Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
File: eXpIzBPiAOLT84r4MxjRvK9vYzE.mft (raw, json)
Hash identifier: 9jNG4RAftwJbpI1FrFq0r5oRC83VmgL02Vk9QW1FGEk=
Subject key identifier: E3:11:06:45:55:B0:45:C4:6D:FC:42:D6:73:4C:25:68:8F:C6:71:98
Authority key identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
Certificate issuer: /CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Certificate serial: 019D22EFFAF6AB1DD552E4C09A25C276F3B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 03:00:45 +0000
Manifest this update: Wed 25 Mar 2026 03:00:45 +0000
Manifest next update: Thu 26 Mar 2026 03:00:45 +0000
Files and hashes: 1: 1CoDti7UyWuABXfzaLp-v2yW2HA.roa (hash: E0ry/JWuGn8+ExPO+znV4eEnxCmGw1JlXLAD1xMsn3M=)
2: CM5wA7_Mj4XNK2JxKM8h4YQ6N-c.roa (hash: vqRJimrGP27MPdv4zjttCm0+Djwer+Zrgp7ip8OhqNI=)
3: eXpIzBPiAOLT84r4MxjRvK9vYzE.crl (hash: PXwej3YBQvsRr7Ec+ImU8S7RIO4anaFKhdQvq06ZpBs=)
4: vrHxDQdDvD5FkJJ9HXKxIeXSD6g.roa (hash: 6/LxhvXlOR/ty2sj2ZAK5GVcT8Qr18RlIGwO+dZwois=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:22:ef:fa:f6:ab:1d:d5:52:e4:c0:9a:25:c2:76:f3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Validity
Not Before: Mar 25 03:00:45 2026 GMT
Not After : Mar 26 03:00:45 2026 GMT
Subject: CN=e311064555b045c46dfc42d6734c25688fc67198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:d2:82:62:e9:64:d2:f9:70:9f:b6:53:57:
f1:6c:f9:2a:8d:1a:45:15:30:14:de:d5:80:ad:ed:
fd:4c:a3:9f:48:07:50:73:51:19:ce:3d:2e:bb:77:
2e:58:77:ae:10:3c:24:b0:0e:a7:50:6a:54:3f:e1:
52:01:6b:49:1e:88:f3:44:49:37:04:94:32:e7:8a:
a9:4a:b8:c2:3d:8f:03:86:8a:41:ee:ef:9a:c5:d6:
9b:99:2d:f1:48:89:8d:fc:23:9c:38:51:ae:b2:cc:
a0:7c:3d:64:d8:19:af:32:b9:b7:39:88:e2:2b:e7:
65:a2:de:ce:60:63:f6:54:28:87:c4:7f:ac:8c:ae:
4f:ca:ed:fc:8c:85:c0:bc:f5:2e:56:3a:cc:cb:11:
10:42:f5:59:73:70:88:35:78:e8:30:73:e4:01:10:
0a:5d:80:44:3e:b3:6c:03:c4:24:65:7b:a9:a7:3a:
0f:8d:d7:8d:16:c6:94:5b:0b:d7:b5:cb:0a:35:2c:
98:77:c0:54:07:75:e2:88:30:7c:f4:1a:15:00:18:
10:6f:61:b9:c9:1e:65:82:d9:c6:09:49:39:fb:78:
6f:e8:9f:a4:7b:0d:81:12:d4:f4:f4:2f:ff:8b:b6:
fe:26:70:3c:6c:cc:a7:a0:3c:71:a1:d8:40:e6:13:
cb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:11:06:45:55:B0:45:C4:6D:FC:42:D6:73:4C:25:68:8F:C6:71:98
X509v3 Authority Key Identifier:
keyid:79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:84:0a:84:c3:cb:0f:53:19:dd:63:b7:63:6b:3f:6e:da:74:
a5:b3:7d:fb:62:d6:04:44:bc:c9:92:22:c1:cd:d7:17:a7:00:
fd:1b:a5:c3:4c:56:a4:71:51:7c:dd:1a:46:94:e0:99:bc:fa:
9d:c5:d4:ee:99:8c:fb:bb:df:fe:9a:f9:63:d4:11:8f:88:3c:
fa:55:ef:8f:d7:f0:79:81:5e:f6:b1:6a:5a:44:a5:85:d0:12:
a5:bf:45:7c:97:af:a6:86:6a:58:e8:7b:c5:2a:47:b4:df:1f:
7a:1a:c9:91:1b:bf:30:e5:1d:ab:1e:34:92:33:40:f4:2b:41:
dd:4d:43:3b:e8:e9:5b:10:70:11:db:62:d6:ca:0e:0f:30:81:
7f:ff:df:bc:a9:c1:55:be:ce:81:d6:a8:3b:3d:4f:92:91:8b:
c1:db:6d:f3:a8:64:5f:e3:74:61:57:3f:86:82:2f:51:67:5e:
5a:10:7a:0f:cc:71:8d:81:ad:6c:3e:c5:52:84:c5:5d:09:1e:
96:fc:1c:45:f1:5d:64:a5:db:df:fa:e5:a4:2f:32:bf:1f:c3:
3c:3f:ab:18:7c:51:e6:d9:23:16:e2:56:b2:e6:61:e6:1a:db:
48:a6:d6:5f:54:0f:7a:ba:18:1f:9f:f1:7f:94:76:93:1e:d3:
91:33:2a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 09:18:53 2026 by rpki-client