Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
File: eJkRG_1wuRdE36Skn_kDs5HFwzI.mft (raw, json)
Hash identifier: GHAYpmR25VkAtaDJwemowSrfP4hcQkMPkUCOZbWYQ5E=
Subject key identifier: AF:78:E7:B1:C4:B4:44:06:EF:33:A7:B3:4A:16:B9:E3:C5:77:CC:9F
Authority key identifier: 78:99:11:1B:FD:70:B9:17:44:DF:A4:A4:9F:F9:03:B3:91:C5:C3:32
Certificate issuer: /CN=7899111bfd70b91744dfa4a49ff903b391c5c332
Certificate serial: 019D39AF2817738FEF3789FDE1AFB0F0D558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
Manifest number: 1D
Signing time: Sun 29 Mar 2026 13:01:13 +0000
Manifest this update: Sun 29 Mar 2026 13:01:13 +0000
Manifest next update: Mon 30 Mar 2026 13:01:13 +0000
Files and hashes: 1: SKxfM8vS1jvBfGto0Ag-UhpANXY.roa (hash: WZ4CjS7lVOS4kiwT/i3rrLplH1i4HTFPFyS0A+9Y2ZQ=)
2: eJkRG_1wuRdE36Skn_kDs5HFwzI.crl (hash: Azvy1FsozKJEGOnUtyIqEAOQ06N2VCBOnILlgRvfjOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:28:17:73:8f:ef:37:89:fd:e1:af:b0:f0:d5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7899111bfd70b91744dfa4a49ff903b391c5c332
Validity
Not Before: Mar 29 13:01:13 2026 GMT
Not After : Mar 30 13:01:13 2026 GMT
Subject: CN=af78e7b1c4b44406ef33a7b34a16b9e3c577cc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:53:79:1d:d7:e8:7e:c9:a0:ff:ca:cb:43:2d:
0b:91:c6:64:89:8e:a8:a7:4a:a6:4c:b5:29:51:33:
0e:49:c5:9e:ff:65:42:fc:9e:34:45:69:ed:27:ba:
30:0a:f2:5b:f6:63:30:8b:99:2e:67:b5:40:fc:d0:
42:9d:2a:a1:11:9a:b6:05:9b:87:90:2d:b6:c1:a7:
dd:70:85:41:7c:44:1f:3d:f3:b7:68:97:be:a1:26:
32:50:f8:09:fd:c0:01:3c:63:72:d8:26:a7:1a:cb:
af:54:4a:18:d5:e1:93:94:3b:22:0c:8f:26:41:72:
dc:15:15:70:1d:fb:25:15:11:aa:28:d3:24:ad:53:
4e:82:bc:f5:6e:25:b8:57:b1:13:d5:c7:64:74:36:
4b:65:de:0b:32:58:bf:ae:e4:1e:ea:af:27:13:8c:
28:6c:13:65:bb:32:eb:1f:19:ab:b4:be:ef:3a:fb:
09:4b:67:bb:42:da:74:31:d7:f8:aa:1c:a8:3a:ad:
03:65:ff:1c:ae:87:70:62:58:a1:65:b2:53:dd:44:
3f:59:42:46:7f:54:18:7e:21:4c:a1:17:85:5b:74:
9d:35:e5:ba:46:aa:fb:64:ee:41:12:03:91:68:8f:
d0:09:02:5a:3b:c0:20:f7:c9:c6:75:8a:28:67:a2:
af:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:78:E7:B1:C4:B4:44:06:EF:33:A7:B3:4A:16:B9:E3:C5:77:CC:9F
X509v3 Authority Key Identifier:
keyid:78:99:11:1B:FD:70:B9:17:44:DF:A4:A4:9F:F9:03:B3:91:C5:C3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:87:81:f3:74:43:57:7d:a1:a2:9b:bb:45:60:5f:35:2b:5d:
46:e0:f2:98:33:06:da:7f:09:de:10:da:68:5c:09:30:7b:8f:
b9:c2:f4:97:b4:4f:8d:d0:f3:52:a1:ed:7d:c1:f0:55:e7:4a:
45:b9:c7:5b:44:97:6a:36:f2:e8:4f:3b:ca:0f:06:2b:e3:e2:
fc:6a:95:5f:6c:88:0d:67:fa:ad:a2:6c:11:c7:0b:24:67:7f:
88:a4:55:43:d7:cc:00:48:45:96:05:03:3a:39:62:3b:6e:af:
e8:ac:48:b2:cf:38:8f:43:e4:d8:9d:8c:35:5b:8a:bd:bb:5e:
2c:1d:5a:f1:2e:55:59:76:06:60:4f:5e:7c:29:75:f1:c3:d2:
e3:33:07:47:e6:77:a6:b4:08:4c:63:b9:1f:e5:f6:7e:9d:3e:
55:66:5c:5c:f7:c6:8b:c4:43:4d:35:77:82:c0:a9:a3:65:d4:
79:a4:8e:1b:6b:c8:64:6e:f8:74:d6:69:5e:b2:99:44:b0:40:
46:33:1a:cd:9a:76:77:65:24:ed:99:04:3e:e5:09:0c:4a:95:
1d:73:b7:84:56:25:c0:5a:a6:cc:ed:5d:f8:d8:a1:d9:02:e7:
0a:fd:55:48:23:b7:98:6b:69:26:e8:2b:37:f1:87:1f:2f:58:
62:4c:4a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:29 2026 by rpki-client