Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
File: eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft (raw, json)
Hash identifier: fufH13Jl+ev8Amr19nYuUzdEZUMMX2/C4Epo8Lqf4wI=
Subject key identifier: AA:7D:47:86:27:59:50:09:EA:F1:44:08:E8:2B:5D:AB:3A:84:5E:9F
Authority key identifier: 79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
Certificate issuer: /CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Certificate serial: 019DFFF3B372669F2DB8B6AD6FFED3659908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
Manifest number: 18F9
Signing time: Thu 07 May 2026 01:00:54 +0000
Manifest this update: Thu 07 May 2026 01:00:54 +0000
Manifest next update: Fri 08 May 2026 01:00:54 +0000
Files and hashes: 1: 5zwZDxIuULUKjp1rgcwRTBY-pVU.roa (hash: mUMWXUGRFNqTfVs8CnS61wDQkaxlvFmZ/n69Cmi6CP8=)
2: eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl (hash: dXYbiYg5tdM1T56oNksmu4UBm8GkFL1weGg4QvWvb+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ff:f3:b3:72:66:9f:2d:b8:b6:ad:6f:fe:d3:65:99:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Validity
Not Before: May 7 01:00:54 2026 GMT
Not After : May 8 01:00:54 2026 GMT
Subject: CN=aa7d478627595009eaf14408e82b5dab3a845e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fc:54:fc:a5:9c:04:d3:3b:05:5a:ff:9a:6c:
c5:20:66:5a:f3:57:16:1a:ec:f3:5c:57:00:c9:fd:
b2:1d:22:61:b6:db:38:07:88:86:69:4a:68:3f:8b:
e7:08:71:ee:33:41:0d:d3:bd:f7:09:94:18:72:11:
5e:0b:c9:92:2f:68:01:94:b0:5c:b2:d2:0d:cc:77:
b2:2e:e0:35:75:41:7f:66:0d:6a:ba:b8:8a:5e:4f:
08:40:2a:5c:7d:18:79:83:d1:d1:9b:94:c3:24:9a:
2d:f3:d4:b0:03:4d:1a:99:ec:f8:fe:58:e3:c5:66:
82:08:66:04:52:ef:8f:79:09:e8:78:35:25:2f:cf:
2f:81:10:9a:c3:be:59:d9:c5:9b:73:c8:22:3f:83:
b3:ec:06:d4:fb:43:62:07:e9:f8:65:17:f9:c4:eb:
ca:ad:91:a1:7d:98:11:f3:c8:cc:1b:28:09:35:41:
37:a4:fc:d8:89:a8:fc:96:94:a0:f3:97:77:36:e9:
f3:fc:4a:2b:ad:76:7d:99:cb:59:16:fb:cc:cd:f3:
67:f5:b3:a0:78:e4:06:87:43:08:bd:3d:2f:ee:e5:
21:b7:fb:7d:84:d8:16:be:86:1f:47:84:fe:68:d6:
45:5a:d5:0a:4c:5b:9b:93:fe:d2:11:df:46:2e:f4:
95:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7D:47:86:27:59:50:09:EA:F1:44:08:E8:2B:5D:AB:3A:84:5E:9F
X509v3 Authority Key Identifier:
keyid:79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b6:dd:5a:2a:9a:fa:2c:1b:00:07:f6:a5:69:fb:02:77:20:
58:70:82:6e:68:2c:b6:e2:62:69:51:17:53:6d:ab:83:a0:d7:
19:90:01:e4:81:68:e4:8d:36:c7:6a:c0:05:1e:13:ac:65:04:
30:55:46:1d:e8:85:cf:9e:fa:d6:c7:09:37:cc:89:d9:d1:08:
a2:04:3f:e0:03:77:10:62:73:bf:f9:77:00:cd:be:55:7a:2b:
d8:8c:73:f4:86:4e:0b:80:6a:61:fd:28:45:cf:38:9f:e2:c5:
4f:cb:de:24:b3:ae:f2:bf:2b:5e:37:ae:fb:7d:45:c1:e1:62:
97:b5:d0:12:68:14:e6:14:73:38:6d:b4:9a:ff:e0:2f:fc:a8:
39:dc:7c:54:b6:44:ed:78:fa:36:15:08:df:59:16:4b:e8:a1:
42:f1:57:e7:f6:7d:79:b4:cc:e2:db:96:89:2a:ac:50:c2:74:
a9:cd:22:72:ac:4f:00:7d:b9:4a:81:3f:69:af:b6:76:da:60:
dd:84:46:14:eb:64:2c:03:97:3f:63:c9:09:af:8d:10:10:90:
0f:7b:cf:9d:ff:e5:13:cd:3f:7e:82:81:e4:59:77:1a:d0:f1:
98:17:24:22:d2:1b:01:f9:4d:de:b7:06:e1:f9:7b:7d:06:55:
d4:3c:e8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 06:30:34 2026 by rpki-client