Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
File: egtky28YoRQXQjEFCwF5kxteSG0.mft (raw, json)
Hash identifier: 5/QtRXZCxVG5nLs5iPXrJ+0E0FNCL0tTQE+TfQMbIK0=
Subject key identifier: 0F:23:4B:96:16:32:82:1F:7E:C7:D9:62:9A:AE:BC:08:00:EA:AB:4F
Authority key identifier: 7A:0B:64:CB:6F:18:A1:14:17:42:31:05:0B:01:79:93:1B:5E:48:6D
Certificate issuer: /CN=7a0b64cb6f18a114174231050b0179931b5e486d
Certificate serial: 019D37C0FAAFD03E70745F8EE37D67CA85BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
Manifest number: 059C
Signing time: Sun 29 Mar 2026 04:01:27 +0000
Manifest this update: Sun 29 Mar 2026 04:01:27 +0000
Manifest next update: Mon 30 Mar 2026 04:01:27 +0000
Files and hashes: 1: 1q4BtkfepJc-raZEhj-gGf2uWvE.roa (hash: 3v5nIZKVUJNwnzavqdu5v3q5UyDoCLmVDzmJ4965j9Q=)
2: egtky28YoRQXQjEFCwF5kxteSG0.crl (hash: 4SmEzNBS1SVWFM62l0F3+EKb2BQ20NiU2QsK7usuqbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:fa:af:d0:3e:70:74:5f:8e:e3:7d:67:ca:85:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0b64cb6f18a114174231050b0179931b5e486d
Validity
Not Before: Mar 29 04:01:27 2026 GMT
Not After : Mar 30 04:01:27 2026 GMT
Subject: CN=0f234b961632821f7ec7d9629aaebc0800eaab4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ba:a6:73:a3:fb:ab:7f:45:81:3b:c3:b9:63:
eb:5d:2c:ad:81:00:58:25:40:cd:e8:ce:01:71:cc:
7f:dd:61:31:be:eb:ae:67:18:f4:6e:07:5f:4c:2c:
e3:40:b8:66:ba:82:3c:2e:7c:93:76:a2:0d:ff:7a:
74:30:16:67:cd:85:c9:20:1d:aa:89:4d:77:c7:60:
64:16:5f:c9:81:24:e3:fb:9a:65:a0:d1:ee:b4:ee:
95:76:de:fe:98:55:9d:32:4f:ae:cb:77:23:a5:de:
e5:29:be:99:26:d1:df:94:94:b4:d5:31:21:5b:d5:
4f:17:51:0d:41:ee:b3:34:4c:d6:8a:73:01:b0:1d:
cb:dc:de:a5:55:87:1d:6f:a8:a6:51:36:16:b0:be:
2a:c3:bd:fb:89:3f:5e:dc:07:ab:64:d3:22:64:d9:
2c:da:aa:c5:d2:5d:75:02:05:81:a9:de:3a:ab:6b:
15:bd:80:f9:fa:e6:79:4c:08:b1:86:7f:dc:9f:ab:
7a:de:32:79:be:79:58:30:54:65:1e:48:32:dc:f9:
da:df:37:26:8a:b7:cd:9d:f9:19:39:66:6e:2a:77:
b7:45:2d:c4:b9:2d:ee:3e:72:ff:ea:2e:c2:3d:58:
f8:ee:ce:d9:79:a5:5e:ae:b7:5c:6f:9c:22:0b:66:
d5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:23:4B:96:16:32:82:1F:7E:C7:D9:62:9A:AE:BC:08:00:EA:AB:4F
X509v3 Authority Key Identifier:
keyid:7A:0B:64:CB:6F:18:A1:14:17:42:31:05:0B:01:79:93:1B:5E:48:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3f:54:6d:c6:a0:39:89:2c:b5:b7:d8:83:c9:89:73:31:4d:
bb:25:04:bc:ef:b4:cc:36:b2:6b:99:a9:61:98:a8:41:79:93:
e0:8c:3f:f0:b2:c0:9e:57:0d:09:5d:67:e5:e4:93:47:b1:11:
2f:98:c9:8a:4b:85:33:1d:68:38:6c:3f:a6:da:33:92:50:ca:
b8:14:9e:fb:32:06:c3:c8:6e:11:f3:d5:40:0c:c1:62:c9:73:
10:8a:28:ae:f3:b2:30:3f:ee:e0:4d:c0:18:1b:cb:8e:79:98:
74:3d:98:8c:ea:eb:85:4f:25:4e:72:bf:c4:e5:da:09:6b:4e:
20:73:15:4d:72:79:09:cc:e0:e3:16:30:62:f3:1f:15:67:db:
48:f0:ac:9f:34:a1:fd:d8:0f:45:f5:5a:62:a8:64:b8:3a:47:
dd:12:90:95:db:dc:0b:86:54:17:80:7c:70:5d:91:86:37:e0:
06:cd:71:28:b7:b1:1c:92:ba:4c:f9:43:e0:fc:2d:c4:dd:69:
91:8b:7a:d3:81:a7:5b:be:41:b0:d7:df:05:a7:46:2a:da:0e:
4e:18:f9:2b:50:a1:b9:0d:cd:98:73:e7:39:e3:e8:74:9f:a7:
25:1b:67:c4:70:3d:17:66:cc:77:df:28:1c:17:b9:2a:67:b1:
c7:cd:cd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:24 2026 by rpki-client