Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
File: etB83meC_U_FaIV-hIRlW1AkhxA.mft (raw, json)
Hash identifier: bjgkkax9ARVgCkjqI5vKAiCJTJyyKND5+aDsBub7rwY=
Subject key identifier: 9F:E3:B2:C7:B9:74:78:AD:FC:6D:2E:A2:EE:21:5E:22:CF:B2:91:B1
Authority key identifier: 7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
Certificate issuer: /CN=7ad07cde6782fd4fc568857e8484655b50248710
Certificate serial: 019D3909DAC729B5BA3BCCE369450D506901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
Manifest number: 06A4
Signing time: Sun 29 Mar 2026 10:00:40 +0000
Manifest this update: Sun 29 Mar 2026 10:00:40 +0000
Manifest next update: Mon 30 Mar 2026 10:00:40 +0000
Files and hashes: 1: eCo9qXRcDZLgJlgoHLS9NExTbx4.roa (hash: BYg8Ba7NDfA7mgNndMx+S8c/mZhCBPail+1jI3QYxnk=)
2: etB83meC_U_FaIV-hIRlW1AkhxA.crl (hash: Hxc56Ayf61MyI2z4gdyv9qkbfwYxQuYSC3DQTW94Uq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:da:c7:29:b5:ba:3b:cc:e3:69:45:0d:50:69:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ad07cde6782fd4fc568857e8484655b50248710
Validity
Not Before: Mar 29 10:00:40 2026 GMT
Not After : Mar 30 10:00:40 2026 GMT
Subject: CN=9fe3b2c7b97478adfc6d2ea2ee215e22cfb291b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:15:75:be:38:b3:d4:af:07:61:2f:10:1e:
17:f8:fe:07:59:49:bc:37:33:17:df:d4:bb:21:1b:
c6:33:4c:59:cd:d3:d4:7c:49:e6:16:f2:f5:31:d8:
fa:59:72:9b:86:5b:d6:b0:d2:48:aa:12:94:cc:3d:
73:21:f2:32:77:86:fe:5e:11:86:4f:1e:7b:d8:c4:
d7:89:df:43:b4:6d:66:47:df:64:7b:26:e7:45:94:
90:24:f3:5b:db:5d:09:da:29:55:e7:b2:c1:0f:ab:
c7:d3:6c:78:11:b5:7e:7d:0e:c8:41:7d:b1:f8:59:
a7:46:99:e9:00:9d:0f:d1:58:12:1b:0c:9c:dd:0f:
00:83:b3:3a:87:56:bf:35:d7:62:bf:cf:54:b5:81:
4c:1c:d1:6a:3b:bb:7e:d3:2e:f5:93:0a:32:28:46:
55:37:d1:9a:2c:3f:ed:a0:45:e6:05:18:6c:40:90:
35:e8:ef:25:da:9d:ad:5f:5c:f6:49:b3:25:8d:70:
6d:e9:50:24:6a:93:3b:6a:8d:00:18:ab:75:e3:05:
e2:d3:c9:bf:2c:5b:d5:94:32:1b:75:b9:0e:29:47:
8c:df:22:3b:ef:67:94:e0:15:c2:29:76:c7:48:58:
ee:bf:ff:08:4a:26:b0:98:db:fe:7e:59:20:3c:a3:
12:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E3:B2:C7:B9:74:78:AD:FC:6D:2E:A2:EE:21:5E:22:CF:B2:91:B1
X509v3 Authority Key Identifier:
keyid:7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:05:b0:f7:c3:41:c6:51:7a:0b:ef:b7:06:78:2c:ee:0b:80:
f5:68:ee:17:74:12:3a:4e:ab:3e:71:79:0c:72:55:59:11:6c:
96:2c:b3:42:5f:de:09:6b:b6:3f:e6:ae:8e:fb:38:8f:e7:94:
90:ce:eb:ea:73:c1:ba:c8:63:fa:d3:cc:f7:78:e6:89:b6:18:
e9:7a:66:31:e4:82:cb:a1:ab:14:a6:18:2b:e7:e6:c4:ea:b2:
59:59:36:c6:0e:a5:7d:c5:22:43:94:00:25:fa:e1:b4:47:6f:
88:fd:f1:da:8e:07:d8:32:a2:04:ab:5f:19:d0:c2:39:ea:51:
94:30:fa:19:f9:77:e9:cf:ce:b0:af:0d:cd:b8:69:95:f4:1a:
e8:0a:bd:d5:ab:f9:6a:2f:ca:50:b4:bd:4a:f7:8a:03:8d:1c:
ae:44:ea:2b:11:d4:79:b6:b6:06:47:59:15:88:8a:3a:aa:7d:
db:c0:b0:33:57:0d:d9:49:e6:b0:f7:41:44:1e:21:48:3c:8b:
1c:ac:5c:87:55:53:4c:ed:fe:29:15:d3:22:7b:d3:92:eb:57:
3b:cf:ba:66:2a:02:c8:4f:96:e8:10:22:a2:7a:4a:8b:09:15:
44:a0:5b:98:59:0b:a6:5b:f7:43:cd:7f:01:fb:8b:57:84:6f:
b4:05:0d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:05 2026 by rpki-client