
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft
File: eYKALOcYMFkLJquplx4S9q4Y3O4.mft (raw, json)
Hash identifier: uL2MuqawVFyxQ/KGVLLqQXNpb0pk619LR+HDGeWIgxY=
Subject key identifier: DC:0B:48:DF:AB:28:CB:BE:53:F9:B6:2A:66:67:7F:20:01:14:AB:E1
Authority key identifier: 79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE
Certificate issuer: /CN=7982802ce71830590b26aba9971e12f6ae18dcee
Certificate serial: 019D3940E0AA13D282742038BC0246AECEAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:00:46 +0000
Manifest this update: Sun 29 Mar 2026 11:00:46 +0000
Manifest next update: Mon 30 Mar 2026 11:00:46 +0000
Files and hashes: 1: Ym1MgRv-50h_8HgOmRXao0XyVRI.roa (hash: QCOXuZU6xfCdgok7iSaeanqJZnLc1XTx+TNhtGwPM/g=)
2: eYKALOcYMFkLJquplx4S9q4Y3O4.crl (hash: L8jkLMVVIjINa4lF6LLwYFIjRbOMm4WZzMsDyhnqRhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:e0:aa:13:d2:82:74:20:38:bc:02:46:ae:ce:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7982802ce71830590b26aba9971e12f6ae18dcee
Validity
Not Before: Mar 29 11:00:46 2026 GMT
Not After : Mar 30 11:00:46 2026 GMT
Subject: CN=dc0b48dfab28cbbe53f9b62a66677f200114abe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:12:78:aa:3d:a9:f6:46:ef:9d:ce:53:2c:a1:
4f:15:ec:2d:f9:88:4d:ba:eb:50:eb:f5:48:b9:d6:
20:dd:70:fb:25:f8:42:f1:17:0e:7a:d8:79:8c:a0:
3a:f0:15:07:d0:16:43:0b:b4:09:d8:54:c2:d8:f8:
2d:f0:58:40:5e:6b:fb:41:9c:4d:60:3c:b7:95:ff:
2c:2a:23:4a:08:4a:12:02:fa:ed:76:95:cc:91:38:
08:e2:dd:35:39:b6:a5:7f:8b:4d:42:66:13:38:af:
a2:d6:8d:32:ad:43:8a:f4:88:8b:39:25:a7:56:4e:
c1:83:6a:53:a1:4a:46:84:20:5d:be:ab:69:49:c9:
36:26:b5:b6:ea:cd:1f:dc:ee:d4:bf:9b:0b:56:d3:
c9:43:b0:8d:40:5e:77:68:c7:b0:66:47:c9:b2:58:
4d:ef:39:1d:6b:d0:3f:ed:30:e4:eb:3a:64:22:da:
09:bf:6d:87:7d:7c:0e:9a:a0:ed:ad:06:8e:37:95:
5a:33:95:b7:d8:05:5f:e2:99:ec:91:e9:d3:2c:b2:
20:5c:7a:87:6c:7d:3f:8f:d4:2c:fc:59:a3:99:23:
20:6c:fe:0a:44:ef:84:30:4a:d3:a7:48:6e:64:d1:
8e:30:5c:14:3d:58:bc:31:3d:8a:8d:d0:d3:42:b3:
44:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0B:48:DF:AB:28:CB:BE:53:F9:B6:2A:66:67:7F:20:01:14:AB:E1
X509v3 Authority Key Identifier:
keyid:79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e9:b1:dc:20:18:23:80:f3:96:5b:61:fd:33:c0:56:88:a4:
0e:bd:18:e6:98:6b:e3:54:4c:8a:7b:1f:36:7d:12:7f:43:3c:
07:99:eb:52:df:20:58:e5:92:ed:c9:18:50:69:92:63:55:ec:
38:c1:64:03:c1:9a:7a:14:88:42:63:bc:27:5a:5f:83:57:37:
b0:e0:22:78:e1:ad:e6:3e:3a:2c:89:9e:f4:ec:88:ad:9b:e2:
18:57:10:42:69:5b:9f:48:06:55:ef:04:2f:3f:c9:05:f0:33:
bb:d9:33:e0:b7:a3:cb:98:de:4f:76:5c:73:51:d2:4c:9a:d2:
80:29:df:25:42:4a:ca:87:bb:62:b7:77:a2:2d:97:a6:de:0e:
d3:72:1f:eb:79:88:b3:05:69:15:dc:b2:fd:8e:56:e2:e1:6f:
21:eb:01:a6:23:c4:57:85:99:05:06:82:cd:bc:42:70:7b:a0:
42:54:ad:48:bd:7e:8a:dd:4e:fe:1b:c0:6a:64:bf:32:4c:33:
c7:b2:d1:36:7f:78:ab:01:2a:df:bb:0c:30:15:db:99:b3:d8:
8c:e3:6f:74:1d:c0:d9:90:89:b1:5c:eb:fc:a0:b8:4b:c2:3d:
70:16:7e:7d:8c:c5:3a:64:bc:ef:08:98:15:36:b3:cc:92:4c:
4a:3e:09:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:06 2026 by rpki-client