Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
File: eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft (raw, json)
Hash identifier: kVRo2mpPpZiGPMkbHyJEOd+I0/B8btt2V+WXXK7SuhA=
Subject key identifier: 57:4A:2B:E8:99:F1:19:7F:FE:1E:2F:17:BA:44:59:40:C6:08:31:74
Authority key identifier: 78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F
Certificate issuer: /CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
Certificate serial: 019DB2B44C641469B0D2FBE70125B72A6F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
Manifest number: 08AB
Signing time: Wed 22 Apr 2026 01:00:53 +0000
Manifest this update: Wed 22 Apr 2026 01:00:53 +0000
Manifest next update: Thu 23 Apr 2026 01:00:53 +0000
Files and hashes: 1: SEbMX_kWUsX_R1OTVRjFem2rhCY.roa (hash: XiNk8rorUk0GfMBPxUagzsQDmXdqYnZd77EYh58Os5s=)
2: eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl (hash: vgOwG8TdQGb/hRUP2xhNM0G8u2UkGm4Kx3gIhv8leOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:b4:4c:64:14:69:b0:d2:fb:e7:01:25:b7:2a:6f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
Validity
Not Before: Apr 22 01:00:53 2026 GMT
Not After : Apr 23 01:00:53 2026 GMT
Subject: CN=574a2be899f1197ffe1e2f17ba445940c6083174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:b1:20:05:70:16:69:5b:95:25:d4:23:bb:
a1:8f:5b:77:cb:f4:ce:b4:eb:b4:26:d0:30:5d:d2:
b8:63:0e:b0:3a:62:c3:1d:68:6f:cf:f3:41:1a:f9:
49:70:9a:36:43:c1:17:49:47:ed:2e:35:e7:60:6e:
d1:40:49:ff:7e:0c:83:1a:43:b9:6b:58:07:f6:03:
86:2e:8c:f3:60:bd:c2:82:25:76:1d:24:1e:90:fc:
13:69:27:59:ba:07:9b:26:6a:70:df:c6:db:c8:19:
31:8c:24:2d:c4:b2:49:59:f6:89:e2:cf:45:3a:c5:
ff:80:79:80:51:15:fe:6d:e7:6f:1f:2b:37:ef:97:
28:f6:81:73:80:11:25:3c:74:c4:57:8f:40:14:f5:
55:dd:7d:3e:8c:54:85:f5:da:e7:ba:ed:1b:24:ca:
40:56:03:a3:f4:97:63:d8:ca:6e:4b:e9:1d:1e:3f:
fe:b8:55:49:06:67:ea:5a:9c:c6:64:29:6a:65:c1:
35:d1:43:ac:54:da:a7:58:16:a3:a1:00:47:c7:c2:
80:c3:04:3b:98:67:b8:57:94:a3:f2:7f:c6:84:10:
0c:e6:ca:f3:c1:74:f7:ec:4d:12:e2:7b:26:43:b1:
75:1b:67:1e:17:08:5e:92:b9:b5:f8:d5:88:bd:64:
43:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4A:2B:E8:99:F1:19:7F:FE:1E:2F:17:BA:44:59:40:C6:08:31:74
X509v3 Authority Key Identifier:
keyid:78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0a:2e:74:3b:54:80:9d:1c:5f:6d:74:56:b1:93:02:a9:83:
5d:e2:4b:7f:8f:80:45:d2:9c:20:73:d1:22:48:b5:80:fb:db:
91:f1:3b:b8:b8:3b:ce:3f:a7:a8:18:7c:66:09:5d:e7:b2:58:
82:19:cf:47:54:dd:ed:c3:38:62:8d:4f:2e:37:20:f7:e0:21:
a5:24:d3:f9:75:ed:1a:90:b1:7a:23:d9:7d:26:a1:d8:dd:73:
e7:1f:08:c8:6b:b4:35:05:53:97:7a:aa:fc:d3:f1:d3:b9:5c:
67:79:05:22:b8:8c:40:08:7f:58:ce:c2:ed:41:34:7c:34:11:
d2:1b:fd:21:07:d7:a3:07:5e:08:26:79:92:b4:5e:73:86:c8:
54:51:6a:5a:04:23:f6:44:20:7f:17:e4:e2:47:77:bf:3d:36:
0b:60:d2:46:5a:55:18:5f:3c:58:58:7e:4a:0c:93:98:14:f8:
54:1e:c8:73:a1:d8:e2:fe:d5:49:88:2b:17:67:a1:a0:60:0c:
2e:af:0a:4f:3e:ce:7e:52:eb:66:a5:95:d1:2d:01:32:e9:7a:
5c:8a:7b:9f:c7:9f:fa:5f:cc:91:fb:1c:af:ec:df:e1:6f:35:
be:a0:0b:27:49:83:03:b9:b8:10:bf:84:83:bc:49:10:77:16:
34:24:2f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 07:06:52 2026 by rpki-client