Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft
File: e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft (raw, json)
Hash identifier: MURXnI9ZXkUAAfQa/lphrjm+QPxvK58IXbM06KoSRjY=
Subject key identifier: 35:2D:1E:07:71:71:36:C3:18:31:72:49:08:7B:60:5A:8E:3D:7A:8B
Authority key identifier: 7B:CA:BE:64:90:FA:8B:D5:72:44:0F:D6:61:6A:84:30:EE:66:D1:54
Certificate issuer: /CN=7bcabe6490fa8bd572440fd6616a8430ee66d154
Certificate serial: 019D38D34C03C079AA45BE7C1EA6676D640F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft
Manifest number: 0554
Signing time: Sun 29 Mar 2026 09:01:04 +0000
Manifest this update: Sun 29 Mar 2026 09:01:04 +0000
Manifest next update: Mon 30 Mar 2026 09:01:04 +0000
Files and hashes: 1: Gws5btNNtPdjaSz9VbluBPmvlcM.roa (hash: d+e95WhTHyM+HX2sAVv1c3YdJyjnOdJdLOShrMr5pvY=)
2: e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl (hash: 3RHIVuBTRFu9a9OIMpWN9UOPp1ehnE3/asbiFWPvOFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:4c:03:c0:79:aa:45:be:7c:1e:a6:67:6d:64:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcabe6490fa8bd572440fd6616a8430ee66d154
Validity
Not Before: Mar 29 09:01:04 2026 GMT
Not After : Mar 30 09:01:04 2026 GMT
Subject: CN=352d1e07717136c318317249087b605a8e3d7a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:57:10:7d:2e:9a:18:a0:9f:b2:e1:86:a3:
42:32:85:2e:78:1c:66:67:27:a7:02:b9:6e:63:7c:
01:2c:34:92:ea:fe:41:a7:1b:ac:92:01:b0:df:7b:
36:6d:d9:ff:dc:4a:d5:15:1d:6b:27:00:df:27:69:
ed:1d:8d:ba:c6:45:d4:a1:f8:62:c3:3b:04:0e:f4:
b0:23:64:28:e7:d6:62:37:8a:c3:c0:60:b5:13:46:
1b:b4:fe:97:bb:c2:6f:61:5f:6e:ac:4c:87:55:e4:
17:48:4d:bc:9c:3a:94:2c:db:94:a9:aa:ed:af:75:
8b:df:6a:4f:9d:1e:47:67:31:a7:d1:b0:19:a5:76:
53:f1:67:d8:eb:6e:58:e8:3a:46:c7:67:1a:89:85:
04:3e:8b:e1:a9:8e:7b:64:3d:77:99:26:c1:f8:44:
5b:12:5c:15:3f:57:93:95:b5:c8:cc:41:03:57:96:
49:b9:5c:74:26:54:8b:99:12:e3:45:21:90:61:80:
e8:8f:dc:34:33:1f:c7:cc:49:53:6f:34:ef:cc:80:
c1:45:ed:06:bf:01:fe:93:66:ad:e9:0e:28:6a:a9:
89:97:aa:d6:16:53:e0:18:21:c6:a3:6a:1f:65:44:
23:c3:0c:d6:70:54:15:0f:9e:98:88:e6:e3:3b:42:
83:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2D:1E:07:71:71:36:C3:18:31:72:49:08:7B:60:5A:8E:3D:7A:8B
X509v3 Authority Key Identifier:
keyid:7B:CA:BE:64:90:FA:8B:D5:72:44:0F:D6:61:6A:84:30:EE:66:D1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8e:66:92:17:7f:49:a8:70:7e:cf:14:71:3d:22:8e:ef:b5:
3e:35:8b:72:ad:de:b9:0b:59:b0:64:71:4e:10:7d:67:8f:8d:
99:a5:0f:b2:66:07:d2:62:41:43:db:ef:7f:92:de:4a:54:e6:
33:d0:7f:69:0c:cb:dc:32:93:1b:e9:c6:f7:ad:77:76:f9:a7:
30:ec:bc:1e:b7:c7:85:30:13:e2:27:23:66:00:7c:9e:08:1b:
7e:f1:76:f2:26:14:71:a9:71:89:18:f8:9c:25:58:3f:b1:ef:
98:c6:dd:36:c9:4b:f2:97:35:ab:58:61:ea:4f:45:77:d5:2c:
71:22:a5:7d:b3:6c:24:92:d5:8e:b8:b1:7a:20:1c:90:50:ae:
44:a0:46:fd:22:cb:4f:30:87:90:48:d0:aa:6d:2c:f8:c8:2b:
4a:e0:52:37:10:be:d3:7f:ad:8b:ec:81:4b:38:3d:13:c3:7c:
01:dc:8b:05:75:5a:e6:d3:83:8a:40:cf:56:45:21:53:57:09:
a7:67:39:94:45:c7:4d:2a:19:c0:17:8e:51:da:97:6c:d9:31:
b7:49:1f:25:f9:9a:a4:e4:6b:04:1b:92:41:2e:29:20:c4:e7:
af:f1:c2:f1:8d:3b:6e:1e:4c:30:d4:b4:8b:8c:ea:7f:7e:e9:
eb:ce:af:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:25 2026 by rpki-client