Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
File: eNY2xQXVavQqQUwWfVJAfTVrPQs.mft (raw, json)
Hash identifier: hTIk7/AqANtuc4sN25lxx1I1z3ELbRyfHJRQt1vG4UU=
Subject key identifier: CE:B8:EF:32:EA:80:23:98:76:60:02:D0:CD:95:65:6E:C8:02:72:6D
Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
Certificate issuer: /CN=78d636c505d56af42a414c167d52407d356b3d0b
Certificate serial: 019F0F2DA0138ADBC4F68590313A8D76BF4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
Manifest number: 1987
Signing time: Sun 28 Jun 2026 17:01:15 +0000
Manifest this update: Sun 28 Jun 2026 17:01:15 +0000
Manifest next update: Mon 29 Jun 2026 17:01:15 +0000
Files and hashes: 1: 91m9d-4rp7TRVtPcYvV9NGes_jg.roa (hash: I0D8Damt//4B0Kf8Q3SX0Wwm5LPekD0IgYEQxvGqNNI=)
2: eNY2xQXVavQqQUwWfVJAfTVrPQs.crl (hash: gOfqcAJBdlU+X76PnEPr6FffaTAhPYy3H7IBm3fdync=)
3: zHOXRdXkiM-RbCdgutluwx22gJ8.roa (hash: ddTQ3xyy/qh9SFlJgrOiIvTTzcQtTPf5+YJxupFgPas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0f:2d:a0:13:8a:db:c4:f6:85:90:31:3a:8d:76:bf:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b
Validity
Not Before: Jun 28 17:01:15 2026 GMT
Not After : Jun 29 17:01:15 2026 GMT
Subject: CN=ceb8ef32ea802398766002d0cd95656ec802726d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:34:c6:4d:4a:1c:f6:53:14:04:eb:a5:96:1a:
36:da:e3:21:6c:ba:9f:7d:f7:8e:30:c0:33:35:ef:
0f:42:4c:65:24:4a:b6:0a:64:23:2e:c0:2b:ba:92:
9c:2a:77:fd:c2:cf:69:9d:a0:60:fd:0f:59:e4:08:
e4:7f:d4:85:fa:b2:5d:be:91:56:2c:a4:87:e2:6a:
86:86:03:2f:64:44:28:02:3a:3b:a2:96:d2:f8:5e:
d2:c2:08:23:97:2f:ee:9e:c4:56:26:be:99:83:43:
8b:02:36:d3:09:d2:41:c9:17:30:66:3e:0b:51:8e:
ea:a6:86:1c:39:24:9a:2e:40:99:b9:43:da:88:ca:
95:a5:c1:f2:5b:6d:5f:02:8d:5a:22:86:4a:23:9f:
71:62:e0:62:68:25:d7:2f:70:42:fa:23:b6:64:6e:
41:01:a5:b7:d4:f0:63:82:cb:b4:e4:91:dc:05:ef:
1c:32:99:d0:d0:15:58:c6:26:ac:c8:e0:43:d3:96:
c4:4e:f3:d9:32:a0:c5:f6:73:01:01:fa:32:6e:46:
2d:12:99:d9:23:f5:3d:74:cd:b5:30:c0:e5:08:e4:
4c:0e:70:8e:f2:2b:63:e1:2a:31:7c:d7:7c:5d:25:
e7:76:58:9e:b6:0e:64:75:72:7c:84:b5:04:1e:d8:
44:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B8:EF:32:EA:80:23:98:76:60:02:D0:CD:95:65:6E:C8:02:72:6D
X509v3 Authority Key Identifier:
keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5b:e3:9d:3c:fd:32:59:f7:bf:b0:61:10:72:89:f2:10:6b:
9a:3a:da:67:6a:fe:10:37:89:f7:cb:95:06:84:44:df:fa:c9:
0b:f8:43:8f:53:57:f6:ae:a1:8d:9a:01:46:51:d9:29:0c:96:
15:40:fa:c1:15:ee:f1:9a:db:c1:dd:2d:8a:87:ab:8b:85:44:
95:4c:ad:43:ac:bc:37:e8:a6:39:1c:4f:b5:5e:c6:cc:58:d7:
8c:ac:86:b0:8a:29:7b:58:b4:16:3c:79:9d:57:04:e0:0e:96:
de:55:5c:33:8b:33:e7:7c:29:fb:b0:cf:8f:be:38:b2:39:ec:
cd:f6:a2:37:cc:0a:af:a3:09:0d:7b:f9:0a:8a:79:29:1c:d1:
52:63:2f:91:c1:4c:e9:b4:37:2a:9c:d2:fc:be:b7:60:20:f4:
d1:39:58:03:d1:31:e7:da:34:68:f4:f3:17:6f:fb:7d:ac:53:
8b:04:96:de:55:fb:0d:2c:aa:f9:70:9f:49:7a:ce:d7:18:94:
04:a4:b0:9a:f0:3a:31:8a:e7:7e:b1:d4:d3:b7:e7:ea:e7:49:
d1:76:ab:a7:05:82:46:48:11:30:6a:1a:8b:fd:b0:49:03:2d:
17:cb:57:7b:a3:74:70:38:d5:71:66:73:56:05:c0:65:d0:3e:
5b:01:c1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:44:42 2026 by rpki-client