:c7:3e:6f:e2:ad:2c:54:
bb:4e:38:90:55:45:06:5b:49:73:1e:2a:f3:d9:cb:19:6c:4b:
4f:cc:e3:d6:e4:63:da:a9:d4:52:81:d4:ee:14:ac:61:8e:40:
8c:3b:92:39:e5:e9:1b:60:c9:70:1b:2a:f6:ab:2e:af:e1:85:
29:43:20:2b:82:93:72:1a:4d:34:9d:db:f6:74:99:d2:20:ed:
b5:c3:11:6a:bc:50:05:2b:e2:56:a8:e1:b0:c4:fb:09:48:dc:
7f:c2:a6:55:e5:ad:aa:cb:5f:bd:6f:dd:86:86:04:4f:06:ce:
de:0f:2f:52:64:f8:f7:b1:7f:f9:5d:6b:33:9b:a7:17:73:32:
eb:37:5a:56:4a:81:ab:6a:57:e7:ad:35:15:5a:dd:77:37:f1:
ba:0e:3b:3b:32:33:3a:fe:39:06:a4:ea:83:8e:5f:77:c1:1a:
ce:9c:b2:87:0c:25:1e:0c:3e:22:79:3e:d9:e1:f3:d3:fd:96:
5e:8f:95:50:00:1c:c9:1d:86:0b:a8:c8:95:cc:ee:cf:e0:14:
9f:0d:fa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:48:18 2026 by rpki-client