Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
File: eQ3IFFdVEBrMCIiqALsouZW5xPE.mft (raw, json)
Hash identifier: YVUMF1Ao3jZrpENFn2KqH2eoaJ6WnlijGsbMNd0vz88=
Subject key identifier: 64:3B:DF:F5:87:00:A6:E6:FA:8F:B3:90:47:8B:45:32:FB:9E:52:CA
Authority key identifier: 79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
Certificate issuer: /CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Certificate serial: 019D39412A63AA9D214032607DD799213EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:01:05 +0000
Manifest this update: Sun 29 Mar 2026 11:01:05 +0000
Manifest next update: Mon 30 Mar 2026 11:01:05 +0000
Files and hashes: 1: E_fsK2xkMQPa9f4KE0p5s-E33Rs.roa (hash: fBstBj+krtA4Tx9gbY6Hp+BWosNY6KbmZu55yGuUOb4=)
2: eQ3IFFdVEBrMCIiqALsouZW5xPE.crl (hash: X/iSFUds/yuZkXs+2CKBycR26M61eH0gZYJnVfGsokE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:2a:63:aa:9d:21:40:32:60:7d:d7:99:21:3e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Validity
Not Before: Mar 29 11:01:05 2026 GMT
Not After : Mar 30 11:01:05 2026 GMT
Subject: CN=643bdff58700a6e6fa8fb390478b4532fb9e52ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4e:87:ab:43:89:e1:d5:97:e9:6e:f5:37:a0:
8a:f5:71:0b:48:23:b4:ad:db:b5:ed:71:34:60:92:
bb:8f:70:17:63:38:f0:00:b4:30:76:e5:14:f5:91:
ba:f5:b8:d0:76:57:d3:56:1a:c4:02:92:57:e0:b0:
8f:cf:9c:a2:b3:ec:77:fd:94:06:ac:1f:ee:58:c6:
eb:6e:c2:a8:93:ac:8d:f9:4b:51:74:bd:b7:11:48:
de:b5:94:89:4a:2f:b0:ef:0c:0f:b3:8e:15:3f:4d:
b3:fb:b7:cc:d9:68:57:35:8e:ee:90:38:c0:9d:e9:
0c:d6:18:a0:e2:38:b1:0c:ce:55:40:87:0f:65:2f:
7a:1d:f8:87:b8:43:3c:26:23:48:e4:30:90:90:bd:
a4:be:11:4a:eb:c5:48:78:00:54:58:20:1c:0f:d8:
eb:24:56:bc:7b:ac:13:72:65:80:70:34:1b:0e:46:
02:71:e0:79:26:2b:86:73:30:fa:62:66:9b:72:d3:
da:61:08:42:82:55:6d:18:7d:70:88:75:2d:7a:a3:
a2:da:6b:99:b6:db:bf:7b:c1:04:d5:eb:30:e5:fb:
14:21:65:ec:3a:06:f0:ae:a6:6c:74:39:ca:bc:1f:
69:0e:d3:5b:59:78:88:e5:ef:52:f9:51:53:fc:45:
9e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3B:DF:F5:87:00:A6:E6:FA:8F:B3:90:47:8B:45:32:FB:9E:52:CA
X509v3 Authority Key Identifier:
keyid:79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:2b:88:68:b0:b7:8c:bf:87:49:d5:59:fd:e5:48:ae:e7:e2:
8d:08:4d:f8:17:53:63:85:bd:ea:85:d4:33:94:11:41:4e:5b:
53:83:97:78:e6:ef:3c:3c:e2:77:45:18:8f:87:c0:7b:4e:a7:
1a:0b:a8:a5:8c:10:7e:db:75:e6:23:60:d8:2b:42:49:95:5d:
a4:fe:4e:03:69:11:74:50:13:dd:ac:46:e1:37:85:1c:c8:9f:
a7:b5:66:25:34:81:8d:a4:12:d4:d2:bf:96:86:f6:ba:b7:f7:
f1:7a:2b:36:35:58:91:4a:d4:58:38:30:19:3b:94:3a:1f:2f:
a6:f3:e4:0e:d6:58:53:8f:a3:f2:3f:23:87:77:7e:28:4a:94:
27:1e:16:f0:99:39:a4:ca:28:e8:ed:89:29:f4:e9:cd:26:ca:
f8:f5:71:43:bd:f8:4c:28:15:e7:47:d5:32:44:a7:b9:23:4a:
bb:96:12:cf:dd:98:05:84:92:eb:7a:3b:83:2d:f6:83:8c:ba:
5d:21:10:8c:21:28:43:4e:5f:53:6c:2e:1d:46:b4:7a:f2:7c:
cc:aa:8b:91:ce:3c:b7:aa:9d:ed:de:7d:1a:64:62:fd:b7:ed:
f6:68:b1:32:0d:86:5f:af:f8:3a:2b:31:76:2b:e8:c9:0c:78:
20:2a:df:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:46 2026 by rpki-client