Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
File: eNY2xQXVavQqQUwWfVJAfTVrPQs.mft (raw, json)
Hash identifier: K9Adyp8asys4Y2Npttl0WuUXs6TXof8sUJNa6/K9A6E=
Subject key identifier: 03:F7:0F:19:EB:10:65:59:C5:CE:8A:AD:20:12:9F:41:E4:05:6D:D6
Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
Certificate issuer: /CN=78d636c505d56af42a414c167d52407d356b3d0b
Certificate serial: 019D37F713EF37C503554A808211C8F8F4D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 05:00:32 +0000
Manifest this update: Sun 29 Mar 2026 05:00:32 +0000
Manifest next update: Mon 30 Mar 2026 05:00:32 +0000
Files and hashes: 1: 91m9d-4rp7TRVtPcYvV9NGes_jg.roa (hash: I0D8Damt//4B0Kf8Q3SX0Wwm5LPekD0IgYEQxvGqNNI=)
2: eNY2xQXVavQqQUwWfVJAfTVrPQs.crl (hash: DRXlUKjXhshN4QPjG6tUWWde2dqQPT1A6W4y+Y3CcSg=)
3: zHOXRdXkiM-RbCdgutluwx22gJ8.roa (hash: ddTQ3xyy/qh9SFlJgrOiIvTTzcQtTPf5+YJxupFgPas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:13:ef:37:c5:03:55:4a:80:82:11:c8:f8:f4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b
Validity
Not Before: Mar 29 05:00:32 2026 GMT
Not After : Mar 30 05:00:32 2026 GMT
Subject: CN=03f70f19eb106559c5ce8aad20129f41e4056dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0e:e3:13:6e:17:73:c9:96:91:e0:71:bd:60:
7a:c9:bc:69:6b:0d:56:4e:44:eb:02:67:f4:e5:fd:
69:76:ab:3e:b4:c9:d3:6f:41:c7:92:22:63:af:7a:
7e:ff:bd:05:9c:9d:3c:25:8b:49:23:6d:3e:7e:44:
eb:15:8d:d2:1b:c8:21:95:96:83:b8:11:3a:a5:22:
18:ca:ed:37:18:39:01:38:16:0c:eb:e0:6e:97:6f:
5c:47:6b:13:bc:f5:80:fc:3d:94:19:72:ff:b2:74:
3b:34:80:f8:66:55:ab:3d:04:8d:92:36:0a:fa:88:
79:d6:69:fe:bf:29:c3:3e:34:ae:45:be:5d:78:c5:
61:9f:56:fe:3c:7a:89:31:05:92:65:bf:e6:ba:28:
04:41:0a:0e:50:9a:56:f3:79:47:51:d9:ed:90:83:
27:0c:8f:65:19:27:71:44:0a:57:27:29:96:c4:45:
32:69:d7:78:48:38:a1:1c:fe:28:15:6a:5b:88:7b:
2d:99:99:c0:a5:fb:3d:4c:01:61:84:1e:4e:e2:e3:
16:ca:c7:e4:bd:47:11:2f:57:cd:b5:9d:26:09:f1:
4e:f8:a9:fe:95:6a:5f:ef:68:8e:ea:05:d0:92:ff:
ef:c2:eb:54:0a:6f:a3:da:62:83:25:0f:b0:d8:1a:
00:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F7:0F:19:EB:10:65:59:C5:CE:8A:AD:20:12:9F:41:E4:05:6D:D6
X509v3 Authority Key Identifier:
keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:81:5e:3e:05:d7:be:cf:3f:bc:43:11:57:b7:3e:8d:69:b3:
88:ee:2f:ae:dc:e7:7e:14:6d:82:41:8d:1d:e5:82:33:d9:3e:
a6:bf:bf:2f:41:a9:96:0a:e4:ad:c4:2e:15:33:8a:34:c0:fb:
f8:f5:80:8b:15:33:f8:50:70:92:c8:c3:0e:ea:18:ed:f1:74:
9c:b6:72:1a:41:e8:3b:73:2a:2b:21:46:2d:4f:29:57:3d:e7:
33:45:8a:8b:6f:cd:61:a6:3c:06:a9:5f:8f:64:ff:d6:ab:7e:
e5:6d:53:24:dd:85:13:ce:2b:45:43:cc:36:20:c7:b8:89:6e:
d4:40:51:01:95:16:46:88:08:05:50:e5:7f:82:d3:ee:dd:5e:
93:61:57:f1:27:a4:4d:09:15:49:a6:e2:49:d0:e2:3f:83:90:
94:6e:38:04:06:a2:f9:77:d7:f6:3e:dc:64:48:d6:6c:c2:12:
9c:af:7f:49:f3:24:f1:6f:bc:8a:9d:54:f3:be:04:af:07:bd:
26:6b:3c:12:ed:40:28:81:3e:23:31:23:4f:88:e7:87:9b:9b:
75:1b:7d:70:37:16:32:6b:1b:93:44:4e:0a:8a:98:0e:4f:0c:
a3:e1:cd:da:59:32:f9:8b:1d:c4:b9:81:9e:f5:74:fa:34:03:
8f:cb:45:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:43 2026 by rpki-client