Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
File: eXe1XjT_1yB1-92gOaZbNx3jmCA.mft (raw, json)
Hash identifier: 2bNgpEavUDM2CVxSwtKD/S8b/ndaKPTScIoxdsEWxxA=
Subject key identifier: 51:82:FD:9B:76:03:60:2B:5C:BC:3A:57:24:B6:07:67:3D:CE:69:68
Authority key identifier: 79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20
Certificate issuer: /CN=7977b55e34ffd72075fbdda039a65b371de39820
Certificate serial: 019D3865CA9CF94BF62B6690F9EA8D4A4839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
Manifest number: 0EAB
Signing time: Sun 29 Mar 2026 07:01:28 +0000
Manifest this update: Sun 29 Mar 2026 07:01:28 +0000
Manifest next update: Mon 30 Mar 2026 07:01:28 +0000
Files and hashes: 1: WOR1ryq1yq_sySTGxjjKrKinhZM.roa (hash: BLhtkn0XoKuNpX6EOUgjUhzDHI6DAMy035uEGXaAl50=)
2: eXe1XjT_1yB1-92gOaZbNx3jmCA.crl (hash: KJ+oz76oWfGC1mVT9TUVq2YeSnphkGhvWAWc43bmokU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ca:9c:f9:4b:f6:2b:66:90:f9:ea:8d:4a:48:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7977b55e34ffd72075fbdda039a65b371de39820
Validity
Not Before: Mar 29 07:01:28 2026 GMT
Not After : Mar 30 07:01:28 2026 GMT
Subject: CN=5182fd9b7603602b5cbc3a5724b607673dce6968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:65:35:a5:17:2a:45:ba:50:22:1f:43:7b:d0:
16:6a:e1:67:74:57:c5:43:4e:30:4a:32:3e:ab:4c:
10:ef:9f:30:af:74:24:12:be:9d:8c:2b:13:8c:88:
0a:73:a1:b5:a1:4d:a6:92:84:3e:6e:1f:bf:27:af:
8e:10:a3:6f:f4:17:8d:f5:45:04:36:93:2d:18:b2:
00:2b:6d:86:06:c5:95:fd:2b:99:1b:0c:56:2d:5f:
11:96:28:fa:5c:67:a2:9c:03:91:f5:f4:27:06:d2:
27:dc:4a:d6:7e:d0:f3:c7:c0:09:cf:f7:9a:ce:e3:
88:a0:e9:5d:c3:93:08:67:c4:de:15:bd:37:67:0a:
a8:71:0a:91:0c:80:1c:36:2b:62:f9:d6:8a:f9:65:
15:c3:a6:a0:37:20:c6:4d:90:aa:01:91:fa:97:9d:
d9:e8:d9:04:f0:6e:bc:87:4a:56:df:89:98:68:cb:
8c:72:b6:b8:18:0c:ad:5c:48:14:68:7f:b0:2f:f6:
60:26:b4:0c:26:0e:6a:21:33:be:db:8c:b1:d4:6a:
f6:26:47:5c:09:70:88:46:2d:85:d1:cf:63:c9:da:
88:16:c2:e1:b9:2c:e9:3c:b1:29:84:9b:00:46:42:
d0:96:36:8d:41:4f:10:45:be:6c:10:58:da:31:44:
5f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:82:FD:9B:76:03:60:2B:5C:BC:3A:57:24:B6:07:67:3D:CE:69:68
X509v3 Authority Key Identifier:
keyid:79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:2f:65:05:52:ce:b2:ff:f3:b1:1b:1e:84:26:fc:c2:28:05:
c4:13:17:44:d0:d5:21:67:d8:c5:95:74:6e:e7:f3:42:8a:2b:
3f:c9:48:3f:45:dd:cc:97:9f:d5:33:e3:66:e1:46:9a:c6:f0:
e8:8c:a1:3d:15:ad:7b:bb:c9:f2:40:ba:3e:c8:00:bb:a6:ce:
6f:73:3e:b5:5b:ca:17:53:6b:3b:48:d7:0e:c9:34:c8:0d:36:
ac:e3:1e:ab:3a:07:19:a0:2c:41:21:99:c8:d9:58:d7:75:82:
0c:a8:0c:9a:06:89:5d:93:83:5b:40:2c:a3:6d:80:da:9b:00:
b4:28:a6:89:41:45:e1:d3:de:cf:ae:ba:02:a4:92:65:93:a0:
a6:79:9f:aa:c8:08:2e:ba:c0:4c:38:6d:46:67:3a:cf:c8:dd:
01:88:07:dc:0b:4f:c3:6b:2f:22:a5:5c:c7:a6:0c:71:9b:f4:
a3:dc:b9:38:df:7b:37:23:45:75:f4:1d:8f:f4:8b:f8:de:38:
ba:f1:89:7a:e7:05:e0:98:84:2e:46:b9:1c:60:01:1b:7a:c2:
08:a6:4e:8d:f1:fe:54:42:5c:55:3a:d0:6c:a8:d6:92:62:51:
e6:bc:92:65:4e:81:e6:f4:f8:70:90:de:9e:53:13:8b:8c:f5:
72:6f:78:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zcqc+Uv2K2aQ+eqNSkg5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NzdiNTVlMzRmZmQ3MjA3NWZiZGRhMDM5YTY1YjM3MWRl
Mzk4MjAwHhcNMjYwMzI5MDcwMTI4WhcNMjYwMzMwMDcwMTI4WjAzMTEwLwYDVQQD
Eyg1MTgyZmQ5Yjc2MDM2MDJiNWNiYzNhNTcyNGI2MDc2NzNkY2U2OTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62U1pRcqRbpQIh9De9AWauFndFfF
Q04wSjI+q0wQ758wr3QkEr6djCsTjIgKc6G1oU2mkoQ+bh+/J6+OEKNv9BeN9UUE
NpMtGLIAK22GBsWV/SuZGwxWLV8Rlij6XGeinAOR9fQnBtIn3ErWftDzx8AJz/ea
zuOIoOldw5MIZ8TeFb03ZwqocQqRDIAcNiti+daK+WUVw6agNyDGTZCqAZH6l53Z
6NkE8G68h0pW34mYaMuMcra4GAytXEgUaH+wL/ZgJrQMJg5qITO+24yx1Gr2Jkdc
CXCIRi2F0c9jydqIFsLhuSzpPLEphJsARkLQljaNQU8QRb5sEFjaMURfeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGC/Zt2A2ArXLw6VyS2B2c9zmloMB8GA1UdIwQY
MBaAFHl3tV40/9cgdfvdoDmmWzcd45ggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhlMVhqVF8xeUIxLTkyZ09hWmJOeDNqbUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iZDBhNzYtMDRiMS00NDkwLWFkMDQt
OTdlZWM3Y2Y2MDkzLzEvZVhlMVhqVF8xeUIxLTkyZ09hWmJOeDNqbUNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iZDBhNzYtMDRiMS00NDkwLWFkMDQtOTdlZWM3Y2Y2MDkz
LzEvZVhlMVhqVF8xeUIxLTkyZ09hWmJOeDNqbUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZS9lBVLO
sv/zsRsehCb8wigFxBMXRNDVIWfYxZV0bufzQoorP8lIP0XdzJef1TPjZuFGmsbw
6IyhPRWte7vJ8kC6PsgAu6bOb3M+tVvKF1NrO0jXDsk0yA02rOMeqzoHGaAsQSGZ
yNlY13WCDKgMmgaJXZODW0Aso22A2psAtCimiUFF4dPez666AqSSZZOgpnmfqsgI
LrrATDhtRmc6z8jdAYgH3AtPw2svIqVcx6YMcZv0o9y5ON97NyNFdfQdj/SL+N44
uvGJeucF4JiELka5HGABG3rCCKZOjfH+VEJcVTrQbKjWkmJR5rySZU6B5vT4cJDe
nlMTi4z1cm943g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:47 2026 by rpki-client