Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
File: e0nQsDY-emQIPi5UzDAfUUrgiRA.mft (raw, json)
Hash identifier: b+p6SUWff23KRQy/te86QcuYjkrYcl/8ZpYKuPniGFg=
Subject key identifier: 4D:39:00:9C:AB:76:F5:0B:B1:3D:4B:73:0A:D6:19:10:12:85:B4:C8
Authority key identifier: 7B:49:D0:B0:36:3E:7A:64:08:3E:2E:54:CC:30:1F:51:4A:E0:89:10
Certificate issuer: /CN=7b49d0b0363e7a64083e2e54cc301f514ae08910
Certificate serial: 019DCD500FE79622B2DAB199139ED3F45F11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
Manifest number: 2F
Signing time: Mon 27 Apr 2026 05:01:09 +0000
Manifest this update: Mon 27 Apr 2026 05:01:09 +0000
Manifest next update: Tue 28 Apr 2026 05:01:09 +0000
Files and hashes: 1: I6diHiTCg9qHT58_rXDkmTY5s4M.roa (hash: y3DBQKvGuIS8X4KFKKuAO23bkqAVCUyZ36p0a5xpbis=)
2: e0nQsDY-emQIPi5UzDAfUUrgiRA.crl (hash: s2XigsyRHrUs8vGX44CZqHeuv1Nrp5w20/8hrJv6KW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:50:0f:e7:96:22:b2:da:b1:99:13:9e:d3:f4:5f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b49d0b0363e7a64083e2e54cc301f514ae08910
Validity
Not Before: Apr 27 05:01:09 2026 GMT
Not After : Apr 28 05:01:09 2026 GMT
Subject: CN=4d39009cab76f50bb13d4b730ad619101285b4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:84:29:f2:ff:8b:42:5f:0c:70:df:8c:02:b4:
68:cc:5c:1e:aa:2c:6f:6c:44:2e:2e:f8:ae:53:01:
69:fa:ce:eb:ec:e9:49:97:fc:46:87:32:2e:f8:da:
4e:41:9b:0b:7f:36:c4:6a:23:98:bd:c6:45:c7:ec:
ae:1e:01:86:1d:5a:79:9d:ef:1a:97:e3:4c:a0:a8:
39:61:79:cc:85:27:3d:63:cc:a8:a0:3b:b1:eb:f6:
6c:9f:5f:94:5e:98:3b:79:14:e1:08:53:7a:b2:d1:
0e:99:68:8b:cd:12:27:79:9d:d1:90:43:4a:3e:cc:
ac:8f:3b:3b:02:b1:01:8a:87:9a:6f:84:8a:ef:f0:
e6:b5:4a:01:85:49:6c:ba:00:d0:f4:5b:08:ed:15:
9f:de:d3:e3:ae:8d:e3:82:03:04:3f:57:54:c1:a2:
3a:20:22:23:17:68:e0:d9:ed:68:c0:8f:b0:44:f9:
ff:3a:fd:48:b6:41:b3:e2:9b:cb:2d:0b:1c:6f:6e:
7e:f7:0a:d4:c2:1c:5c:6c:84:62:42:8c:8d:ef:cc:
ba:67:7d:ba:19:ee:4e:8b:df:7c:42:9d:a5:03:07:
ed:66:c3:98:2e:8b:2c:5b:64:f6:26:3c:6d:91:88:
fd:09:46:84:93:0b:31:f8:7f:5b:bc:e7:e1:41:54:
d3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:39:00:9C:AB:76:F5:0B:B1:3D:4B:73:0A:D6:19:10:12:85:B4:C8
X509v3 Authority Key Identifier:
keyid:7B:49:D0:B0:36:3E:7A:64:08:3E:2E:54:CC:30:1F:51:4A:E0:89:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:23:e8:ca:8b:a1:ce:9f:a0:97:52:d6:f3:41:df:d7:3f:35:
55:c6:6a:c6:56:ec:bd:8f:e7:f1:40:6b:88:7e:65:94:68:13:
6a:f9:4d:38:f1:7f:13:88:ca:a3:95:8d:17:17:53:6b:0c:8a:
b5:47:ed:09:a5:14:53:8f:34:44:0f:06:78:38:34:6f:9d:df:
d1:9b:62:6c:8e:da:34:80:77:14:c7:03:b0:c5:ef:af:72:78:
34:34:0b:be:39:7c:a2:2a:08:8a:8c:14:29:78:ac:ca:b0:f3:
0a:86:6d:e3:ce:9c:f2:08:9f:4d:2b:43:e1:3c:cc:38:5e:6c:
42:4f:0c:4a:25:08:51:75:6d:27:e6:54:fd:9c:9b:bd:ae:96:
b5:11:42:63:61:21:4f:a8:99:09:b6:91:0b:7a:fc:e5:44:73:
25:42:37:49:95:82:69:e0:22:24:cb:13:58:3a:da:f5:82:3c:
9f:c2:c7:1b:a5:e7:69:98:6e:65:4a:8b:a3:36:ae:6b:d8:e7:
11:f3:cd:ce:62:24:3e:88:bd:ba:44:4a:9b:1c:4d:7d:90:5a:
ba:18:07:6d:98:f0:c8:85:df:05:10:60:e4:b6:d8:fc:ef:85:
83:6f:b4:34:0f:77:5d:95:a3:41:11:40:1d:62:bc:1b:41:3b:
42:7c:ea:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:38:36 2026 by rpki-client