Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
File: ebUTSxH5QJEfD_MVyUjapT9zLuA.mft (raw, json)
Hash identifier: kLkk9fBD/X8G38hOh/vgISNGdrlrd3zffR3SHVWP5Aw=
Subject key identifier: E2:F9:6A:3A:87:99:20:6B:B0:E6:98:AC:69:4E:1A:8A:38:FE:9A:83
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Certificate issuer: /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial: 019E29CBF496B146FFDE190D2E3DA0FB9C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
Manifest number: 1924
Signing time: Fri 15 May 2026 04:01:32 +0000
Manifest this update: Fri 15 May 2026 04:01:32 +0000
Manifest next update: Sat 16 May 2026 04:01:32 +0000
Files and hashes: 1: NcDn26l6X1jaA0rTBfljUSQkQrA.roa (hash: DBP3tSVruTN+BPgGFJB1Pkmv6KFos1kOIWJAln1+ovw=)
2: ebUTSxH5QJEfD_MVyUjapT9zLuA.crl (hash: ax/2DwxzWQrY7JRfl/o7bi7+srOiLl8DA4ptf8JM7M8=)
3: et0olEFrB1y2vEuy1NWpl0biftA.roa (hash: o7zVoM3aaUFP3OzR2+EuOIiIDki9aymtbkBZVSrLD3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:cb:f4:96:b1:46:ff:de:19:0d:2e:3d:a0:fb:9c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
Validity
Not Before: May 15 04:01:32 2026 GMT
Not After : May 16 04:01:32 2026 GMT
Subject: CN=e2f96a3a8799206bb0e698ac694e1a8a38fe9a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:c2:be:24:2e:2d:3d:d0:43:6a:a9:16:94:
b6:af:2e:44:da:a6:da:fe:9e:ee:3d:22:00:14:bb:
e4:fb:e0:29:2e:88:f9:26:87:0e:a7:dd:4d:76:73:
bb:3c:4a:fd:97:d1:8a:9d:d0:7e:bb:8d:ee:55:53:
91:09:c1:3f:ec:d7:08:4a:05:4f:f2:78:b5:65:86:
35:43:a9:5c:ae:88:d7:6f:8c:c1:d5:95:08:35:93:
46:10:c2:26:a7:6e:4a:7b:13:9f:79:8d:9d:ef:c2:
9b:ae:a5:65:21:cb:3c:6c:40:a2:3e:67:41:bc:ac:
36:d5:89:35:02:f1:cd:42:26:74:fd:64:25:5c:f2:
f0:e5:ab:e0:29:2b:a3:3e:b6:2d:d9:88:47:88:68:
34:f5:16:f5:e4:74:18:ba:f7:82:de:a2:5e:8c:83:
4d:e6:26:d6:22:8d:64:d0:aa:5d:3b:cc:5b:4f:1d:
01:3d:03:f0:97:c2:f2:6a:5a:38:7f:a5:a8:38:fe:
b5:06:82:1a:69:4b:c2:cd:0a:b4:37:fc:fc:04:f5:
e0:c1:a3:ff:d0:e2:f8:24:aa:d9:60:94:2e:4b:c5:
d9:96:d6:e7:3e:95:55:eb:fb:6c:30:8a:00:c6:9d:
8f:04:a1:bd:3f:5e:0e:e8:a4:23:ae:c3:78:aa:44:
54:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F9:6A:3A:87:99:20:6B:B0:E6:98:AC:69:4E:1A:8A:38:FE:9A:83
X509v3 Authority Key Identifier:
keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b2:41:5c:7a:bd:4e:fc:10:62:7a:3c:55:f2:43:fa:82:36:
de:c6:66:05:b7:9a:ea:80:94:53:9f:ac:49:fa:0f:59:12:e9:
38:e3:01:ec:a5:f2:94:e5:9d:4f:d3:de:60:f6:05:6e:99:c7:
db:07:70:dd:3f:b5:04:8b:10:32:e9:ac:6d:1c:5d:85:f6:09:
d5:48:41:83:ef:fc:f0:5a:e0:ef:d4:41:b9:06:b5:94:f9:19:
4b:a5:ec:b5:7b:f7:57:21:b3:85:29:58:9f:58:ca:04:ae:fb:
b3:bc:ad:42:48:0a:3d:55:27:85:b4:04:d6:91:dd:88:f0:72:
b7:4a:45:3e:37:18:f1:49:cb:13:04:bf:fe:26:cf:4c:59:aa:
33:9c:70:d7:d9:fc:4f:13:26:eb:5c:01:d9:d9:0d:01:e0:a5:
86:5f:ec:77:61:aa:06:c9:c8:85:b9:c9:4d:19:97:59:b2:66:
ba:94:67:0f:49:f9:ed:52:86:57:3c:5f:f9:59:9a:03:19:b4:
46:57:e2:20:20:48:9a:54:e6:ce:60:0d:a6:17:79:4a:a9:9c:
4e:40:4b:1a:fd:e8:bc:70:93:c7:5c:3d:8a:6d:19:d4:5e:0e:
8b:2e:5d:f7:c9:07:84:96:25:b6:a9:be:75:c5:cf:ec:e3:9c:
ab:ba:bd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:18:41 2026 by rpki-client