Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
File: eY1wE6f9u1Zj_ThKT-0SMDFF484.mft (raw, json)
Hash identifier: JjC0or9rhudoAiHPS0U68vjcR9WnsOVlUVAFEJasCUM=
Subject key identifier: 08:57:51:DB:64:17:BE:4C:74:75:20:55:95:73:A2:0D:C2:20:DF:C7
Authority key identifier: 79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
Certificate issuer: /CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Certificate serial: 019D371BFE55AF2814ED355D9F9D4FC9AE9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
Manifest number: 13B9
Signing time: Sun 29 Mar 2026 01:01:14 +0000
Manifest this update: Sun 29 Mar 2026 01:01:14 +0000
Manifest next update: Mon 30 Mar 2026 01:01:14 +0000
Files and hashes: 1: eY1wE6f9u1Zj_ThKT-0SMDFF484.crl (hash: fBjHBQB0TOuEu0i8VGVkrgSc32TzNSIMnpzkHjK7PVU=)
2: nm43m5JBni2gazwkwkpR5vwEWZE.roa (hash: vSYWgwULGrCYTXxb/vfIvAtMG0pvAZFSpwnb7bS2Sfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:fe:55:af:28:14:ed:35:5d:9f:9d:4f:c9:ae:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Validity
Not Before: Mar 29 01:01:14 2026 GMT
Not After : Mar 30 01:01:14 2026 GMT
Subject: CN=085751db6417be4c747520559573a20dc220dfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:86:ee:a3:a2:75:9a:07:15:03:23:72:e2:de:
65:a5:f1:bb:cf:a7:13:2f:79:74:3f:9c:07:e6:22:
2b:99:03:cf:45:d8:f3:f0:43:c7:78:55:1c:fc:24:
73:17:4e:d6:9f:ba:ce:90:ab:c6:56:2e:e5:6a:fe:
81:b1:ee:f4:b7:b7:dc:d4:5e:8c:b6:b3:8d:43:39:
b2:1c:67:4a:ad:dd:e5:bd:80:38:b0:2e:d3:bf:c0:
d1:e0:2b:2b:69:6f:f2:5e:b1:3d:00:2d:37:2a:a4:
b1:30:ec:5d:06:e7:d3:25:54:97:de:86:95:91:51:
ad:e1:30:f6:65:16:8d:fa:4a:53:2f:ec:ca:b2:52:
d3:b1:ba:44:20:49:6f:fd:5e:7b:ac:72:c4:2d:19:
c6:31:84:91:d8:32:c2:e6:37:3a:3a:6a:fb:75:72:
57:6f:0b:b8:47:28:e9:01:f6:d0:b5:c1:bc:f4:ef:
08:15:8f:1e:01:ab:6e:5e:f4:0b:56:92:0d:5a:49:
70:3b:93:df:f4:43:53:d4:84:7a:aa:44:a0:3e:e4:
21:64:5d:86:85:2c:74:0f:b3:4a:21:45:88:b6:60:
44:55:a9:09:13:4c:d1:28:47:b0:29:3b:b4:63:2a:
7b:ce:34:3e:db:9d:cc:33:0a:09:7c:03:2a:d7:25:
92:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:57:51:DB:64:17:BE:4C:74:75:20:55:95:73:A2:0D:C2:20:DF:C7
X509v3 Authority Key Identifier:
keyid:79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:be:ee:dd:fa:f9:13:82:bd:a9:b9:c0:c9:e5:d6:44:6c:cd:
a0:a8:96:ae:f7:86:83:fb:31:ac:c3:65:a7:3f:bd:fc:d0:f4:
70:a5:0a:fa:6b:c4:ed:e6:df:ae:4a:87:1d:40:24:63:6b:59:
0b:e8:b1:9e:3c:d6:20:18:f9:a1:7b:d5:02:9d:b8:a0:d2:4d:
a0:a0:3c:b9:37:ac:0c:7e:5c:8e:1c:96:6f:81:eb:b3:f3:22:
d6:1d:da:68:fc:39:dc:34:04:7f:2e:6e:ca:ed:29:eb:24:8f:
09:ca:13:5e:d4:22:ce:ca:f3:b6:9e:30:79:ba:f4:50:28:c0:
84:5a:b5:a7:ac:99:7f:c3:32:83:ad:ab:d5:14:5f:68:e5:7f:
ee:38:95:db:2a:21:67:3c:05:f8:46:4b:f2:cd:ba:32:e9:a9:
a0:db:0b:6a:97:f5:f7:dd:3e:de:96:cf:ac:f2:9e:2a:d8:ce:
7a:9b:89:e6:41:5c:4c:34:bd:24:39:1f:63:7f:b2:33:a6:07:
53:94:84:cc:5e:43:da:3e:1b:d3:88:8c:f4:da:1b:87:f7:0d:
d1:9b:ab:5e:cd:a8:2a:1e:be:48:3d:22:c4:e0:ba:56:c4:47:
53:a4:11:4f:7b:f4:2b:be:b2:39:06:27:fa:46:bc:35:22:7b:
84:23:0c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:46 2026 by rpki-client