
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
File: eaHQ6nMPz8shSZlceCib8tbRhvw.mft (raw, json)
Hash identifier: z2QouCktCyu5G+CXLkoUNo6nSIFfH8S+e5ciWjArP50=
Subject key identifier: B9:AB:C4:36:D1:F6:98:6E:34:B9:30:79:73:90:DD:9E:AB:55:04:04
Authority key identifier: 79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC
Certificate issuer: /CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
Certificate serial: 019D386681E3E0A63EC1063AFC982632F2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
Manifest number: 06FE
Signing time: Sun 29 Mar 2026 07:02:15 +0000
Manifest this update: Sun 29 Mar 2026 07:02:15 +0000
Manifest next update: Mon 30 Mar 2026 07:02:15 +0000
Files and hashes: 1: GAKRFHm3BIkbt_KHdO-HYTyWCS0.roa (hash: 0Jfzcvn5KxpE+uRT7hhET5tdaNQSgWGkWhSb4S4MAyk=)
2: RDXvE_B2DWqvEjcyr5sBg8RdScs.roa (hash: aY5giOaeNskYQX5A+kweygYFqHAOYhd++2QIYXY/F2E=)
3: eaHQ6nMPz8shSZlceCib8tbRhvw.crl (hash: Lhb3LQWqLbA6MGLmpRD8o0n/PhEgpQN5GRT8XmzSFgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:81:e3:e0:a6:3e:c1:06:3a:fc:98:26:32:f2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
Validity
Not Before: Mar 29 07:02:15 2026 GMT
Not After : Mar 30 07:02:15 2026 GMT
Subject: CN=b9abc436d1f6986e34b930797390dd9eab550404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:83:68:37:f7:98:f7:ea:af:73:88:f5:11:
5e:d2:07:a8:ac:af:11:33:5e:f6:b5:fc:9a:66:56:
f4:05:2b:41:0d:2e:b2:6c:1c:15:ea:e3:04:9a:1a:
90:0b:aa:88:6e:ad:4d:86:7d:f5:93:eb:b6:03:f7:
e8:d8:66:f3:9a:c7:39:86:ce:48:a7:83:b9:2f:ee:
3d:30:28:e2:22:92:b3:61:b8:bb:ca:15:d1:1d:11:
e7:83:f0:e8:6e:ca:29:49:55:77:76:e2:29:d5:48:
08:fc:41:d3:65:bc:44:e3:c0:fe:d6:29:62:50:07:
d5:aa:db:d4:2c:c4:64:83:b6:89:be:35:bb:97:d6:
97:64:bf:7d:6f:a1:01:5c:b4:2c:75:ee:a9:b9:94:
0f:bf:a1:4f:46:44:e1:88:9a:e3:a0:80:c8:71:9d:
f5:89:82:c3:ca:d6:ce:f7:10:84:c0:ad:a9:5d:99:
45:0d:60:3c:68:b4:73:c1:97:3d:21:39:e1:5b:31:
a4:51:c3:04:ab:7a:c9:9d:c5:68:7a:93:b2:ac:32:
ff:c2:fe:a4:58:c2:8b:70:0c:4b:97:a1:fe:70:9c:
e9:32:ef:2a:87:fc:b1:61:15:f4:6a:fb:76:fb:5a:
ef:ac:7b:48:dd:24:91:28:fa:b5:44:e6:5b:10:80:
1e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AB:C4:36:D1:F6:98:6E:34:B9:30:79:73:90:DD:9E:AB:55:04:04
X509v3 Authority Key Identifier:
keyid:79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:64:a3:30:f0:a6:0f:57:73:10:24:da:03:36:82:bb:e8:2e:
0c:17:79:48:07:34:bb:1c:cd:99:cf:e6:57:ed:ca:0e:a8:ca:
1d:2b:a7:6e:46:86:90:57:08:63:fe:34:61:20:fc:0b:85:36:
d0:5b:89:15:85:ee:dc:6d:24:96:2e:24:10:33:aa:6f:0d:e5:
24:ec:ae:36:2a:42:f9:4e:ff:f0:b3:68:86:c5:0b:05:03:95:
8e:5f:f6:fa:ba:8f:fb:6e:6c:ed:3b:07:fe:ed:32:b9:f4:13:
10:8f:72:c1:a6:6a:4e:c8:32:8a:6a:16:e7:73:b4:63:4c:ed:
d4:e2:f1:e7:1f:82:b5:00:18:4a:cc:be:7e:6a:0d:a5:46:16:
be:1a:37:32:5c:6e:1c:83:db:57:ac:8b:7e:e4:2b:19:21:aa:
d5:c0:c0:13:e9:8d:b0:ea:62:6f:0a:8a:07:58:bb:c7:29:c8:
16:17:19:39:36:30:e0:f4:d5:c9:e0:b4:6d:22:c8:9d:d2:d9:
d7:8e:14:cf:fe:f5:82:fb:d0:3c:ea:4b:08:89:95:a5:04:42:
81:69:43:14:b3:c3:51:71:08:04:cd:7c:45:a9:57:16:62:d6:
7b:ce:48:f6:85:19:c2:27:f5:b4:d8:81:15:78:f2:fa:bc:1f:
eb:c1:17:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:23 2026 by rpki-client