Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft
File: _EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft (raw, json)
Hash identifier: Ov9mrVvo+azytFOo6WFhsfwAC2sFU9xgvKUaZXIPD78=
Subject key identifier: 46:81:05:32:5A:9A:44:D1:26:9A:F4:72:FA:6A:94:82:28:83:37:4A
Authority key identifier: FC:4B:85:73:CA:0E:BB:47:8E:00:8F:70:AF:A0:8A:E5:8B:78:69:A5
Certificate issuer: /CN=fc4b8573ca0ebb478e008f70afa08ae58b7869a5
Certificate serial: 019D36E5147F4E400AE9FB3365765B6464DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft
Manifest number: 0B16
Signing time: Sun 29 Mar 2026 00:01:15 +0000
Manifest this update: Sun 29 Mar 2026 00:01:15 +0000
Manifest next update: Mon 30 Mar 2026 00:01:15 +0000
Files and hashes: 1: CAK35QTuEq8p5pMHpRsy6hrVFwE.roa (hash: 8N51l78zHWxXNaX9bCrXu1hYb7x2qMh5r0r2xumunCQ=)
2: _EuFc8oOu0eOAI9wr6CK5Yt4aaU.crl (hash: GS8s+UJIo3pMdF03zSZYNPzoVnzDlEu1lWWXAdBxH6U=)
3: vV3xBVfkG0M0NoQ2SxPY7yKei30.roa (hash: MMyfN4QSow3i88Wo+okKaUSdkHZvrx0YE/Konxtq/wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e5:14:7f:4e:40:0a:e9:fb:33:65:76:5b:64:64:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4b8573ca0ebb478e008f70afa08ae58b7869a5
Validity
Not Before: Mar 29 00:01:15 2026 GMT
Not After : Mar 30 00:01:15 2026 GMT
Subject: CN=468105325a9a44d1269af472fa6a94822883374a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:7e:2d:55:f0:58:81:a5:0e:60:af:af:59:
99:50:a8:8c:3e:e3:8d:94:b6:3b:ae:60:0e:59:de:
cf:b2:15:63:4c:2a:51:74:38:80:35:cd:f5:0c:f7:
11:83:cb:6f:a2:75:a9:65:01:bd:0b:5d:08:69:7a:
25:e1:04:23:2e:30:f6:e0:c8:07:56:ac:db:58:69:
90:65:57:f8:2c:29:ae:45:3d:6d:1e:02:8f:e1:91:
fd:55:20:12:4d:21:8e:34:db:5b:64:0a:33:f9:c6:
66:a6:d6:81:3e:9a:45:a2:95:09:78:4f:2c:35:89:
f1:54:cf:15:99:16:d5:72:70:83:2b:ba:8e:ec:20:
26:fa:57:f4:8b:2c:f6:2f:97:9c:0e:45:84:bd:12:
f7:cf:61:09:08:68:b8:06:bf:55:9a:01:b5:96:bc:
96:24:3f:3a:a2:b8:ef:03:05:d0:bc:b4:dc:b1:bb:
25:6f:81:d0:51:22:ec:40:58:1e:54:68:40:58:0b:
8a:c6:36:a3:94:27:e9:eb:38:8e:30:b6:3b:a0:3a:
25:a4:ea:13:c7:ba:52:02:3a:21:40:4b:90:d0:16:
6a:5d:1a:fb:2e:13:c6:ae:9e:44:a7:6e:fb:9e:df:
33:69:39:1b:86:76:b5:70:ff:6d:0b:2c:8b:bd:63:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:81:05:32:5A:9A:44:D1:26:9A:F4:72:FA:6A:94:82:28:83:37:4A
X509v3 Authority Key Identifier:
keyid:FC:4B:85:73:CA:0E:BB:47:8E:00:8F:70:AF:A0:8A:E5:8B:78:69:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:bf:1b:4f:f8:ea:b4:67:2c:98:84:ba:7d:e3:cb:ef:8d:9a:
20:b0:71:a5:f7:d4:d6:6f:c0:4b:bf:56:a1:33:50:42:23:fa:
ff:1a:1a:21:84:e3:64:46:bd:5b:85:1e:9e:b2:e9:25:60:4c:
c5:7c:75:95:bb:bf:a2:45:cb:2f:6b:42:9b:c2:f8:87:90:e2:
45:33:ce:77:17:32:ad:e2:3e:79:d3:7d:c0:1a:3b:12:32:58:
39:48:9a:a0:b4:34:ad:99:39:48:72:9d:d5:3e:05:a2:52:4d:
f0:ff:f4:ea:4b:73:5d:9a:d5:35:4c:cb:39:39:e0:c0:b2:70:
90:d6:bd:34:5c:34:f0:3e:ee:41:fe:a8:94:c3:98:7c:e7:97:
8b:33:42:67:ac:46:77:6d:af:c7:68:3e:ee:82:8b:48:f5:c5:
c9:70:aa:8b:83:27:7d:ce:c9:c1:ea:28:70:13:d6:ab:a7:c8:
b1:de:19:13:dc:1f:bc:57:f5:2d:3c:73:83:18:55:8b:63:70:
b3:9c:1e:a1:d1:69:a8:8b:08:cc:b0:c0:63:c6:51:90:6d:e4:
d8:3d:0e:30:9e:68:73:a5:57:78:8a:3f:27:0f:7b:69:53:56:
48:b2:6f:04:a0:78:16:ec:da:76:30:00:af:b2:88:cf:6f:e7:
2f:8c:c8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:36 2026 by rpki-client