Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
File: eKwxY10JG-YVV0MxH-HbfHrzR3s.mft (raw, json)
Hash identifier: xwdsLGoG+NLuIT0GY28dDerLkMZN+3GLSjoflp8366U=
Subject key identifier: 52:26:6C:90:70:DE:F5:01:50:C3:73:F9:D7:C0:B2:C4:19:6C:6A:93
Authority key identifier: 78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
Certificate issuer: /CN=78ac31635d091be6155743311fe1db7c7af3477b
Certificate serial: 019DB27D9853E6537EEA29AE6AC882803B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
Manifest number: 0D28
Signing time: Wed 22 Apr 2026 00:01:08 +0000
Manifest this update: Wed 22 Apr 2026 00:01:08 +0000
Manifest next update: Thu 23 Apr 2026 00:01:08 +0000
Files and hashes: 1: VTBtuhupQkN3XNWCGG-SctrmNSc.roa (hash: MVRP12soTEVvkQMP4sWQe+ZD2ED7nGpPqffJ2oNbKlE=)
2: Yx6WCtdaJX-lZhNYpyoP3qTRTWA.roa (hash: SA4NVslryO/GKYfRH6uU7OXQ/zmv533QvWL9j3NGE/I=)
3: eKwxY10JG-YVV0MxH-HbfHrzR3s.crl (hash: EhPTcIKDjmFqIgV7boguMjhMh9gJ/qcyXP9C0NrRT94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:7d:98:53:e6:53:7e:ea:29:ae:6a:c8:82:80:3b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ac31635d091be6155743311fe1db7c7af3477b
Validity
Not Before: Apr 22 00:01:08 2026 GMT
Not After : Apr 23 00:01:08 2026 GMT
Subject: CN=52266c9070def50150c373f9d7c0b2c4196c6a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:50:30:f3:84:81:05:dd:9e:0c:c8:4b:b6:
83:e1:e6:cd:40:d9:0c:07:f6:5f:ea:df:8c:87:55:
f4:79:0c:90:c1:77:33:0f:51:52:49:97:49:91:37:
43:d5:e4:3f:ca:a1:13:b1:5b:42:13:b7:81:79:25:
fa:c5:4a:0a:b7:1c:be:20:4d:22:1b:10:f4:24:48:
ec:00:1d:40:e0:59:f6:29:e8:02:28:df:c0:da:e0:
c1:d4:eb:51:8d:c2:3a:c7:32:61:96:a8:6b:1c:46:
59:4c:75:df:26:7c:54:2d:53:ef:02:41:4a:b1:4d:
5b:86:78:aa:e3:1c:22:f7:7d:38:6d:79:04:03:f5:
36:0d:22:21:13:b8:a6:b1:cf:16:b1:f1:5c:f1:9a:
41:85:6b:cb:84:00:00:60:40:2a:21:7c:10:ee:2e:
e2:a8:db:d5:97:8d:c6:ab:fc:79:b8:a9:11:32:f1:
0c:3f:40:30:da:9e:d3:ab:ea:8b:31:f6:1e:9d:c8:
ad:be:8e:c4:8f:4a:44:8c:97:2d:2a:50:1f:86:ce:
7c:a2:6b:55:50:6d:d6:b2:5a:3c:93:d8:4d:94:68:
9d:9d:c7:80:3d:b6:ed:33:a2:13:5b:23:f4:81:98:
c2:07:28:02:0d:3e:fa:8d:8a:47:6c:bd:c8:17:55:
51:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:26:6C:90:70:DE:F5:01:50:C3:73:F9:D7:C0:B2:C4:19:6C:6A:93
X509v3 Authority Key Identifier:
keyid:78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5e:45:c1:8b:1e:41:be:21:ba:8a:d6:de:0b:a3:8a:9a:eb:
04:f4:4b:5d:d5:6d:55:85:c8:01:80:6c:16:eb:ce:67:60:6d:
3e:a7:32:ee:e2:d8:12:5c:eb:f6:32:ec:bc:a2:0f:73:ed:a1:
42:c2:02:b2:5d:a6:b0:76:22:cc:0e:f9:2a:fd:2b:6a:f4:c1:
81:7b:13:13:e8:f9:66:67:c2:c8:7e:de:b4:50:c1:8b:da:d9:
42:98:73:f3:79:af:94:ba:a8:93:f9:f4:cc:1d:20:f9:f3:3e:
4b:17:8b:3d:72:e8:ce:33:87:95:ed:0a:a3:41:aa:a8:7d:2f:
ee:3b:9a:3a:f4:f6:f0:74:81:c0:1c:99:fb:5c:ca:02:73:6b:
16:33:83:d0:6c:27:7f:77:5c:42:ad:6a:3f:e6:00:62:30:df:
7a:d5:0b:25:4e:94:9a:34:56:c0:b3:11:c1:eb:62:ff:0b:de:
62:bd:f0:6e:64:53:cf:f5:ae:4e:e0:6c:21:ac:bb:73:e6:4e:
5d:37:83:8c:ba:48:2b:01:d5:92:d7:9e:21:15:bf:13:35:55:
49:9f:dc:48:e3:25:20:36:73:04:c4:8d:13:9e:2d:89:01:e0:
1c:55:74:6b:8e:3e:23:ad:ff:fb:3b:0b:f7:df:d0:60:2c:0b:
40:d6:81:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 10:27:50 2026 by rpki-client