Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
File: eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft (raw, json)
Hash identifier: 7SEIcdHqMHICLiQ0gdoYGs8ga80fmtspfnydC6T3qx0=
Subject key identifier: 7D:C0:B7:2F:32:35:89:F7:65:36:B4:92:F5:02:88:9C:DD:8D:97:B9
Authority key identifier: 79:A4:B1:FB:BA:D1:CB:6A:8B:1C:7D:33:73:7A:D7:2B:CD:9B:8D:9D
Certificate issuer: /CN=79a4b1fbbad1cb6a8b1c7d33737ad72bcd9b8d9d
Certificate serial: 019E1D5933ACA1C474DD50EF307566FE44B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
Manifest number: 0139
Signing time: Tue 12 May 2026 18:00:45 +0000
Manifest this update: Tue 12 May 2026 18:00:45 +0000
Manifest next update: Wed 13 May 2026 18:00:45 +0000
Files and hashes: 1: MHfXLodJ1lTLubHBUzEu-y-nQd8.roa (hash: v+heG+utge9KSHpg0rUF2i0HpIa/3KcrihN3fHNBOZo=)
2: ad2pJPLMCY9-MtsOQUWfkJzvGjk.asa (hash: znBGDedW1a6RheuPxFAgpjdNY4UU36DMoXaL/AWeESU=)
3: eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl (hash: CpRVWGWGss/mA0reluclxCOzjrISKAFrFkY2hZ6YyD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:33:ac:a1:c4:74:dd:50:ef:30:75:66:fe:44:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a4b1fbbad1cb6a8b1c7d33737ad72bcd9b8d9d
Validity
Not Before: May 12 18:00:45 2026 GMT
Not After : May 13 18:00:45 2026 GMT
Subject: CN=7dc0b72f323589f76536b492f502889cdd8d97b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:68:1e:aa:e1:19:f0:cd:6c:3e:39:61:5b:a5:
fb:21:e4:59:82:4a:14:0b:a2:2b:df:9d:cb:35:79:
ad:00:dd:3e:2b:eb:38:74:c6:e1:8a:75:97:83:c9:
33:f5:a6:7c:a7:5b:80:99:60:f9:f8:ff:e9:14:87:
5e:dc:4d:50:34:18:16:30:74:7b:35:6a:b4:66:40:
bd:99:5f:96:29:c5:9c:55:52:44:e4:86:57:b9:ca:
dc:f5:dd:30:fc:cf:21:ec:e7:52:57:61:3d:26:55:
04:10:5c:5e:e0:ad:f0:0a:d6:98:54:65:99:46:6b:
2c:2f:74:a4:a7:79:ba:a9:11:07:9b:6e:35:9f:b3:
c2:53:49:2d:7a:2f:2d:98:a4:f1:f9:27:2f:a5:dd:
48:3b:95:b9:12:5c:e9:e8:23:4f:3c:41:5f:d4:b2:
68:6c:82:22:df:f9:0f:62:24:69:9c:c9:fb:e1:d1:
ad:89:48:1b:7f:ee:3f:2b:d4:22:aa:ed:28:73:87:
20:d9:5a:a0:7d:aa:c3:7d:1f:04:f3:cb:32:35:6e:
f5:f9:e8:e7:8d:c3:80:51:5d:67:c7:c9:7d:67:5b:
1c:c7:68:72:0f:85:07:79:5e:b9:5c:9c:26:d3:a7:
f4:75:6c:7b:30:a6:d8:7b:41:2e:3f:59:b9:b0:7a:
fe:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C0:B7:2F:32:35:89:F7:65:36:B4:92:F5:02:88:9C:DD:8D:97:B9
X509v3 Authority Key Identifier:
keyid:79:A4:B1:FB:BA:D1:CB:6A:8B:1C:7D:33:73:7A:D7:2B:CD:9B:8D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:b4:5a:cf:5b:8b:88:4b:5a:8b:0c:f8:72:ea:ff:60:3c:d8:
e9:18:cf:d7:92:ad:05:7c:de:25:38:e9:40:d8:43:f8:b6:f9:
16:73:ba:a6:08:8b:5e:4c:9d:59:81:1c:d5:ee:df:62:3b:11:
3c:e0:ac:19:59:fc:d6:2c:10:bc:23:c7:e2:8a:0e:cd:aa:dd:
f6:75:ec:49:28:49:c9:4b:61:a7:63:ab:d7:61:d0:85:87:87:
b3:9c:99:40:c0:20:66:ef:51:7c:ed:27:0b:32:00:c5:09:d0:
f2:3d:76:46:4d:cf:47:6b:4e:00:e0:69:1b:2c:3f:a6:65:10:
83:04:58:5b:a0:33:61:6d:60:ea:e1:aa:7c:0d:15:c0:fd:7f:
84:94:0d:7f:aa:df:46:b2:db:af:45:5d:48:24:72:41:b5:26:
a0:ab:55:51:91:55:02:f3:ad:94:c6:4b:14:a3:7a:07:9a:0a:
99:f4:36:aa:7e:0f:b0:f8:1e:16:3d:12:06:4c:cb:8e:1a:fe:
1a:3f:aa:1c:81:7a:a1:cf:74:c1:f5:d0:94:b4:4e:ed:46:dc:
8f:42:cc:a9:6d:9c:00:ac:45:d6:e7:e0:31:d3:f6:ab:0c:9d:
95:fc:1f:eb:2d:1c:02:0f:c1:f1:ce:36:e2:e7:c5:e1:aa:65:
48:5a:cc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:03 2026 by rpki-client