Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
File: eyqKwwKLcJEcthEf_aOi7-VYhi0.mft (raw, json)
Hash identifier: T4pyzxz78bfhIYxDjes4ny7Trz1fMSUdYI1+Y9uigSM=
Subject key identifier: A4:99:C6:68:AF:21:51:E7:4D:DD:B8:47:3A:B2:DB:B2:64:5D:DE:7A
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 019D38D2D658A90618E140977EFBA9798EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:00:34 +0000
Manifest this update: Sun 29 Mar 2026 09:00:34 +0000
Manifest next update: Mon 30 Mar 2026 09:00:34 +0000
Files and hashes: 1: QKSBmP3gzvhQzJUUPBNcCLWHKHM.roa (hash: KF0eVyAAEY8VGFQ1+W9WFibrhH45a/vXshpeDiUAhF0=)
2: eyqKwwKLcJEcthEf_aOi7-VYhi0.crl (hash: MRAtxVnNw9P1wQxwEzda1HCCAiqVRymsXoOdoiA1e7U=)
3: ycdkqwKUZrrAqLHqkXN7UpQhhcY.roa (hash: eyPv8WnShqVImAMmncYrIFp/3E9eBCBd7q2DigUVUPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d6:58:a9:06:18:e1:40:97:7e:fb:a9:79:8e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Mar 29 09:00:34 2026 GMT
Not After : Mar 30 09:00:34 2026 GMT
Subject: CN=a499c668af2151e74dddb8473ab2dbb2645dde7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:df:b2:3c:3f:fa:fb:b5:e3:6b:30:26:6c:ba:
9c:58:ae:18:da:d5:db:93:fe:12:99:84:64:10:8e:
e6:bf:ff:61:60:10:52:f2:79:1d:e0:cf:f1:7a:ae:
25:ab:dd:61:35:4c:6c:37:23:b3:8a:6b:73:e8:d7:
2e:37:dc:dd:4c:64:ce:ae:35:b5:db:ba:1d:96:0f:
50:9b:2c:d1:df:88:93:30:6f:37:ac:c6:09:d1:43:
4a:5c:aa:8b:93:0a:e8:99:72:d5:d6:9d:c7:fc:43:
30:95:d1:9e:ec:da:44:94:4c:ac:cf:d5:15:af:a2:
72:5a:e5:5e:10:6d:61:05:35:df:ae:e9:53:c3:25:
7a:53:cb:7f:bf:2f:4b:0a:fb:9b:d5:6c:7b:8c:75:
33:6c:c5:e5:44:86:03:be:c7:13:5d:ab:87:2a:4e:
44:a5:f7:8c:5e:f6:ea:42:55:e3:75:8c:18:2c:17:
17:61:2c:eb:40:0f:82:a0:d5:cc:fb:ac:89:61:37:
75:41:b6:fc:1d:e4:16:72:0c:b0:0c:2a:36:cc:ec:
a4:4d:d1:44:3d:f0:28:a0:39:a2:18:6e:1a:cc:ea:
4d:6d:28:3e:e8:07:59:02:52:49:6c:8d:71:14:75:
fe:81:d7:c7:68:48:77:25:4e:8f:c4:34:90:14:e5:
c7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:99:C6:68:AF:21:51:E7:4D:DD:B8:47:3A:B2:DB:B2:64:5D:DE:7A
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:32:5e:3e:b6:f6:55:7f:96:af:fd:e7:0d:8b:d9:5c:69:57:
cc:dc:d6:41:60:50:fa:8f:bc:da:e5:03:5e:a0:69:31:e4:ee:
91:b2:4d:e1:63:c7:2f:81:35:c1:bf:68:e0:7f:b6:5a:6c:4d:
a2:67:5f:50:70:e3:07:f7:ab:23:83:42:24:64:f1:34:72:a9:
59:a8:1a:f6:76:41:f6:44:da:6b:5f:7f:90:da:34:a4:b8:67:
fe:cc:f2:7f:17:6e:e8:05:b3:b2:74:22:99:f9:0c:85:f0:de:
79:b6:79:8a:f3:db:c5:47:fe:0c:91:65:fd:83:24:e2:fd:43:
ae:14:18:57:fa:6b:09:f0:34:c0:f0:0a:ef:25:a7:fc:e5:05:
4d:c4:67:c1:a4:b4:84:c8:e3:80:48:2e:d9:5d:c6:f5:20:e7:
81:31:44:4f:f9:d6:f2:8c:a5:62:0f:48:9b:eb:17:d8:bb:01:
08:de:05:65:f5:86:17:5a:fc:cf:83:73:13:c2:2f:d8:2b:12:
cb:00:10:19:2e:fe:3b:d7:ea:6e:17:24:3a:37:90:39:76:da:
6b:48:b0:76:2b:48:9c:cd:61:cf:e8:b4:39:16:1e:18:80:94:
ad:d0:fd:d3:82:45:d8:54:d6:c8:5d:36:ea:79:73:f8:f1:bf:
3f:8e:ca:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:47:52 2026 by rpki-client