Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
File: eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json)
Hash identifier: SNn5JHUoWw1jCJi3yQpz/b+ltNi/qtyhIOOsl05WWy8=
Subject key identifier: C2:E2:B6:8E:D7:D3:C5:75:EF:2E:68:F6:CB:E8:93:C6:3F:5B:C4:D2
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Certificate issuer: /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial: 019D37F7723905AAE94F0E1F9EBBEFDA332E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
Manifest number: 0E6B
Signing time: Sun 29 Mar 2026 05:00:56 +0000
Manifest this update: Sun 29 Mar 2026 05:00:56 +0000
Manifest next update: Mon 30 Mar 2026 05:00:56 +0000
Files and hashes: 1: 0YhVfBsZbIu7A5iYA94enjAmzkk.roa (hash: HsOjFTzanM+rOeHfu6ck2x7MS7PSUK04NQ5MvXhA+ZA=)
2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: ZyiXQCDz/XL1X/H6zYiKhriWw0pnzIS0fi2L1CJUI6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:72:39:05:aa:e9:4f:0e:1f:9e:bb:ef:da:33:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Validity
Not Before: Mar 29 05:00:56 2026 GMT
Not After : Mar 30 05:00:56 2026 GMT
Subject: CN=c2e2b68ed7d3c575ef2e68f6cbe893c63f5bc4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:50:73:33:24:8d:70:39:44:26:21:84:3e:
cf:28:25:a3:b3:30:10:b5:19:cf:97:1b:be:9a:4d:
5f:73:81:d8:76:c4:9d:82:09:ff:78:c3:aa:f3:62:
bc:79:13:92:60:9a:2f:08:2f:15:1c:46:42:73:a4:
3d:f2:5c:91:0a:f4:7c:00:6f:09:a7:84:1f:96:a9:
53:24:84:26:f5:82:09:85:4f:5c:c5:a2:10:b4:82:
5a:28:8d:af:46:c9:b0:ce:02:ec:e8:a5:90:6c:07:
7e:c6:9f:62:af:b3:40:5b:c1:fc:bf:f3:08:d8:39:
af:6c:50:e8:42:ad:1b:ae:58:ee:69:c7:d0:ef:9d:
1d:fe:cf:8e:b7:10:a9:99:65:85:ef:e3:28:fa:2b:
c3:81:5e:e4:3e:04:1d:88:d6:a6:fb:a9:28:f2:35:
f1:a9:67:3f:37:ba:3e:bf:a9:98:64:6a:dd:7f:2e:
4a:94:07:36:cc:b6:72:8c:f0:5d:58:d6:f5:b0:61:
00:7d:69:6a:5b:f0:14:16:db:8c:cd:c6:e3:68:52:
45:f2:27:7b:d8:40:d0:ff:31:f7:05:39:69:af:47:
23:a8:8f:fb:7d:da:64:91:e9:5a:9c:35:37:37:c0:
42:0e:09:c9:47:6e:b6:d5:dd:9d:3c:28:90:22:fe:
71:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E2:B6:8E:D7:D3:C5:75:EF:2E:68:F6:CB:E8:93:C6:3F:5B:C4:D2
X509v3 Authority Key Identifier:
keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:7b:fe:96:bd:59:b6:3f:53:db:67:58:d5:dd:2c:a9:30:b7:
01:d9:db:46:87:74:d0:85:46:c2:b1:5b:59:19:c4:26:2a:a7:
4e:e5:a9:ee:74:a2:d7:46:05:63:d7:53:b2:ec:23:7a:08:64:
d1:5e:3c:6c:ad:93:1f:a1:02:b7:df:7b:bd:37:14:1e:c8:12:
a7:79:a2:07:3d:4c:50:cc:5c:31:26:ca:03:74:7e:44:9b:92:
86:f2:c3:ae:30:65:4c:a8:1b:c5:dc:d2:60:25:fa:2b:50:03:
61:6e:f3:f9:a6:12:b8:40:6a:c3:8b:4d:b7:ea:0b:2e:e9:39:
02:15:e8:b0:a6:82:27:35:04:ce:fe:27:42:14:57:76:52:3b:
16:3d:6b:64:d4:f0:87:b1:5d:e9:26:50:96:30:64:4f:c2:a5:
24:42:a9:32:e9:84:8f:d1:3e:ca:b6:a9:3c:19:83:d7:78:39:
2c:52:36:7c:59:8a:6e:2c:18:1b:86:26:49:46:36:25:b6:c2:
ea:32:f2:17:7d:1f:b2:71:6c:3c:7d:e9:98:eb:60:1a:f1:53:
c5:b8:d6:cb:10:36:6d:3f:db:b7:0c:40:7e:ff:1b:85:48:43:
8f:7b:43:ae:f0:0e:66:e2:82:1e:47:93:c4:01:55:ba:9e:0d:
db:99:20:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:43:11 2026 by rpki-client