Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
File: eWnEvYdneAvsFhoq1hKic128q_0.mft (raw, json)
Hash identifier: UiuHdIomhXh90tPmGXlxC5v2zvmve8loOqNhyBb/IwU=
Subject key identifier: BB:FA:63:BC:9F:A3:46:B8:E3:61:57:A3:19:76:B0:5C:4C:F6:DB:13
Authority key identifier: 79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
Certificate issuer: /CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Certificate serial: 019D375329670BCB0E4BAF55348CD403F44E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
Manifest number: 136A
Signing time: Sun 29 Mar 2026 02:01:30 +0000
Manifest this update: Sun 29 Mar 2026 02:01:30 +0000
Manifest next update: Mon 30 Mar 2026 02:01:30 +0000
Files and hashes: 1: 3L8-SFiTWU4fVJqNJH9oAV2l1y4.roa (hash: xttM0UfqMX6deZWNGbRNOdSazxn0Mbttw4sD7m2GsmU=)
2: eWnEvYdneAvsFhoq1hKic128q_0.crl (hash: vi3oGnF4B9yebSaHZ0El6i557mxVcMx9p3/OKe4tmzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:29:67:0b:cb:0e:4b:af:55:34:8c:d4:03:f4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Validity
Not Before: Mar 29 02:01:30 2026 GMT
Not After : Mar 30 02:01:30 2026 GMT
Subject: CN=bbfa63bc9fa346b8e36157a31976b05c4cf6db13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:d5:b4:05:8d:ea:75:42:a6:47:ac:dd:53:
99:b7:04:f8:5c:d0:0a:95:81:e6:c5:01:6c:4c:9d:
a7:a8:42:85:70:29:6a:78:af:64:45:fa:62:06:82:
44:b0:98:25:06:dc:fd:4c:34:b4:55:3d:64:d0:3c:
2d:5d:00:2d:32:64:58:45:6a:ba:0e:24:a6:d5:4f:
f8:5f:20:21:0d:0e:36:6e:3b:79:a0:b6:4f:6b:47:
87:25:65:37:7a:d3:2f:cc:d3:fe:ea:eb:48:b3:d5:
fb:8e:92:fa:12:ca:cf:bf:d7:91:96:ad:7e:48:09:
78:a4:68:26:cd:c5:b9:ec:36:2d:32:7b:fe:7c:a7:
14:04:6c:d2:8d:6a:7c:59:da:46:03:61:6d:d9:eb:
fc:c7:15:a9:a9:76:7c:65:13:4c:85:07:cd:20:f8:
1a:bd:af:ac:b1:d8:b7:62:b5:75:ba:d2:6a:7f:a0:
61:c9:30:03:9a:01:fa:f3:04:ab:da:6c:bc:3b:77:
bd:ac:a9:6b:fb:90:39:9a:4b:33:7a:03:83:0c:93:
5e:fa:29:3c:91:bc:5e:ff:f6:03:8d:a8:77:32:3c:
62:bd:4d:65:f4:d8:15:ba:0f:fa:32:c0:69:54:a8:
26:99:a0:9d:95:8c:54:2d:3e:8b:67:f9:d0:b1:85:
12:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FA:63:BC:9F:A3:46:B8:E3:61:57:A3:19:76:B0:5C:4C:F6:DB:13
X509v3 Authority Key Identifier:
keyid:79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0f:6f:72:81:e7:39:58:a7:10:df:02:ed:d4:31:19:07:92:
ff:99:cd:5d:72:da:50:47:e1:75:74:0f:cf:b3:82:af:97:b6:
e5:4b:f9:7c:61:bc:97:29:7c:53:68:24:87:c2:e8:aa:c2:49:
50:27:7b:1e:4d:ad:b8:da:b0:5a:cb:c5:fc:9e:26:26:bd:26:
77:47:21:31:e7:23:7f:96:4b:f2:7c:5c:bf:03:e4:6c:b3:e8:
a9:00:72:94:a2:bc:27:c4:40:92:05:ab:8a:68:43:b2:ac:de:
9f:e0:f6:2e:38:e9:d2:38:7d:d3:fc:19:dc:91:62:7a:06:c0:
af:6b:b7:5b:be:3b:28:70:8a:ca:94:f9:a6:e3:e7:7c:f2:99:
b1:28:5a:c8:f8:99:49:59:85:f0:24:2a:de:14:20:2c:7a:eb:
9e:72:5a:1b:99:67:bb:6f:72:53:62:31:15:58:cf:f8:c2:bf:
3d:23:f5:39:ce:ae:61:44:79:67:e4:a2:46:8e:4f:78:fe:b2:
f6:91:20:bd:05:0f:e1:7c:60:73:7f:71:c6:6f:96:72:bc:a0:
69:32:a7:a8:87:25:54:08:60:ae:27:a0:bf:c7:87:95:2d:a6:
a3:c5:ee:42:9f:15:dd:b7:cb:f3:24:75:bd:3b:45:ad:af:a4:
ad:73:bf:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:56 2026 by rpki-client