Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft
File: eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft (raw, json)
Hash identifier: g+uEdnZwuC/g74ZhGkiS7uYDbnnbApeL8x7TN1Rl4hU=
Subject key identifier: 9D:D1:B8:23:E6:FB:EF:33:5F:9E:99:8F:10:0E:07:B2:E1:B6:47:DD
Authority key identifier: 79:38:DF:B9:EB:92:40:79:BB:70:6C:B6:16:ED:A5:72:86:4A:9E:13
Certificate issuer: /CN=7938dfb9eb924079bb706cb616eda572864a9e13
Certificate serial: 019DCF073FCD3FAFA23DE42AF7AD8B947F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft
Manifest number: 18E5
Signing time: Mon 27 Apr 2026 13:00:51 +0000
Manifest this update: Mon 27 Apr 2026 13:00:51 +0000
Manifest next update: Tue 28 Apr 2026 13:00:51 +0000
Files and hashes: 1: eTjfueuSQHm7cGy2Fu2lcoZKnhM.crl (hash: MADfuV52YI1FiMBTVB4/4tqbu7S4FBLndUjBylbqgKM=)
2: fuqw0iHhNCuVuekUeM8T1fTaCJo.roa (hash: YZyCBaih/449ErUelMJcsfBlXhyp73irp4pbkPjPb54=)
3: vpYJVd9lmAX8UFoe0uydgfVwJtU.roa (hash: eLTt6ySPFn6XU3Ymgk0lswL6I4f8T/KqgDPFjU696QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:3f:cd:3f:af:a2:3d:e4:2a:f7:ad:8b:94:7f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7938dfb9eb924079bb706cb616eda572864a9e13
Validity
Not Before: Apr 27 13:00:51 2026 GMT
Not After : Apr 28 13:00:51 2026 GMT
Subject: CN=9dd1b823e6fbef335f9e998f100e07b2e1b647dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:db:9e:52:cf:f5:87:69:21:28:d6:30:be:
d2:aa:61:7f:0c:88:aa:5c:87:78:dc:55:85:0f:96:
33:fb:dd:ff:ef:0f:68:bb:35:c1:5e:6f:99:6c:8f:
3c:6c:9e:19:1d:44:d9:26:94:1a:73:84:b3:19:5f:
5a:ec:e5:67:d0:fb:3d:fe:96:82:03:e5:1c:9b:1e:
f8:47:d1:eb:49:57:b9:1d:08:64:4d:20:1b:8a:64:
19:af:46:f4:8f:b5:a4:34:27:2c:56:3c:8e:6a:f0:
64:c6:fc:92:df:64:b1:33:f7:61:4a:40:ee:4c:57:
b0:d1:f9:b9:91:e6:e8:c7:e3:01:c6:84:4b:2e:40:
4e:af:fa:af:a4:dc:bb:52:93:1b:ab:00:07:3a:23:
12:c3:1b:76:ec:1c:36:3e:ca:04:01:7f:f0:55:e8:
e9:27:48:81:40:64:b9:75:b1:57:89:23:12:2f:aa:
5b:3a:f7:e1:e5:0c:6d:0b:0e:7b:1c:be:eb:48:63:
0b:3b:eb:b3:24:7b:ec:e4:51:62:94:7f:21:7e:f3:
e9:fc:b5:2f:90:f7:0d:91:da:6b:17:01:67:97:a3:
89:f7:a9:75:af:e2:95:b7:3c:6a:36:68:42:29:2c:
bc:82:7a:ad:df:be:f7:3b:da:75:c1:f8:d9:a8:c2:
1c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D1:B8:23:E6:FB:EF:33:5F:9E:99:8F:10:0E:07:B2:E1:B6:47:DD
X509v3 Authority Key Identifier:
keyid:79:38:DF:B9:EB:92:40:79:BB:70:6C:B6:16:ED:A5:72:86:4A:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:04:0d:f7:4d:59:41:69:61:56:4f:d0:7f:f3:ad:4a:76:1a:
02:23:8f:d7:7e:71:af:ab:61:9d:42:ed:d0:d6:a4:c7:dd:36:
69:da:6e:5e:9e:64:54:69:ba:9b:64:d4:f1:26:59:be:18:66:
7e:c0:fe:de:e5:66:46:7d:b8:22:f3:01:dd:84:07:3e:f0:8d:
c6:f5:8b:0e:61:2c:b4:dc:36:6a:e8:6c:e0:b6:1c:d4:bc:40:
9e:fc:08:3a:50:4c:4e:20:e8:00:d3:c5:ed:b2:37:37:88:45:
21:b9:6f:f7:3d:8d:26:05:27:41:49:a3:db:1f:1b:c4:5d:d4:
2f:c8:9c:dc:91:96:15:e8:d3:a0:51:0c:cb:67:94:77:45:c7:
f1:4e:32:6d:3f:b8:cd:ae:38:21:47:33:db:86:b6:16:76:a7:
67:73:a7:e1:5c:fb:40:c0:0c:e4:ba:20:91:d0:70:17:b5:5b:
a2:eb:8c:50:f3:83:18:a8:f7:0a:6e:1b:96:a9:7a:97:bb:f1:
0e:33:9c:ea:53:8d:ab:d9:ec:02:dd:0c:da:09:99:34:54:67:
2d:b8:03:43:59:4a:a0:2a:49:fd:87:3b:80:83:81:9a:e5:60:
4c:bc:fb:b4:56:ff:93:7f:85:b1:1b:75:95:44:c8:1a:9e:ae:
e9:6a:1e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:17:19 2026 by rpki-client