Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
File: r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft (raw, json)
Hash identifier: IrSwKejVOq04d0zh3BeYb5ZZ+FzW5nmI04cukRlMolY=
Subject key identifier: 04:CF:7C:99:6E:21:87:41:8C:47:00:52:F4:BC:F1:77:BF:69:53:B0
Authority key identifier: AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
Certificate issuer: /CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Certificate serial: 019D26CCED43E1DAC956A679B18D920795ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 21:00:57 +0000
Manifest this update: Wed 25 Mar 2026 21:00:57 +0000
Manifest next update: Thu 26 Mar 2026 21:00:57 +0000
Files and hashes: 1: L-zvgoeGr5QCNNKdFrigYiUThmw.roa (hash: 5dCIcepW4WjNJw8oLPf6dUnoQSabbeGPDqnNUHTDSio=)
2: QiAgT2HWAVS4RtCxk3EgrUcgIYg.roa (hash: KFQ1WZMAZMiBqbCBbEMvQWQem6/MoMp+dWHnCpqq7zE=)
3: r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl (hash: VY2XcEmwA29KYQKo+zvIhtUKtHzvUQ9X/9OP/RXWUUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ed:43:e1:da:c9:56:a6:79:b1:8d:92:07:95:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Validity
Not Before: Mar 25 21:00:57 2026 GMT
Not After : Mar 26 21:00:57 2026 GMT
Subject: CN=04cf7c996e2187418c470052f4bcf177bf6953b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4a:f5:70:0b:29:5c:64:06:ee:82:75:0b:57:
aa:cb:52:54:2e:91:fd:89:70:93:23:7d:c1:45:45:
8c:78:34:3a:01:03:ce:3d:06:57:7b:c5:c9:6d:8e:
59:2b:2a:2f:35:54:d7:5a:88:ea:10:65:6c:ca:95:
c0:17:57:19:5f:a9:08:86:c2:34:b2:b6:71:b3:0d:
7e:98:3c:8d:25:e4:85:ed:36:96:54:44:1a:f5:84:
1e:ed:29:42:69:48:7b:cc:88:a7:11:23:2f:d7:8c:
12:40:33:7e:8e:e0:ed:76:60:49:8b:9f:ec:9b:b9:
cc:ce:21:36:73:a9:d2:75:36:5b:0d:43:2f:e2:ad:
a6:41:a2:31:35:10:8a:2d:ea:75:6f:c2:ae:d2:a4:
52:0a:79:03:18:12:6a:c8:b3:e2:52:52:83:b3:c4:
ec:be:eb:a1:8c:5f:16:a0:b4:0b:a5:e7:18:cc:4e:
c8:f3:55:50:89:7c:5f:aa:22:c8:b4:ae:eb:39:b5:
57:a2:2c:dd:f9:8c:01:0b:a8:50:95:a6:12:7f:a8:
80:cb:f3:a3:3c:97:e6:ee:cd:87:41:df:74:cf:6f:
3c:9a:ad:43:d9:d6:ef:7a:c1:8d:58:be:63:7a:6e:
97:f9:4d:af:39:a0:d9:87:fa:5e:6c:8f:fa:20:71:
d9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CF:7C:99:6E:21:87:41:8C:47:00:52:F4:BC:F1:77:BF:69:53:B0
X509v3 Authority Key Identifier:
keyid:AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b8:f6:44:23:d9:8d:37:43:4d:ca:85:b1:4a:b1:08:d3:98:
91:84:08:e2:99:c0:46:e7:d4:41:f3:38:80:94:2f:fe:28:7c:
c0:35:e0:5c:f5:a0:05:4c:58:0c:05:c9:ee:46:6d:eb:f5:2d:
d2:6d:1a:fa:47:88:e1:f1:53:8c:80:3f:fd:d4:fb:78:7d:9a:
16:49:7c:24:25:33:b9:ab:d6:e0:2e:5f:2a:b9:9b:02:b3:2b:
d0:4a:50:02:86:63:6c:b0:05:2a:c7:3c:93:1b:78:bc:1d:8e:
c7:bf:91:eb:08:86:c2:0d:07:79:ec:5f:c3:8c:95:85:a5:4c:
82:62:57:50:a5:ca:c1:67:09:64:6f:c7:7a:f0:fd:fe:42:82:
24:1d:f2:99:fb:a9:01:5f:1c:74:80:c8:ec:0c:db:cc:c7:3e:
8c:4d:8a:34:9b:51:6b:7e:9d:d4:8a:6b:b6:d9:18:46:d7:58:
3d:25:16:c4:f4:1f:71:63:55:92:48:f4:32:12:c3:59:e5:e3:
d0:9a:e6:23:a9:b9:20:ab:99:e7:94:34:a5:c2:c5:cf:72:8f:
8d:b6:0f:6c:b6:e7:c4:db:bf:6b:45:ed:ac:61:f4:f4:9c:f6:
a2:b0:38:7c:60:34:87:6b:80:41:e4:c8:41:08:ae:96:8c:32:
9e:7c:59:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:50:28 2026 by rpki-client