Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
File: eA-G0ESkoqIzMZQYqo2prYN8duo.mft (raw, json)
Hash identifier: Tv1Kp0Vy3TtVNghUriLFChVSuWw8AiwKOlgpczOGwxM=
Subject key identifier: 26:75:2D:70:A5:20:E4:C1:49:CB:C8:18:B1:F4:84:07:F7:E5:DB:C1
Authority key identifier: 78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA
Certificate issuer: /CN=780f86d044a4a2a233319418aa8da9ad837c76ea
Certificate serial: 019D389C50FC0BE8F216B6D14210EEC49EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 08:01:01 +0000
Manifest this update: Sun 29 Mar 2026 08:01:01 +0000
Manifest next update: Mon 30 Mar 2026 08:01:01 +0000
Files and hashes: 1: F4_6vm4Y26JBMzR_Y_dxpPQFkQs.roa (hash: Gu3DZ3eZb3x6LcHfAUgXfPenNxtzgzeOBfwF8ARfW7s=)
2: eA-G0ESkoqIzMZQYqo2prYN8duo.crl (hash: oqdg7V18HCp21x7kp4tZnrZ22AqBqweuRIT+CquMb8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:50:fc:0b:e8:f2:16:b6:d1:42:10:ee:c4:9e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780f86d044a4a2a233319418aa8da9ad837c76ea
Validity
Not Before: Mar 29 08:01:01 2026 GMT
Not After : Mar 30 08:01:01 2026 GMT
Subject: CN=26752d70a520e4c149cbc818b1f48407f7e5dbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d0:f5:15:55:63:0b:83:f1:14:51:6c:c9:e7:
b7:c1:65:30:17:ce:e0:b8:c6:07:ed:f6:41:53:e0:
a6:7f:4b:3c:a5:03:70:0a:7d:6c:e4:e0:cf:c0:a8:
78:47:a7:37:aa:d1:88:f9:d8:27:fe:f0:95:31:a0:
ac:51:b5:30:37:e7:f8:52:0b:da:9d:9c:d2:cc:17:
56:0d:cb:54:cd:7c:0d:dd:03:e6:2e:5a:c8:85:8b:
53:7a:13:c3:2c:0e:6d:d1:6e:23:b2:c4:c0:f6:1a:
76:1c:87:f3:82:26:7f:de:fa:e4:cb:30:05:74:39:
b7:8c:da:b1:ca:18:c1:ae:f6:5a:2d:c3:1b:bd:79:
0d:22:06:bb:05:ef:60:5f:8c:7f:a6:e7:ce:2f:ea:
88:95:a8:a1:78:ca:dc:82:00:ce:64:e7:8d:a5:ce:
f6:2e:ff:32:7a:59:3e:2b:d5:68:15:7d:f6:3a:98:
5b:f0:38:a4:d7:04:c3:41:12:fb:6e:b1:72:be:73:
7b:63:32:f9:2e:28:b2:4f:64:7b:3a:a0:23:6f:77:
87:63:ca:cd:0a:c5:12:f2:5b:32:1d:73:25:20:07:
5c:51:b2:29:89:f3:a9:71:57:c5:14:51:fc:98:ed:
90:fc:b8:83:bf:a5:dd:6f:de:c3:34:14:ac:00:31:
a1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:75:2D:70:A5:20:E4:C1:49:CB:C8:18:B1:F4:84:07:F7:E5:DB:C1
X509v3 Authority Key Identifier:
keyid:78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:72:24:cb:b8:c7:ca:64:da:6f:be:44:ae:65:f0:68:e5:bd:
86:b0:11:aa:47:9f:37:01:84:64:2e:79:8b:f7:bc:17:4c:8e:
08:01:c7:c2:a8:83:c5:a6:76:37:23:d3:08:01:41:4a:54:34:
5a:ff:9d:83:82:f6:ed:8e:34:27:6c:15:bf:e3:0c:b5:e4:c6:
bc:31:d2:89:5d:e9:5e:6d:03:7f:f0:83:93:1f:1b:4a:90:ad:
15:54:f0:10:17:ee:10:2f:6a:54:d0:f0:cb:f9:c0:79:b4:08:
6c:16:a7:6e:ba:c4:76:81:b2:d2:6d:dd:ce:88:86:b0:b9:bb:
7d:d7:34:4f:38:d9:0f:92:3a:a0:f0:a7:b9:03:1b:f3:5a:b6:
f7:53:f1:51:06:e7:ef:30:93:62:06:0c:55:fc:e9:a1:5a:94:
91:48:74:20:f6:5c:da:7b:91:cd:67:3a:d6:ae:2c:43:2c:b3:
7a:1c:fa:fc:1d:27:3d:68:88:33:51:79:c4:3d:7d:6d:73:2c:
8c:51:4f:60:e6:d8:fd:31:27:ef:d5:52:31:78:2d:4c:de:10:
f8:c4:f0:d5:c4:89:ca:c6:fb:b2:50:a5:3a:cd:17:d6:92:1c:
05:9a:d2:f0:f5:61:65:0b:ff:d9:47:e7:03:bd:f4:ab:31:53:
73:72:f1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:15 2026 by rpki-client