Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
File: eknuryQ0LDssYyyeSEYxON4twAs.mft (raw, json)
Hash identifier: skEn4pbJEvlvLA8aIlMPTCNH77er28zAuFQbi3z+C48=
Subject key identifier: 40:D4:AE:84:6E:4D:12:16:60:1C:39:34:11:A1:4E:C0:B3:19:87:00
Authority key identifier: 7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B
Certificate issuer: /CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
Certificate serial: 019D37896A9E0AFA0D22F0F261ABB05BF58A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 03:00:45 +0000
Manifest this update: Sun 29 Mar 2026 03:00:45 +0000
Manifest next update: Mon 30 Mar 2026 03:00:45 +0000
Files and hashes: 1: Zi7Fm7xGDMI0wzFEfSwodKSqV1A.roa (hash: xTOm/EemcqAocmaFWYcszLLVt5VioXRzSyJ/5c30dUE=)
2: eknuryQ0LDssYyyeSEYxON4twAs.crl (hash: 1UryaQbdsTnGjtrd9hMghmBalcYhLSQ2YwQLjujgweI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:6a:9e:0a:fa:0d:22:f0:f2:61:ab:b0:5b:f5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
Validity
Not Before: Mar 29 03:00:45 2026 GMT
Not After : Mar 30 03:00:45 2026 GMT
Subject: CN=40d4ae846e4d1216601c393411a14ec0b3198700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:5d:6f:ec:b8:99:17:b7:45:95:1d:75:29:
39:cd:35:51:35:4d:f1:2f:4b:d6:ef:12:bf:64:d5:
9c:b0:36:d8:1c:fc:56:49:07:f2:0e:29:ff:7e:77:
d8:dd:c9:ec:88:5d:0f:c4:0b:fc:bf:f8:1c:9b:78:
2b:68:3e:ea:2d:6c:c2:75:dd:7b:a2:f1:fa:fc:3c:
5e:2e:96:0d:c0:2f:b5:df:85:5f:a1:ff:7c:3c:72:
b7:55:13:35:93:cc:9a:b4:27:ef:79:53:fc:1e:d2:
6c:d5:0f:4a:87:ce:57:02:5d:46:3e:87:6d:f9:60:
83:72:aa:35:24:1a:0f:c8:b7:64:aa:75:16:94:4a:
5f:06:72:3c:ed:0b:d8:51:a0:f5:f7:26:a4:9a:bb:
26:85:c0:1e:ef:9d:ee:5a:ae:4c:09:65:48:f7:61:
94:5d:4c:5a:3a:11:4d:e1:5c:06:61:33:8e:67:cc:
21:1f:05:86:60:e3:4d:f7:b2:ee:49:17:a0:6d:f9:
d0:d4:a2:91:11:c5:91:1a:33:78:8d:c9:ee:59:f8:
84:57:8e:29:5a:fc:a7:c3:99:43:5b:4c:04:32:93:
dc:9b:f7:74:26:0c:c3:71:75:13:20:e5:54:61:58:
d2:fd:72:ec:f9:30:86:3f:c6:34:bf:d6:91:16:25:
bb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D4:AE:84:6E:4D:12:16:60:1C:39:34:11:A1:4E:C0:B3:19:87:00
X509v3 Authority Key Identifier:
keyid:7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b8:f1:be:a7:cf:a8:cf:82:26:7d:77:ef:7b:fa:f1:dc:a3:
11:38:f4:08:06:79:c6:ca:64:0d:ae:90:ac:30:06:85:ca:27:
b1:97:fe:3d:09:08:b3:88:3c:4f:41:ac:8d:a5:64:5c:71:0c:
ca:f6:c0:bd:76:f9:56:6c:4a:66:6a:70:d8:a3:47:68:5e:ed:
ad:ed:60:72:0a:77:a2:9e:57:2e:c4:31:d7:48:69:de:32:e3:
cd:63:ec:76:98:4c:14:f5:3a:80:33:52:93:aa:ac:2e:24:54:
c5:b0:be:08:ef:5c:36:dc:1c:44:3f:08:ea:98:1e:47:f1:32:
0b:72:e3:b4:c2:87:28:f0:65:b8:c3:17:1c:0a:88:42:0a:3d:
b9:80:40:f5:9d:43:3a:96:a2:68:e0:3d:ff:27:e1:b6:27:fe:
3b:08:2d:86:59:50:87:fc:8e:55:7c:cf:3a:e3:bd:4b:2f:1d:
58:73:98:07:8a:c2:82:f4:94:a3:13:ec:2d:9f:61:78:92:3e:
20:5e:03:d0:0f:db:ae:e0:d4:88:96:af:fa:68:bc:02:79:73:
69:10:f4:c7:cc:2d:4b:60:f9:2f:1e:0a:c1:27:0d:d1:55:44:
48:6a:39:97:ba:8f:b8:59:71:e6:39:d3:13:34:f6:84:64:ca:
c2:6b:93:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iWqeCvoNIvDyYauwW/WKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNDllZWFmMjQzNDJjM2IyYzYzMmM5ZTQ4NDYzMTM4ZGUy
ZGMwMGIwHhcNMjYwMzI5MDMwMDQ1WhcNMjYwMzMwMDMwMDQ1WjAzMTEwLwYDVQQD
Eyg0MGQ0YWU4NDZlNGQxMjE2NjAxYzM5MzQxMWExNGVjMGIzMTk4NzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDVdb+y4mRe3RZUddSk5zTVRNU3x
L0vW7xK/ZNWcsDbYHPxWSQfyDin/fnfY3cnsiF0PxAv8v/gcm3graD7qLWzCdd17
ovH6/DxeLpYNwC+134Vfof98PHK3VRM1k8yatCfveVP8HtJs1Q9Kh85XAl1GPodt
+WCDcqo1JBoPyLdkqnUWlEpfBnI87QvYUaD19yakmrsmhcAe753uWq5MCWVI92GU
XUxaOhFN4VwGYTOOZ8whHwWGYONN97LuSRegbfnQ1KKREcWRGjN4jcnuWfiEV44p
Wvynw5lDW0wEMpPcm/d0JgzDcXUTIOVUYVjS/XLs+TCGP8Y0v9aRFiW7uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDUroRuTRIWYBw5NBGhTsCzGYcAMB8GA1UdIwQY
MBaAFHpJ7q8kNCw7LGMsnkhGMTjeLcALMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWtudXJ5UTBMRHNzWXl5ZVNFWXhPTjR0d0FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82M2I4YWEtNzIyZi00MDA5LWFkYTct
ZjliNjA3MTE0NTNjLzEvZWtudXJ5UTBMRHNzWXl5ZVNFWXhPTjR0d0FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy82M2I4YWEtNzIyZi00MDA5LWFkYTctZjliNjA3MTE0NTNj
LzEvZWtudXJ5UTBMRHNzWXl5ZVNFWXhPTjR0d0FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbjxvqfP
qM+CJn1373v68dyjETj0CAZ5xspkDa6QrDAGhconsZf+PQkIs4g8T0GsjaVkXHEM
yvbAvXb5VmxKZmpw2KNHaF7tre1gcgp3op5XLsQx10hp3jLjzWPsdphMFPU6gDNS
k6qsLiRUxbC+CO9cNtwcRD8I6pgeR/EyC3LjtMKHKPBluMMXHAqIQgo9uYBA9Z1D
OpaiaOA9/yfhtif+OwgthllQh/yOVXzPOuO9Sy8dWHOYB4rCgvSUoxPsLZ9heJI+
IF4D0A/bruDUiJav+mi8AnlzaRD0x8wtS2D5Lx4KwScN0VVESGo5l7qPuFlx5jnT
EzT2hGTKwmuTeg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:57 2026 by rpki-client