Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
File: eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft (raw, json)
Hash identifier: 4VEadPRmWXBdnvI2TK0ioztICmDAIWdbKM3ng8h9V/Q=
Subject key identifier: 2B:7E:4D:37:7B:70:3C:70:D0:D3:21:E0:4B:8B:25:7F:39:C8:E3:04
Authority key identifier: 78:02:3B:5F:44:1A:4C:58:5C:68:C9:C3:BD:88:F9:D1:9D:65:4C:C9
Certificate issuer: /CN=78023b5f441a4c585c68c9c3bd88f9d19d654cc9
Certificate serial: 019D38658576AC5762236769A113CB676A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
Manifest number: 02FB
Signing time: Sun 29 Mar 2026 07:01:10 +0000
Manifest this update: Sun 29 Mar 2026 07:01:10 +0000
Manifest next update: Mon 30 Mar 2026 07:01:10 +0000
Files and hashes: 1: eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl (hash: xMe41nfHd6smTUa8Nzf0JVwXnYwEH0IK6FIfDXStX14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:85:76:ac:57:62:23:67:69:a1:13:cb:67:6a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78023b5f441a4c585c68c9c3bd88f9d19d654cc9
Validity
Not Before: Mar 29 07:01:10 2026 GMT
Not After : Mar 30 07:01:10 2026 GMT
Subject: CN=2b7e4d377b703c70d0d321e04b8b257f39c8e304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:67:ce:47:55:44:e6:cc:87:fd:ac:3a:b1:c8:
45:1a:d8:64:88:0d:46:24:bb:a8:06:53:63:c1:b5:
bc:66:54:f4:41:22:fe:6d:4d:fe:06:c0:85:3c:85:
68:ae:a6:0b:e1:c1:86:62:49:aa:cc:16:f9:fd:64:
b0:22:86:60:c5:ba:41:86:69:fc:e3:50:5f:d1:c6:
33:74:45:c6:d3:8d:63:8b:60:66:56:57:0c:03:d3:
79:0f:f1:76:24:56:8f:ac:e3:2b:45:11:9e:31:55:
82:69:c6:10:a4:7f:2c:a7:ad:95:f1:da:62:20:be:
ec:21:72:7e:0e:8f:05:9a:16:1f:f1:e2:87:4a:fd:
15:2b:f6:59:25:54:0a:ee:58:f2:a5:35:4d:22:1e:
7c:1c:de:25:d7:11:c3:58:90:56:20:85:84:6e:54:
82:6a:da:25:98:6f:ec:4c:c4:45:ab:91:e6:ec:44:
42:8f:39:e0:c9:01:95:0c:d8:62:3a:a5:7b:94:6b:
b5:59:08:6f:7e:34:77:e5:67:e2:48:24:58:b5:e5:
65:d5:24:53:56:53:8d:6a:f2:3f:ce:b5:7a:3c:ed:
61:ab:2f:ab:1d:dd:a0:42:dd:fd:17:4f:92:91:58:
45:de:9c:a0:0d:16:cf:3c:44:dc:77:af:4c:33:f7:
a7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7E:4D:37:7B:70:3C:70:D0:D3:21:E0:4B:8B:25:7F:39:C8:E3:04
X509v3 Authority Key Identifier:
keyid:78:02:3B:5F:44:1A:4C:58:5C:68:C9:C3:BD:88:F9:D1:9D:65:4C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:6f:75:13:37:d9:50:f8:db:42:8f:71:d0:4c:51:2c:5c:16:
a9:92:bf:e2:16:28:97:48:69:af:39:86:15:32:18:e9:29:92:
aa:8f:d7:5c:d7:fd:4d:1e:c6:5b:ef:fc:e8:a2:1d:a7:f9:e0:
8b:de:71:c7:03:8c:86:6e:47:aa:af:84:d9:5c:62:ee:fd:71:
c5:ea:fb:f8:a0:9a:71:19:f9:da:4a:37:ba:02:ea:cd:9c:79:
b5:87:35:55:f3:6c:d8:83:84:2d:81:b4:cc:5e:2b:66:69:1f:
d2:76:d3:00:c4:44:7f:cc:f3:80:09:df:c8:6c:a8:b8:20:d4:
9b:a1:83:51:57:07:d4:6e:be:46:d6:13:eb:46:5e:c1:b4:ea:
7a:41:31:e6:c3:74:49:16:d3:02:21:c8:8d:66:b7:2b:3f:56:
b8:e5:f8:99:db:e1:18:25:ac:d4:c3:bc:3a:d2:c7:1a:b1:7a:
69:21:71:00:27:c5:cb:cb:25:0d:ed:db:4a:6e:db:c3:20:7e:
20:18:c8:7d:e7:81:31:9a:50:78:e6:4d:60:46:b7:ed:10:da:
61:1b:f3:f7:bd:ae:12:7b:15:89:00:97:5d:b7:30:41:91:56:
37:17:90:25:b2:b8:d1:9a:72:80:17:47:3f:80:f1:1b:dc:a6:
52:46:75:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:46 2026 by rpki-client