Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft
File: eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft (raw, json)
Hash identifier: dVskJ1zNrnV830++KaMR8ZsorZsgjDe1xhHK74d0X+M=
Subject key identifier: 0C:D5:88:56:F0:C9:13:9D:75:4D:E2:45:50:67:D7:5F:18:49:08:25
Authority key identifier: 79:46:64:7D:9D:57:59:A0:1F:8D:18:66:8A:37:7C:06:3F:F5:91:36
Certificate issuer: /CN=7946647d9d5759a01f8d18668a377c063ff59136
Certificate serial: 019D39E601571C5BE6339EAE523BC4A4D33A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft
Manifest number: 0115
Signing time: Sun 29 Mar 2026 14:01:07 +0000
Manifest this update: Sun 29 Mar 2026 14:01:07 +0000
Manifest next update: Mon 30 Mar 2026 14:01:07 +0000
Files and hashes: 1: VP7p7QWMGVsrXJpO4NYHANZrxFg.roa (hash: G8VyFd0PCuQnnq9N5MqzV/bE1ybVAE0qxw/z0bEFIbE=)
2: c0rxrQoEWqWrd8tyLYNrU8iupbU.roa (hash: OO2iQo06n11TlqHfIIjfSy8I3N4op5PTjoqiameHkZA=)
3: eUZkfZ1XWaAfjRhmijd8Bj_1kTY.crl (hash: lKjI74E/+iWhMYYWP89BVCY8ZuljEpCSo4oBLGL4mG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e6:01:57:1c:5b:e6:33:9e:ae:52:3b:c4:a4:d3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7946647d9d5759a01f8d18668a377c063ff59136
Validity
Not Before: Mar 29 14:01:07 2026 GMT
Not After : Mar 30 14:01:07 2026 GMT
Subject: CN=0cd58856f0c9139d754de2455067d75f18490825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:70:c2:f4:f3:9d:1e:59:5e:8d:6b:c4:d6:41:
96:53:9e:df:32:f5:56:2a:8e:5c:54:2d:16:c1:9b:
5d:ea:01:06:91:00:0c:14:b4:3f:e1:13:53:b7:96:
24:af:8b:8b:0c:b1:3d:66:8e:81:19:8c:46:b4:d1:
e4:11:10:aa:79:79:78:cb:da:25:fb:03:77:53:28:
78:47:4e:ab:56:ed:43:03:cc:6d:9a:fd:f6:2f:5f:
e0:3d:47:ce:db:76:37:8a:90:f2:ea:ec:ae:b7:12:
14:ee:bb:13:90:d5:b5:10:1e:08:58:76:be:d9:4f:
d6:d5:5c:31:3d:39:85:8d:30:f1:c2:47:f0:c5:eb:
13:07:c4:0f:fd:f1:7c:03:7b:64:b7:26:62:4f:59:
34:09:2b:f7:84:73:c5:05:b4:d1:3d:33:b7:44:29:
0a:e9:e4:92:a6:9d:c3:ca:91:5c:56:f1:70:3b:7d:
f3:d8:df:17:be:58:e8:ee:30:e0:0e:a5:3d:1e:9d:
02:16:eb:93:77:aa:5a:d0:5b:cf:19:46:5e:67:a3:
5d:5b:7c:21:64:9a:f6:20:ee:1a:4d:c2:ee:a4:24:
66:34:b1:2f:ec:12:6d:d2:1e:1c:57:81:cd:1d:23:
f5:27:45:13:b7:09:76:d8:f3:d4:5a:4b:96:fc:d5:
62:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D5:88:56:F0:C9:13:9D:75:4D:E2:45:50:67:D7:5F:18:49:08:25
X509v3 Authority Key Identifier:
keyid:79:46:64:7D:9D:57:59:A0:1F:8D:18:66:8A:37:7C:06:3F:F5:91:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a4:38:fe:d5:09:d7:32:e1:76:1d:0f:eb:00:74:1b:38:07:
41:2f:cf:7d:f5:14:5a:45:9c:35:30:d6:c8:42:0c:98:f7:4a:
1f:2f:f9:f8:ad:45:28:cf:db:6d:a3:0b:5c:0d:70:97:66:61:
d8:0e:a9:be:7c:0a:bb:c2:ca:02:0d:da:8d:b7:e7:df:4a:e4:
24:eb:b3:65:fb:d5:59:2c:9f:a7:d1:e8:31:d4:6a:13:c8:cd:
c1:c4:e0:c4:93:8a:a9:d1:c5:3c:f1:99:69:5e:79:91:4f:a4:
5c:70:b5:20:ae:cb:2d:99:98:78:fd:bd:86:8c:7b:cb:b8:4b:
b0:3e:10:4a:b5:a5:a4:d1:7c:cb:f2:f0:7a:c6:fb:e8:82:d7:
56:48:1f:69:40:7d:ab:ee:99:3d:63:f6:2e:50:34:3d:af:a6:
a9:6a:b7:9a:78:d6:23:ce:35:86:ee:aa:9f:65:27:c3:6e:80:
93:ba:c6:c9:1e:5b:aa:86:45:af:62:d3:8b:97:58:6a:78:ec:
23:76:f9:49:6a:c7:76:6a:f2:10:27:9f:5e:bc:5c:6e:4a:1e:
dc:49:de:2f:67:79:a4:6b:8b:70:b4:c5:b1:2e:0c:b4:aa:28:
61:56:87:09:6b:22:ab:9b:1f:7d:a0:ce:c8:07:9e:50:7e:8b:
5c:1c:b9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:21:48 2026 by rpki-client