Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
File: 65YJgugr-emHVEUAkwjefsvQXFQ.mft (raw, json)
Hash identifier: 8CMtX4N3V3UQM77GEJ8O/NjrRc82bPkpu2TBTgpTPdc=
Subject key identifier: F5:91:FB:38:BD:D3:88:AC:45:7E:05:22:50:0D:EE:6D:2D:F2:1A:FA
Authority key identifier: EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
Certificate issuer: /CN=eb960982e82bf9e9875445009308de7ecbd05c54
Certificate serial: 019D389BC0623A9F4558F8309E16C63E762B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
Manifest number: 0DC3
Signing time: Sun 29 Mar 2026 08:00:24 +0000
Manifest this update: Sun 29 Mar 2026 08:00:24 +0000
Manifest next update: Mon 30 Mar 2026 08:00:24 +0000
Files and hashes: 1: 3NE1-ierdloX8nhN3iBkvRLmeck.roa (hash: gQY+8HGUw14ADa6TeHXGdaEBXGR4Hxky1qeV/2hoxfs=)
2: 65YJgugr-emHVEUAkwjefsvQXFQ.crl (hash: /BvpEY70B1Lc6ZAfS0/iaGAef/6nHjP+emEBipyTtWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c0:62:3a:9f:45:58:f8:30:9e:16:c6:3e:76:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb960982e82bf9e9875445009308de7ecbd05c54
Validity
Not Before: Mar 29 08:00:24 2026 GMT
Not After : Mar 30 08:00:24 2026 GMT
Subject: CN=f591fb38bdd388ac457e0522500dee6d2df21afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:99:bb:93:ce:73:26:4b:c2:1f:87:57:13:21:
e4:9f:5e:e1:bb:59:79:ec:ea:b2:8e:da:58:95:79:
50:67:69:65:0a:a3:25:7e:8e:73:3f:64:7e:bf:0b:
ed:cb:5b:da:f1:8d:fd:78:b9:3b:e9:00:ff:98:28:
0d:57:bc:a3:99:91:af:2d:fd:e1:60:89:3a:8d:24:
e7:d8:77:e8:86:00:94:e1:16:ad:9f:57:dc:86:83:
a5:ed:d4:60:b8:31:2c:11:9c:d3:bb:50:f7:51:81:
51:3f:9d:61:56:71:27:2f:99:67:c1:e2:0b:27:38:
54:7d:a6:25:e5:09:c3:29:23:a1:25:e4:c7:6c:d6:
5e:56:8b:65:1e:48:87:52:d2:61:b3:e5:1c:79:e9:
4b:ec:25:95:81:b0:5d:e3:d6:99:1f:65:00:5a:98:
be:7c:a6:67:d7:3e:64:1c:37:38:9c:99:88:31:f4:
c4:11:43:ba:22:c9:31:89:86:20:b3:60:0b:3a:ed:
86:ca:55:3a:90:a8:91:17:22:27:58:f8:02:02:f5:
8c:f1:03:f7:3b:fd:04:1d:87:be:f6:98:9d:54:06:
ba:f0:cb:a5:7e:45:9c:cc:74:c6:4a:a1:fb:cd:51:
71:b6:f5:04:88:5d:88:70:89:20:94:b0:dc:d1:e3:
ff:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:91:FB:38:BD:D3:88:AC:45:7E:05:22:50:0D:EE:6D:2D:F2:1A:FA
X509v3 Authority Key Identifier:
keyid:EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2c:79:02:be:15:5a:63:6f:25:59:c5:17:ee:39:1c:41:66:
d0:af:07:2e:7c:83:6f:5d:dd:03:c1:d5:50:ee:ca:85:57:97:
5c:8f:fe:0b:71:ce:ca:26:97:4d:fe:0b:be:de:2f:f0:3f:bd:
3b:39:51:de:3a:15:24:55:48:52:c3:92:ff:12:a9:00:b7:d0:
4d:8a:17:cf:31:2f:53:9d:0d:76:a6:77:bf:8f:0e:8f:65:e3:
7b:9e:c3:15:d7:ae:91:97:4e:7f:a6:e8:f6:bd:30:36:dc:62:
17:e0:35:94:66:18:ef:36:1b:8a:77:c4:05:47:92:b3:75:ed:
38:2b:7a:d4:82:de:53:57:c0:53:8d:ae:6e:93:71:43:56:ea:
64:c5:47:c1:38:cd:06:ba:93:63:2f:43:09:be:ae:b7:a2:a3:
ef:e8:e2:12:c8:e5:11:f3:d9:b7:e4:2f:10:c6:f1:58:aa:77:
09:63:58:90:e8:04:65:c6:fd:0f:3a:1f:f0:80:fd:63:e7:75:
10:99:c4:3c:8f:d9:4e:a6:4c:68:61:bc:39:dd:e0:76:3b:35:
04:14:ac:12:a1:6d:9a:16:2d:63:7f:6b:d5:ca:ac:4f:be:13:
ca:b6:0b:5c:7e:06:b2:a1:97:05:32:bf:14:9f:af:f0:a8:d3:
f7:1d:fa:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:06 2026 by rpki-client