Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
File: eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft (raw, json)
Hash identifier: zZv7kHuTxiUQ7wv46b2Lg/hpgLO3e7XReJbLdl12fB0=
Subject key identifier: E3:D8:E9:76:95:1C:21:60:83:1D:E0:DC:22:A4:0F:A0:B3:89:44:79
Authority key identifier: 7A:EF:7B:36:49:35:AE:2D:EB:4B:86:D4:43:EA:84:32:B6:2C:C5:20
Certificate issuer: /CN=7aef7b364935ae2deb4b86d443ea8432b62cc520
Certificate serial: 019DA1531BC52811C3445ED5FDB2298DB652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
Manifest number: 01BC
Signing time: Sat 18 Apr 2026 16:01:11 +0000
Manifest this update: Sat 18 Apr 2026 16:01:11 +0000
Manifest next update: Sun 19 Apr 2026 16:01:11 +0000
Files and hashes: 1: 3gMylm_7kdY05Np-Gs1Ujn2TpUw.roa (hash: W5KGrcdaIcr77/oIsEbLhshZMJrc2jrTw0N4xA3kS0o=)
2: SHM9R3kXlAO8-e-rYuN_jsGmG6M.roa (hash: X06rQu41FDn+MhiPC2VMwGHMTFpmXVd6mlDBUP0P6FE=)
3: eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl (hash: V6ipyHH82A0CDtx4dmn2e2clqfPoCH4HzrjQTBx28zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:53:1b:c5:28:11:c3:44:5e:d5:fd:b2:29:8d:b6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aef7b364935ae2deb4b86d443ea8432b62cc520
Validity
Not Before: Apr 18 16:01:11 2026 GMT
Not After : Apr 19 16:01:11 2026 GMT
Subject: CN=e3d8e976951c2160831de0dc22a40fa0b3894479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:7a:d6:88:aa:c0:91:00:37:d5:9f:3d:ae:
f0:eb:5f:7f:ca:1a:7d:10:70:63:e9:79:ac:8d:bf:
0a:55:f9:ae:a3:50:e7:3f:aa:30:a3:bb:78:b8:96:
ba:60:5f:56:fc:c0:dc:dc:fe:00:9c:a0:03:e7:3c:
f2:ba:d7:2e:6b:b0:4d:75:82:c3:79:86:34:bb:16:
a9:2a:02:93:60:4e:dc:06:bf:84:f1:6c:9a:f4:3a:
08:10:87:1f:3a:53:65:d8:bc:5f:60:12:2e:08:2c:
12:a5:73:c4:87:c3:97:30:9d:62:fe:d2:e7:a1:09:
bb:df:65:d5:ec:71:f9:d5:3b:81:e7:c8:e4:c2:86:
03:f2:78:ba:42:3b:0a:67:bd:e4:73:e4:98:c8:4c:
d9:d9:c5:a3:95:79:b1:43:25:0c:91:87:20:74:58:
25:19:de:08:33:56:8d:89:f1:3d:2d:5d:83:d8:dc:
a2:7f:3b:1e:ea:d9:7e:a2:bb:0a:4e:49:42:f0:e5:
c8:9c:f0:29:57:88:8d:db:07:c0:e3:ee:db:7d:ca:
d9:ba:ee:a2:f8:26:8e:0e:2c:38:b3:86:21:a8:79:
ff:97:04:02:9f:3e:5f:32:35:d5:6b:38:f6:2c:af:
97:7c:7f:f7:c0:bc:0b:b0:63:fb:30:5c:fe:82:6d:
aa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D8:E9:76:95:1C:21:60:83:1D:E0:DC:22:A4:0F:A0:B3:89:44:79
X509v3 Authority Key Identifier:
keyid:7A:EF:7B:36:49:35:AE:2D:EB:4B:86:D4:43:EA:84:32:B6:2C:C5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:08:90:aa:23:a0:bf:3c:49:7a:8c:b7:d4:13:b3:33:a1:20:
51:99:15:b9:91:fe:64:25:7a:8d:d3:ad:92:d8:de:0d:af:df:
b4:ca:15:ee:16:52:9b:ce:f5:a8:6f:a3:74:9a:0f:ef:86:59:
b6:f6:bc:0b:db:6c:68:cc:3c:a4:05:ea:f6:6d:2a:c6:3d:ab:
1c:c6:b9:4d:38:f0:03:e5:d6:f4:65:29:79:da:76:4a:e0:fd:
56:48:4d:58:55:de:3d:38:d2:86:2f:ba:d0:3c:44:ec:32:bd:
e2:01:55:3b:b5:b3:a2:98:bb:77:aa:ae:6f:6c:98:62:b1:21:
80:03:7b:ac:7a:e2:f2:e0:51:d0:49:0a:d0:fa:7d:4d:c7:32:
9e:63:b3:07:80:f5:79:b9:79:3f:a1:ad:1c:f4:bc:4a:50:73:
5f:8e:42:98:b0:86:96:b1:83:d7:a6:ce:b3:dc:c2:32:18:a1:
0a:7b:5b:ed:c5:c0:be:25:14:83:77:d3:80:c5:1c:94:23:29:
38:c2:44:b1:73:37:bf:fd:e2:ba:b2:93:72:41:5f:c3:2f:14:
65:d0:81:3c:16:8e:54:7c:73:a8:e1:23:cc:19:2a:64:17:d2:
7a:97:c6:ee:ff:89:52:c8:d0:94:1f:04:19:25:26:7d:3a:4a:
e3:e3:f1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 02:12:34 2026 by rpki-client