Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
File: eD8ukq1ZxwyM3CiygCniKXBcbJE.mft (raw, json)
Hash identifier: 2Qw7XpPbTcsn3Y0kgMWzbJn2daqPGoAD1uWyfHcNQoU=
Subject key identifier: 97:8D:0B:1A:18:87:4A:DF:FD:A1:6D:59:56:77:BA:C4:BA:A4:FC:F4
Authority key identifier: 78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
Certificate issuer: /CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Certificate serial: 019CB8B8A29B2D3075165AB42286217C92D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
Manifest number: 0D3E
Signing time: Wed 04 Mar 2026 12:00:33 +0000
Manifest this update: Wed 04 Mar 2026 12:00:33 +0000
Manifest next update: Thu 05 Mar 2026 12:00:33 +0000
Files and hashes: 1: cqkPcUlhylPWROpeUvaKpM1IHzI.roa (hash: Vj/WfOnXkP6T4SuWUuZJIwljoQd2+9R6QoAl56Tye4o=)
2: eD8ukq1ZxwyM3CiygCniKXBcbJE.crl (hash: pGUm4UsSH2akN85mdLFkmzvajL7bKj4qY7sCepnWApk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:b8:a2:9b:2d:30:75:16:5a:b4:22:86:21:7c:92:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Validity
Not Before: Mar 4 12:00:33 2026 GMT
Not After : Mar 5 12:00:33 2026 GMT
Subject: CN=978d0b1a18874adffda16d595677bac4baa4fcf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f6:67:95:fc:d0:ea:12:e7:c0:c9:c2:47:1d:
ce:d3:16:63:24:a3:95:88:11:ac:bc:77:5e:a2:6d:
e4:0c:d7:d5:b1:38:1a:f3:8f:0d:27:d8:60:88:9c:
e1:39:d6:b2:72:2c:64:b3:71:13:c6:02:b5:b7:8c:
fa:6b:e7:7e:95:71:1c:e4:0d:e1:05:c9:50:dd:9b:
57:b8:cd:17:90:30:84:c3:a0:70:96:5d:3b:0d:85:
27:60:af:94:2a:bf:ff:0a:fd:ec:e7:76:28:f9:33:
fe:17:32:b3:0a:15:d6:5e:2b:8e:bd:b6:42:85:f9:
52:7a:47:04:e9:dd:cb:7e:e4:9c:35:2d:12:64:d5:
b0:1e:26:8a:10:38:a9:5a:5b:15:df:3d:d5:5e:0e:
4d:12:0c:42:6c:c5:13:55:fc:7e:f6:d8:16:c9:7e:
f2:b0:c2:7b:4a:5d:81:1f:32:4a:e8:c6:d9:04:aa:
5c:c8:be:84:8c:aa:b9:51:d2:db:29:76:4f:5a:88:
79:d1:d1:a7:40:45:70:66:75:9a:f7:b7:93:d9:8f:
db:78:d6:cf:b7:17:8f:79:8e:08:58:08:0e:58:5d:
24:34:9c:cc:0f:5a:b2:3d:7c:6d:5e:a9:4f:ec:f7:
19:84:52:f0:81:c3:e8:c9:40:80:7f:cd:37:01:43:
bd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8D:0B:1A:18:87:4A:DF:FD:A1:6D:59:56:77:BA:C4:BA:A4:FC:F4
X509v3 Authority Key Identifier:
keyid:78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:99:16:c7:00:3f:1b:15:bc:ca:92:72:ee:22:f7:69:0e:a0:
86:e0:56:23:35:be:e4:ed:75:e6:cc:3c:6c:52:bd:e1:39:29:
32:f9:6a:e6:6c:d2:62:9c:36:a8:dc:65:95:87:72:f3:4c:26:
f6:d9:25:4a:4b:ee:d0:cf:1d:e4:8b:35:09:19:61:46:80:de:
d7:61:a6:e4:58:18:a5:a4:dc:00:02:d7:11:2e:1d:33:4e:75:
06:9b:14:72:36:91:11:a1:af:9d:68:41:10:6b:d2:98:e1:0b:
b9:28:2e:28:de:b2:b7:92:20:c8:38:6c:dd:33:67:d7:22:e1:
ba:6c:86:4a:4c:de:49:22:b7:e8:9d:93:2c:2f:ad:ab:f9:2b:
3b:4b:5a:e7:7d:cb:60:6f:b9:83:fb:d3:fd:cf:fe:51:7e:58:
19:f8:ce:7e:22:37:c6:b7:65:40:b0:e1:09:10:67:c3:0e:39:
20:1e:f9:d2:92:44:c8:96:c7:3b:e3:b2:34:84:6f:e7:16:b1:
47:67:0e:6e:ce:c8:e7:23:22:15:cd:73:06:48:07:e4:0b:50:
78:82:cb:4f:90:8e:f2:ac:53:22:55:e9:2a:21:37:2c:31:af:
b2:4b:b4:41:b7:4e:a4:61:10:ba:a8:b2:02:00:6f:79:c2:9d:
42:2f:88:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:55:48 2026 by rpki-client