Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft
File: eIW8vdwL57G92jasnwzsQn8Tey4.mft (raw, json)
Hash identifier: yXvTPcDRSbIw02GB/Db+VIoUfK/4b6HZ+1UdqxhCmDk=
Subject key identifier: 45:4E:09:D6:FE:63:F2:0B:3D:27:A4:2A:7F:E5:8C:D7:11:70:66:A9
Authority key identifier: 78:85:BC:BD:DC:0B:E7:B1:BD:DA:36:AC:9F:0C:EC:42:7F:13:7B:2E
Certificate issuer: /CN=7885bcbddc0be7b1bdda36ac9f0cec427f137b2e
Certificate serial: 019D390A2B265D9E0738031102DA74B4B737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft
Manifest number: B4
Signing time: Sun 29 Mar 2026 10:01:00 +0000
Manifest this update: Sun 29 Mar 2026 10:01:00 +0000
Manifest next update: Mon 30 Mar 2026 10:01:00 +0000
Files and hashes: 1: W03Dmlw1Ww-cFIp9vkfsWC5L8jY.asa (hash: tgVo7GEFMdcLKeWoqIyQC9dBMhmbDoLL5DmLM5lP/iU=)
2: eIW8vdwL57G92jasnwzsQn8Tey4.crl (hash: 6c0uXjYcBYN/1DVG9LVt3zg7t9HGAaXYaaXnhz1QFtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:2b:26:5d:9e:07:38:03:11:02:da:74:b4:b7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7885bcbddc0be7b1bdda36ac9f0cec427f137b2e
Validity
Not Before: Mar 29 10:01:00 2026 GMT
Not After : Mar 30 10:01:00 2026 GMT
Subject: CN=454e09d6fe63f20b3d27a42a7fe58cd7117066a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d7:fd:ac:9c:fc:7b:99:a3:4e:99:31:1d:80:
4b:db:f9:a5:fc:24:c3:29:24:be:54:e9:c7:0a:bb:
e7:71:27:80:f7:fd:a7:f3:bc:c9:f8:1b:7f:ed:02:
d7:01:db:d7:de:03:e8:a4:22:c2:4d:29:98:67:15:
b1:47:fa:55:3f:2b:b4:19:0b:fe:ec:74:00:6a:b0:
28:c5:51:ba:02:1f:50:43:24:2c:25:78:54:35:8e:
d2:2d:4a:5e:48:38:de:ae:6d:6f:39:33:85:40:d3:
82:fb:43:c1:87:47:09:28:2c:72:e3:66:de:66:c5:
de:32:3f:e0:37:e5:ee:b0:67:92:53:99:a1:61:d4:
e7:55:f5:e6:86:0f:05:30:2e:b2:98:e8:21:6c:56:
7a:a5:b2:38:7d:ca:b5:57:08:ef:73:d2:50:02:9b:
ca:9d:58:e6:20:de:3c:40:9f:de:34:0c:f7:de:f4:
09:64:b6:0b:21:65:19:5b:0e:91:e3:1c:32:83:ea:
3e:f3:85:b1:f2:b6:e4:94:b3:3d:6d:6d:b9:b0:df:
7c:0d:de:81:a9:36:ce:b7:ec:85:3b:2f:0c:ba:e1:
22:91:a5:c4:6d:28:10:f9:f4:8f:22:9a:10:51:57:
93:c0:79:03:d9:10:7d:32:72:48:a8:f1:f8:43:de:
20:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4E:09:D6:FE:63:F2:0B:3D:27:A4:2A:7F:E5:8C:D7:11:70:66:A9
X509v3 Authority Key Identifier:
keyid:78:85:BC:BD:DC:0B:E7:B1:BD:DA:36:AC:9F:0C:EC:42:7F:13:7B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c1:a8:19:88:72:f0:f5:87:49:94:ea:ba:15:bd:89:63:f1:
08:84:f3:23:5c:5b:5c:53:be:f4:3d:78:40:fb:d2:76:41:fc:
3a:77:e9:6a:9d:87:7e:07:85:d5:42:70:43:ee:03:b5:77:d0:
5e:d7:eb:35:d7:e8:3d:bc:35:c3:62:8f:c7:3f:d4:51:fe:3e:
bf:48:45:f4:c5:9a:f0:c9:c3:f3:46:89:aa:c3:1a:63:0a:f5:
82:6e:c2:ff:b9:15:2a:8c:3b:b1:20:5c:29:12:9b:1a:3d:b4:
18:ee:2e:5b:be:da:53:85:1d:8b:5f:44:ea:3b:d7:9f:11:3b:
dd:9d:d4:ad:6c:8d:59:c6:b0:9e:f1:14:7d:6a:02:f2:0d:13:
25:d9:fa:0a:18:0a:97:ec:02:c4:74:75:7e:b2:37:13:6c:00:
3b:01:ca:51:a7:1d:a8:a7:88:9e:59:b9:42:a7:41:54:44:b3:
7f:14:6f:c5:d0:04:8f:5c:8b:e2:c7:97:08:7b:e2:70:f7:55:
23:66:3e:68:5e:8a:03:6d:c8:87:48:b9:4d:e8:ac:36:ad:ad:
3b:39:2d:49:de:f3:4a:4b:50:39:db:be:b3:86:24:a8:09:7f:
2e:55:5d:c7:e5:54:43:55:7a:2b:62:07:8c:75:b2:8b:df:2d:
b9:63:63:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:21 2026 by rpki-client