
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
File: eaOyw2It-eh5guqDUJeKbJh1p8g.mft (raw, json)
Hash identifier: d9l0IQ2/E79UF+kmLa4BjpNwq36jAH7Gg4e21tFzFAI=
Subject key identifier: A5:FB:7E:5F:65:E4:8B:1D:90:A4:E4:EE:D5:BA:A5:E7:12:B1:CE:A0
Authority key identifier: 79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
Certificate issuer: /CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Certificate serial: 019DCE62D218E9A028145C1D6CBB7766DB1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
Manifest number: 18E7
Signing time: Mon 27 Apr 2026 10:01:15 +0000
Manifest this update: Mon 27 Apr 2026 10:01:15 +0000
Manifest next update: Tue 28 Apr 2026 10:01:15 +0000
Files and hashes: 1: bwuSOp298-dczsmqdU4uLpa6gjo.roa (hash: uzISkAnF902L3J+B/MyOvw4U5tLzeELoUDdqRYulmzE=)
2: eaOyw2It-eh5guqDUJeKbJh1p8g.crl (hash: ljry/2VIEdmN4/skgDikLXcKZYPriR+kvD+oq2KWytI=)
3: g2b0tfI5DAyRO9sqLcgf2kKw8tI.roa (hash: b/mHAHFQZqIoz/hcls8xHY15nIJE9JGUhZwiQd60kVE=)
4: ntyTSk72RSe0ZIrYeLH81RbxpHA.asa (hash: iPI512YEQ0gn5dd5DCMPxy3EAFdTv8AI/1+OEDUHbSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:d2:18:e9:a0:28:14:5c:1d:6c:bb:77:66:db:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Validity
Not Before: Apr 27 10:01:15 2026 GMT
Not After : Apr 28 10:01:15 2026 GMT
Subject: CN=a5fb7e5f65e48b1d90a4e4eed5baa5e712b1cea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:20:22:0a:f2:e6:be:1c:d3:18:6a:aa:93:
6a:7e:18:a3:2b:10:eb:22:c0:93:5e:56:81:c4:a2:
87:fc:4f:1c:a7:fd:07:6d:d8:b5:d8:1b:67:90:36:
5a:f3:38:2a:40:27:85:ad:ba:a0:b9:23:ab:15:4e:
fd:79:4f:17:63:53:da:24:30:00:60:12:ff:6e:d7:
b5:34:91:09:64:17:5c:d9:cf:03:88:fa:52:e3:aa:
cc:7c:eb:53:3d:31:37:cd:78:56:33:bb:32:30:cf:
49:80:81:c5:7b:69:c6:68:0e:f0:0a:51:14:8d:39:
7a:f8:c2:a3:45:66:d2:50:95:10:03:6d:40:d8:4f:
18:37:cb:18:50:43:8b:d5:16:e7:02:a3:2b:cd:6a:
3f:47:7d:7e:16:fe:a1:e5:ac:09:25:a6:94:64:eb:
92:99:2c:36:fd:43:30:59:3a:3d:ae:d7:0b:0a:9f:
f9:af:e0:a7:37:93:84:a2:56:3c:45:a8:86:f1:84:
df:d7:ec:09:1f:ce:11:0a:26:4d:02:77:c6:8e:2a:
fd:23:b8:e3:a9:e7:30:41:d1:36:19:27:fa:58:3a:
fa:76:cb:fa:19:e9:f0:68:97:d8:58:17:d4:0c:37:
65:21:e7:d2:5b:30:71:7a:39:c2:35:26:c3:11:43:
00:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FB:7E:5F:65:E4:8B:1D:90:A4:E4:EE:D5:BA:A5:E7:12:B1:CE:A0
X509v3 Authority Key Identifier:
keyid:79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4b:59:f8:a6:66:c5:f5:f8:45:2c:95:80:ed:f9:76:3b:84:
18:2a:66:a2:cc:ea:a1:62:a3:9b:e5:59:42:29:de:d7:f2:6c:
cc:72:6e:44:53:b1:da:a9:3f:18:20:b1:bc:2c:68:40:ad:a2:
31:d6:50:1e:dd:db:03:77:c5:6e:66:22:f9:96:66:d9:be:c9:
15:68:11:00:13:0f:3a:ea:e7:cb:32:63:b7:84:11:89:b9:1d:
49:66:24:44:27:9d:05:d3:27:5c:70:9f:23:c3:2e:7a:c5:04:
33:40:7f:a5:bb:d7:f0:e7:94:78:94:75:aa:ea:d7:c5:55:6e:
a9:0b:70:fe:c6:77:56:17:91:e7:a9:4d:d4:b0:7b:47:7b:f8:
0c:8c:bc:db:bb:9f:6c:d2:59:31:23:7e:b9:1d:bd:69:ef:07:
a0:fa:c6:6f:9c:56:35:3a:7b:07:49:d3:50:7b:6e:ef:58:a3:
72:44:bb:8e:c2:7b:be:b1:e6:e8:e0:51:c2:22:f5:55:a6:32:
8c:0e:e6:c2:f3:7d:3c:6f:f9:42:28:2b:0b:e2:0f:a1:33:1f:
4f:cc:58:6a:0b:62:55:f8:4e:4a:ad:9c:df:38:1b:89:05:2d:
11:90:61:48:f2:55:34:f6:f0:b9:cb:16:74:8a:d4:11:49:8c:
5e:b5:f7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:18:01 2026 by rpki-client