Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
File: iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft (raw, json)
Hash identifier: Njq8EFADJMY5iVAfCgZG9+AMhyORQdKql3c96hDmoEs=
Subject key identifier: 7C:CA:8D:65:DC:21:1E:27:58:A6:56:BE:AA:81:D7:8F:AD:0C:F3:13
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 019D3866837A5FD65A8F54713985E08B0D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
Manifest number: 1942
Signing time: Sun 29 Mar 2026 07:02:15 +0000
Manifest this update: Sun 29 Mar 2026 07:02:15 +0000
Manifest next update: Mon 30 Mar 2026 07:02:15 +0000
Files and hashes: 1: XMPEmo3VyZNZxdfu5EddVS62vv8.roa (hash: 2ZYUsjgp2DTdjQCWXZ434UAo5JDqjz2ePaAoipm0c8M=)
2: YklH_vepZzEkc4R0x2RBX8IDDUk.roa (hash: pv6n+2hKIVBO6+P4Pldjs2VXfAy2gbQUsUHIIXPpa8Q=)
3: iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl (hash: AME2yDwX/1DmO0QrRjEVddsURzEJglmprfn03wgyX1Q=)
4: p1-tBjo82YK5-hLx49YUOkRO8B8.roa (hash: pyv7bHMphEmXFj30CUE4/gG4n4biXAKLWYLes38ZMKE=)
5: psBFyd0hTNhbvZHPVPCTUfi9Q2o.roa (hash: /FnOfx1SdD/epfrxbTa7bP0djVz2kffTH1AWAe+LQA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:83:7a:5f:d6:5a:8f:54:71:39:85:e0:8b:0d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Mar 29 07:02:15 2026 GMT
Not After : Mar 30 07:02:15 2026 GMT
Subject: CN=7cca8d65dc211e2758a656beaa81d78fad0cf313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:52:75:98:10:72:61:cf:b4:d9:d9:04:fb:2d:
b7:a0:e0:78:22:46:1a:ec:33:65:16:e7:2b:3f:88:
a5:9c:39:d1:b3:5f:e1:2c:34:06:21:54:21:74:97:
a5:20:4d:13:80:a9:5f:91:e7:f3:a6:d0:d1:ba:88:
72:10:4c:2b:e4:33:89:64:aa:f7:36:29:94:e4:47:
79:48:f1:1d:d4:fe:19:8a:3e:d2:b7:ad:95:a2:4f:
09:89:ca:b5:f8:fa:cb:11:70:85:61:2e:2a:3d:dc:
2c:2c:34:4e:6f:28:1f:51:9d:4c:86:bf:6b:92:55:
d2:15:6f:dc:fe:77:7b:b7:64:1f:b5:28:fe:bd:a1:
1a:dc:28:fb:82:6a:22:c8:61:bc:94:31:c1:f6:c9:
3a:d9:af:1d:0f:5f:33:4e:84:ef:97:3b:68:03:e6:
92:e6:eb:14:09:60:a7:59:f7:9b:ae:d5:e8:74:4a:
b1:cd:d6:58:60:1e:f6:fc:fa:67:ef:cf:04:ad:f0:
d6:8e:34:43:82:ad:5e:ec:bb:36:65:bb:83:29:5d:
ae:4e:d1:6d:9e:8b:0a:b9:8e:ae:ca:87:b2:98:e6:
46:22:84:35:c4:e5:47:58:a9:ab:d7:38:21:62:a0:
cd:fd:95:43:f9:c0:96:e7:be:e5:b1:62:13:e3:a5:
b8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CA:8D:65:DC:21:1E:27:58:A6:56:BE:AA:81:D7:8F:AD:0C:F3:13
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7b:02:1c:f0:3f:98:81:a8:36:a6:cb:dd:0e:ad:cd:04:d2:
44:36:f8:05:33:ec:ff:ee:a2:6b:00:41:e0:d8:fd:78:c6:8f:
48:49:4e:2a:f8:8b:62:ca:ad:5c:46:48:c6:4e:17:cf:b6:2e:
3e:4f:2a:b6:d7:73:cc:c1:c8:e0:41:f1:88:c9:fe:4e:39:7d:
6d:f0:0a:16:46:f1:d3:dc:56:bc:7a:fe:58:35:b7:a8:21:59:
2f:ff:9b:bc:1d:7b:f3:33:dd:50:4d:7f:73:64:c3:88:1a:bb:
03:00:df:78:1c:2a:eb:cf:38:90:d9:a9:09:ca:fd:1f:85:30:
c4:cb:a1:58:87:6f:8e:cb:d3:1f:87:4d:58:9f:7b:75:40:5e:
2f:52:79:ea:63:cf:2a:98:0a:8d:19:ee:ca:90:9b:c3:11:b6:
f0:46:ad:ed:2a:2b:b2:cf:56:06:af:7f:ad:a8:80:ea:35:49:
2a:66:82:c7:bf:cc:88:f3:89:22:bd:07:ec:a3:4a:bc:22:f7:
99:80:52:e0:8e:b4:ce:c2:e5:ac:4d:f1:85:e3:34:2c:17:24:
ac:85:17:97:e8:97:df:e3:99:b0:3e:d9:91:c2:6d:e7:b3:ad:
fb:7a:3e:13:2e:e3:34:eb:c1:df:be:35:38:45:4f:12:bd:26:
98:3b:8f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:57 2026 by rpki-client