Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
File: EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft (raw, json)
Hash identifier: YUnzvSihHQMt4w4FbDzDlX/8boLCHwSBWiDk7aNsRZE=
Subject key identifier: F7:DD:00:B9:D3:5A:8F:C2:24:1B:8A:11:E8:0F:B6:D9:6D:08:BD:E0
Authority key identifier: 10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D
Certificate issuer: /CN=1003cd25315330350d73f2a3579aa95e052b718d
Certificate serial: 019D382E9558037F7F76DD8216C3EDEA482D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
Manifest number: 0CC4
Signing time: Sun 29 Mar 2026 06:01:09 +0000
Manifest this update: Sun 29 Mar 2026 06:01:09 +0000
Manifest next update: Mon 30 Mar 2026 06:01:09 +0000
Files and hashes: 1: EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl (hash: pCYLrcJGgHjuVC+LpcGw/QEI5AauXyhxIrnzW40EMwQ=)
2: TgSGiVpEk6VcVoLx1zlEJGOCAMI.roa (hash: QQzCSEznQp8ZFwcwq9xyZGdqpLg4dA0oXWhf8hriZug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:95:58:03:7f:7f:76:dd:82:16:c3:ed:ea:48:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1003cd25315330350d73f2a3579aa95e052b718d
Validity
Not Before: Mar 29 06:01:09 2026 GMT
Not After : Mar 30 06:01:09 2026 GMT
Subject: CN=f7dd00b9d35a8fc2241b8a11e80fb6d96d08bde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b3:f9:f5:f2:7a:22:0f:25:88:12:0b:87:47:
de:58:08:07:7c:d1:dc:ba:c0:d1:d3:47:11:a0:20:
7e:f0:af:cd:90:ef:d7:0e:16:1a:7e:d8:29:0d:d8:
59:48:cf:cd:b7:c6:a6:f1:e9:60:9c:5a:4d:cc:bb:
f4:a5:0e:90:70:08:88:eb:01:a4:61:52:bc:63:a0:
5a:dc:04:a6:a2:0b:b4:45:af:8f:f4:75:09:98:ac:
98:8f:f6:27:7c:76:2b:92:e2:03:4f:c4:16:24:54:
2b:6a:0f:54:e9:c4:80:2c:9d:6a:67:20:79:76:d8:
e9:44:26:f3:cf:35:ee:4b:95:12:5c:f7:e9:ae:65:
49:26:4b:64:13:5b:64:06:6c:a7:2d:46:dc:b3:b8:
ec:67:f8:66:e1:a3:e5:62:62:7a:3e:0d:ba:a8:2b:
43:ac:35:70:ab:8c:ae:76:08:5f:0e:0b:87:da:ae:
17:e0:ac:a3:67:e6:4e:ae:bf:58:83:9c:66:a1:98:
41:76:13:a2:35:c9:4c:10:7d:99:56:a5:3b:40:41:
0f:1b:e5:72:07:26:1e:9d:00:12:c9:a1:90:65:e7:
70:eb:40:8d:2b:5e:9e:83:82:aa:8f:26:48:2f:cc:
07:a4:b6:f5:29:03:ef:63:7a:46:d5:4d:75:0e:8b:
fb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DD:00:B9:D3:5A:8F:C2:24:1B:8A:11:E8:0F:B6:D9:6D:08:BD:E0
X509v3 Authority Key Identifier:
keyid:10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e7:fa:96:71:8e:41:00:a7:0a:32:35:b9:79:f8:8f:08:fa:
37:cb:70:6c:a4:d9:ce:a7:88:c4:80:e9:5e:b1:0d:6a:11:04:
df:8d:81:1c:33:5e:10:57:24:75:68:c7:fc:b3:c5:78:fc:a3:
32:a8:46:79:c8:9e:b4:63:8d:7e:b7:51:f6:6b:8d:82:df:7c:
2c:13:c2:cb:52:db:38:08:4b:28:e8:d1:05:ff:c8:50:75:e2:
65:27:fc:e0:32:f7:2c:a9:ab:3e:c0:72:2c:62:21:8d:e3:2d:
74:b4:f0:08:dd:b3:cf:66:66:4a:e3:21:84:ef:2d:98:76:12:
c7:10:00:b8:e9:ea:6c:cd:66:43:c1:37:78:82:2b:b2:77:32:
87:a6:2b:39:17:ae:57:eb:8c:bb:2b:be:62:1a:8b:03:6b:a2:
3b:98:6e:e8:fd:a3:ad:9e:2d:79:5e:d8:3c:6a:07:19:a5:0f:
90:81:32:4f:89:92:54:3f:ef:ad:0b:72:4f:d0:85:70:8a:25:
e2:e2:92:45:94:2b:95:96:4e:35:94:ab:ab:ff:62:34:c7:fa:
88:e3:bd:5d:2f:ba:e8:8d:6c:54:e3:2f:3c:b7:51:70:69:ab:
30:59:b4:e7:2d:5a:14:15:16:c3:a8:ff:bf:be:61:7b:3d:00:
a0:a0:7f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:28 2026 by rpki-client