Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
File: eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft (raw, json)
Hash identifier: kLmQA54d4Js4FsXXd4wSX5JlQrML1JdSbY++hJMfq60=
Subject key identifier: 26:C0:67:A4:61:D2:27:73:C6:80:EA:35:4C:BA:5B:DA:24:52:2A:55
Authority key identifier: 78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
Certificate issuer: /CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Certificate serial: 019DD1D1D4F9736B03B18232A2B930E4734C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
Manifest number: 0951
Signing time: Tue 28 Apr 2026 02:01:22 +0000
Manifest this update: Tue 28 Apr 2026 02:01:22 +0000
Manifest next update: Wed 29 Apr 2026 02:01:22 +0000
Files and hashes: 1: 5VmOpi03r_fL6ZM9_FCqD-4ELvY.roa (hash: 4huAnYa6nby7innz6R7TqYphvP6rJYEBi+2SzImbtCI=)
2: 770u0l1B70bIL0OjL2bsRR1d2sY.roa (hash: uO5mw4nMU516BWnsv4GqL4pOVudc9WSSFB2GhY5zuAU=)
3: eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl (hash: oESeXzBEIpkelkZKXzpkbwd37/yt7Rc4EEB59rXvl9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:d1:d4:f9:73:6b:03:b1:82:32:a2:b9:30:e4:73:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Validity
Not Before: Apr 28 02:01:22 2026 GMT
Not After : Apr 29 02:01:22 2026 GMT
Subject: CN=26c067a461d22773c680ea354cba5bda24522a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a9:d6:13:7c:26:4a:30:6d:13:a8:c0:99:f3:
0b:bd:b1:01:f3:bb:bc:f5:fc:d7:01:c4:de:11:9c:
7e:07:10:a9:3b:62:ea:f1:2f:01:f7:f5:6c:86:28:
2f:bf:70:10:8c:27:27:dd:fb:18:64:75:2d:1c:98:
05:55:78:6c:90:bc:23:da:0c:00:08:a9:57:ca:ca:
0a:d7:7e:b0:2a:d5:0c:08:2b:8f:3e:19:d7:41:67:
ba:8b:42:46:e2:61:89:a8:8c:e8:bf:2e:53:f3:00:
b5:89:d7:e8:92:60:cf:2e:1b:c5:2e:c4:0f:3c:57:
6b:9c:1e:8a:a4:e9:0d:bb:a3:23:ab:f1:ba:0f:46:
1f:5d:3a:83:6f:44:27:9f:97:ae:60:97:ae:75:70:
af:1d:7f:da:2b:41:70:93:79:83:1a:75:4a:32:86:
1f:ca:37:ca:aa:42:79:61:37:5e:12:4c:07:3f:df:
fb:28:bd:eb:8f:3f:2b:80:70:8a:24:9d:71:25:49:
d8:61:04:7c:32:a4:42:a5:6e:38:64:d9:20:68:81:
06:40:32:eb:92:aa:5d:f7:49:97:18:81:05:d8:a7:
ac:90:e0:74:d8:41:9e:c7:ce:02:08:08:8c:ab:d8:
93:0e:b8:65:e1:61:8a:aa:ad:1a:92:9a:39:e1:2e:
85:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C0:67:A4:61:D2:27:73:C6:80:EA:35:4C:BA:5B:DA:24:52:2A:55
X509v3 Authority Key Identifier:
keyid:78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:27:8a:1b:cd:7e:d9:1d:45:d1:a5:4f:3d:a2:90:d8:e9:af:
6f:0d:88:51:36:09:f4:38:0c:47:c2:ed:31:90:24:9f:8d:b2:
d4:fe:1e:f5:1f:7b:5c:8e:02:ff:3a:24:d0:c3:dd:57:15:c1:
b5:e0:af:ac:a2:58:d4:65:f3:f5:2f:b9:c3:1f:79:61:93:2a:
12:69:be:dd:08:5d:0c:55:1f:10:f6:83:0c:4d:7b:d7:a2:09:
72:82:78:4f:00:0a:42:6d:2e:1a:ee:0d:2e:c1:f1:3c:cb:c5:
47:14:8a:6c:5e:c4:8e:61:5c:f5:2e:74:9b:c3:6e:0c:4d:e0:
5e:49:cf:c7:7c:6e:c2:11:f5:6a:51:09:29:e3:00:7a:36:12:
bf:81:6a:17:d7:95:6a:5d:a2:f8:35:9c:97:5c:68:9a:2c:06:
d3:26:74:c4:fe:57:39:0c:46:3d:f6:8c:ec:99:4e:ea:15:77:
68:ca:1e:ba:f3:8e:15:04:b0:a9:cc:f2:4e:f9:fe:c3:56:a9:
54:e5:7f:1d:54:c4:44:26:ef:3f:81:fa:fd:b9:92:26:c7:93:
0d:de:72:69:70:d1:a5:a7:55:9e:ed:9a:c3:bb:60:b5:d6:1b:
49:4a:ec:a7:e3:3f:fd:51:0d:f7:a6:84:ad:c8:54:4c:ac:be:
4e:6d:2e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 06:06:06 2026 by rpki-client