Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
File: eY97H9gCs9xqvXpc2nhqYxHh1j0.mft (raw, json)
Hash identifier: Y/Wsc02zD0EA9WWcpJD5AfrRLQVyr+MnQdNcXmq3/b4=
Subject key identifier: C9:07:18:5A:80:73:25:18:59:1E:52:37:CE:1F:00:33:1E:E4:4B:D6
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 019D394194646EAC4B831C5562E04E807277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
Manifest number: 10D5
Signing time: Sun 29 Mar 2026 11:01:32 +0000
Manifest this update: Sun 29 Mar 2026 11:01:32 +0000
Manifest next update: Mon 30 Mar 2026 11:01:32 +0000
Files and hashes: 1: eY97H9gCs9xqvXpc2nhqYxHh1j0.crl (hash: M5sspNoSNClCPJjRdekmTzvNkmwRZN6rer3bR2fYyts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:94:64:6e:ac:4b:83:1c:55:62:e0:4e:80:72:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Mar 29 11:01:32 2026 GMT
Not After : Mar 30 11:01:32 2026 GMT
Subject: CN=c907185a80732518591e5237ce1f00331ee44bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:50:2c:eb:0c:e9:ae:df:8f:03:57:d1:9a:d7:
fe:5a:e0:d0:e8:df:aa:c8:d3:1f:e9:79:84:10:1a:
13:e7:df:d3:d1:d7:3f:7a:04:1a:da:66:71:1e:68:
c5:23:3a:7b:7d:56:b0:d3:3e:84:67:cb:86:42:86:
89:38:bd:ad:ae:38:8d:c7:90:71:32:36:33:06:58:
07:1c:1b:bf:e4:59:73:aa:d8:6f:de:7b:c4:e2:b6:
f6:03:14:d7:31:7c:8e:23:90:db:51:ef:7b:92:27:
8d:15:59:25:fa:59:cf:3a:ea:a1:3a:8e:b8:64:39:
96:36:8c:87:c4:18:f0:ac:8e:ec:a7:b2:a5:4b:ba:
ee:4f:a5:f9:75:98:e8:07:a0:99:44:5d:f0:66:5a:
d1:17:08:26:d7:5b:91:6f:e0:bc:a8:e4:a6:fc:bd:
e2:de:d2:76:0d:94:2f:88:13:3b:42:d1:e5:06:c8:
b9:86:98:b7:5c:8c:3a:7c:20:e3:4c:a1:8e:94:01:
a7:25:60:f1:8f:c5:f2:b5:18:0f:12:b4:79:3b:d8:
ea:26:71:d5:f1:f0:56:22:f9:3a:c4:13:fc:14:12:
00:b4:b6:1d:aa:b4:dc:c5:bb:ab:a1:60:57:01:6c:
e5:ba:35:e7:85:ee:71:e7:38:64:44:ad:2c:7b:07:
73:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:07:18:5A:80:73:25:18:59:1E:52:37:CE:1F:00:33:1E:E4:4B:D6
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4f:45:3c:df:7f:71:d9:3f:b9:03:13:ed:b3:8e:44:4a:64:
56:47:ef:ca:ce:7c:51:2f:93:be:5a:9c:78:d7:5d:31:3f:6e:
34:29:9d:e8:95:f1:aa:d0:30:34:58:06:40:9f:b5:96:4a:52:
cc:9f:bd:db:08:51:11:43:35:d6:db:05:ec:93:7c:ec:56:08:
8b:4e:77:b9:ff:f8:bc:cc:bc:13:96:c4:da:67:86:5d:25:67:
91:52:4b:25:d1:af:a9:ca:93:aa:8d:48:5f:40:1c:f9:cf:6e:
68:43:d2:70:8b:4b:76:4a:bd:26:7d:46:5c:a7:5d:35:fa:67:
57:f9:e1:f1:c1:60:7a:b5:ea:0f:68:42:38:4e:54:3f:4d:49:
2e:b5:bf:c5:9b:06:ef:7f:6c:bf:b2:c7:ef:2b:6b:84:46:ad:
bc:45:58:02:b3:77:4f:62:69:1e:1a:55:fe:0e:3e:52:e9:4e:
37:cc:b5:c9:05:aa:1a:6f:70:4c:40:2e:92:e8:db:30:c3:86:
51:bc:47:5f:d8:2c:c9:b8:43:c0:ef:01:41:ca:74:63:7c:b7:
ab:df:00:c0:8f:f6:ad:ef:45:00:e2:20:9e:65:f5:3c:1e:46:
28:7e:55:ed:15:6f:6b:f0:c8:a7:9e:3b:c2:16:08:61:20:eb:
1d:7a:d8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:58 2026 by rpki-client