Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft
File: egXqWYBflL4YUoIDm7ri-oqSU_U.mft (raw, json)
Hash identifier: wJxRQnBon0fRsVhUS1AMzMFBidjJ5oiadpn0TvIedGw=
Subject key identifier: C1:F5:2C:58:54:31:88:F2:4B:12:9D:4C:A5:5A:29:CF:09:B8:97:44
Authority key identifier: 7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5
Certificate issuer: /CN=7a05ea59805f94be185282039bbae2fa8a9253f5
Certificate serial: 019CE66D29D351A4E952A3E6B9E73D86BD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft
Manifest number: 1872
Signing time: Fri 13 Mar 2026 09:00:39 +0000
Manifest this update: Fri 13 Mar 2026 09:00:39 +0000
Manifest next update: Sat 14 Mar 2026 09:00:39 +0000
Files and hashes: 1: 8bt9cYMzZg1dDKygP-KGgoxWo28.roa (hash: VD9f7yAgGBnI+i2ExDasoXpcEMGiS4J+ud75AVisTxs=)
2: SyRRL1yNRh33pq8px_OkuREORJY.roa (hash: d9SZDZnKX/nPflr/y3Jk5i1sPAUrQ/hcdwPlZ2KkY68=)
3: egXqWYBflL4YUoIDm7ri-oqSU_U.crl (hash: +Za+Hkcax6SaZsujbOGReRlODEA/BNlkm9dVpJeHspM=)
4: nxP9eu3JnVKWb4uYzkTOPk9xSgg.roa (hash: LvM9PvMHii47fjgjeXdKFvVutcctBWDj/KaR746D+Xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:29:d3:51:a4:e9:52:a3:e6:b9:e7:3d:86:bd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a05ea59805f94be185282039bbae2fa8a9253f5
Validity
Not Before: Mar 13 09:00:39 2026 GMT
Not After : Mar 14 09:00:39 2026 GMT
Subject: CN=c1f52c58543188f24b129d4ca55a29cf09b89744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:52:07:48:a6:cc:74:4c:b9:5b:76:53:2c:
a9:8b:25:df:d2:ec:e6:e5:c1:2c:a6:58:ee:7f:36:
9e:72:ab:e3:ae:a4:93:1c:ea:6a:aa:81:ab:57:2d:
6f:82:ec:ff:d8:51:30:83:d3:89:c4:df:60:e8:88:
92:82:b2:07:35:10:e6:76:e5:85:0e:a9:31:bb:2c:
6c:73:a3:58:ac:77:3a:f2:eb:6d:5c:1d:f8:a0:59:
f8:eb:c9:26:f6:78:08:59:13:90:83:aa:37:ec:9f:
a5:c3:77:83:67:9e:83:1a:cb:f8:fb:9b:2f:02:d9:
ec:40:90:94:d2:32:25:4f:bc:1c:e4:a5:05:fe:71:
0c:6c:5b:3c:d7:60:01:2c:42:1a:05:69:29:7b:af:
95:ca:20:4f:0f:82:9f:13:4a:a2:dc:a7:67:0c:f0:
49:1f:b9:16:4d:7f:c4:12:53:a2:14:b4:f2:ed:63:
a7:88:b0:d7:e0:93:18:e1:5e:24:a8:e0:e8:42:8a:
09:3c:fd:9a:0c:58:ce:78:18:dd:4a:28:d9:25:ac:
74:8a:c9:35:89:3e:26:f6:60:f9:ee:2b:d7:9e:c6:
ee:16:d5:cb:81:a5:6a:6e:99:29:69:37:41:34:b6:
00:72:fe:17:e5:b2:c3:df:0f:ae:5a:b6:c3:1d:7a:
c6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F5:2C:58:54:31:88:F2:4B:12:9D:4C:A5:5A:29:CF:09:B8:97:44
X509v3 Authority Key Identifier:
keyid:7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7b:24:47:0a:c2:05:fc:f8:be:f9:00:7b:04:72:da:94:8a:
89:31:a2:82:b1:57:5f:e5:d9:a8:89:34:13:8e:2a:d9:61:53:
f7:23:c7:b8:99:17:2c:4f:74:55:ed:ff:02:c1:9b:0f:c0:67:
ed:9f:46:4b:6c:41:07:77:1a:90:35:9b:c1:a4:1f:c8:05:7c:
ca:60:a6:ab:23:6d:6d:0e:e9:e9:fd:78:c5:0b:5d:02:43:35:
32:78:bf:1c:4b:d0:9e:2b:3b:73:84:13:5a:18:1a:78:e5:f3:
2b:0b:bd:ea:f6:bd:39:38:cb:3e:2d:35:3d:08:a6:47:5d:9c:
1e:30:80:3a:34:07:ce:91:44:8b:40:32:18:73:52:81:16:ab:
34:f9:0b:b8:1e:3b:8a:bd:c4:10:74:99:ca:02:59:0b:ea:d7:
12:1c:7f:ec:f8:f2:8b:b9:80:5c:71:05:56:57:62:94:64:7b:
ca:32:64:87:da:b1:8f:73:b6:9b:45:6e:5d:b6:ff:83:5b:f0:
5a:f6:4c:90:bd:b6:f7:36:a6:19:d4:c9:17:0d:81:4a:2c:a0:
4a:2a:78:e2:f5:70:6e:41:f0:39:a3:2a:9b:3c:46:0d:db:f9:
58:a5:a1:62:2a:9c:30:89:7a:83:d1:7e:ac:53:77:f3:14:b2:
c6:43:40:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 17:58:35 2026 by rpki-client