Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
File: eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft (raw, json)
Hash identifier: +MEzPVNkbPhe7Hn3GVcoK99Y5ejgQlOjCJFkGMgx8+o=
Subject key identifier: C1:50:1B:45:F9:A1:0E:C5:21:76:FE:6D:77:84:10:9C:6C:8D:76:B3
Authority key identifier: 79:A4:B1:FB:BA:D1:CB:6A:8B:1C:7D:33:73:7A:D7:2B:CD:9B:8D:9D
Certificate issuer: /CN=79a4b1fbbad1cb6a8b1c7d33737ad72bcd9b8d9d
Certificate serial: 019D26281E9B3694284C762E60EA2914A579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
Manifest number: B9
Signing time: Wed 25 Mar 2026 18:00:56 +0000
Manifest this update: Wed 25 Mar 2026 18:00:56 +0000
Manifest next update: Thu 26 Mar 2026 18:00:56 +0000
Files and hashes: 1: MHfXLodJ1lTLubHBUzEu-y-nQd8.roa (hash: v+heG+utge9KSHpg0rUF2i0HpIa/3KcrihN3fHNBOZo=)
2: ad2pJPLMCY9-MtsOQUWfkJzvGjk.asa (hash: znBGDedW1a6RheuPxFAgpjdNY4UU36DMoXaL/AWeESU=)
3: eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl (hash: gjoEzvAz//4OxGM985AVMdMsr8c24wAD3gKeJZaLeGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:1e:9b:36:94:28:4c:76:2e:60:ea:29:14:a5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a4b1fbbad1cb6a8b1c7d33737ad72bcd9b8d9d
Validity
Not Before: Mar 25 18:00:56 2026 GMT
Not After : Mar 26 18:00:56 2026 GMT
Subject: CN=c1501b45f9a10ec52176fe6d7784109c6c8d76b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:67:88:e3:2d:a3:7f:23:25:13:ef:7a:4f:
1f:eb:30:3c:12:d0:56:b9:10:9d:c7:e6:31:64:4e:
73:eb:45:00:e5:b3:b7:61:41:db:6b:fc:f7:b9:ea:
0d:cf:d9:87:a1:2f:38:d8:2d:63:c0:b0:3c:66:1c:
dd:ad:35:1d:9c:ef:e1:7e:49:8e:54:a3:3f:6b:61:
46:67:c9:11:15:51:c0:6d:55:3b:9a:50:96:f8:7e:
b3:19:6f:78:22:69:d6:53:8e:0f:2d:be:f5:40:9e:
56:83:ba:20:00:f9:5f:69:42:bf:49:d5:79:99:df:
0e:1a:d9:bc:b2:4c:2d:ce:06:07:9b:b0:61:f4:29:
2c:a5:18:e2:8b:55:02:21:c8:36:97:9b:1e:fe:ac:
2d:da:0b:7e:8c:8d:53:31:7c:43:6c:db:38:99:ef:
3b:d8:44:8b:94:37:5f:af:f0:97:01:d5:26:fb:2f:
4b:69:3e:34:15:77:72:24:29:f0:76:79:bb:b2:d8:
ab:a7:ab:15:5a:52:62:2f:5b:4a:60:8d:5b:1a:70:
fb:dc:c7:aa:76:9e:41:c0:f2:8a:7d:17:f2:13:f2:
a9:ab:9d:47:41:bf:c0:67:a9:cc:e8:a0:c0:1e:6e:
69:a3:ec:c5:14:ba:7f:8b:e5:41:46:99:21:6e:0b:
9d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:50:1B:45:F9:A1:0E:C5:21:76:FE:6D:77:84:10:9C:6C:8D:76:B3
X509v3 Authority Key Identifier:
keyid:79:A4:B1:FB:BA:D1:CB:6A:8B:1C:7D:33:73:7A:D7:2B:CD:9B:8D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:83:23:ac:65:af:4e:3a:a8:c6:ab:12:d1:59:fd:93:81:fd:
b4:b4:79:1d:7e:02:fa:04:4e:3d:72:01:0e:b3:fc:a0:5f:05:
24:1d:14:29:f6:8b:77:45:61:ab:86:1a:43:25:64:0e:d0:9e:
3d:48:ec:78:5c:5c:45:1d:b3:7f:07:a3:ec:f3:2e:93:c3:9b:
9e:c7:52:04:78:4a:de:dc:ae:89:0a:42:09:af:0e:f9:4f:7f:
18:84:70:0c:bf:2e:e5:f5:5a:3f:c1:21:ba:4f:18:76:4e:31:
07:0c:cc:f1:25:2c:b9:21:93:d3:65:e2:b1:af:6e:b0:7a:0a:
56:3b:75:c1:ba:7e:88:ab:9b:44:e2:ef:73:36:c1:99:d5:62:
97:80:92:14:6f:8e:78:7f:44:11:50:d6:fd:60:5a:99:c9:5f:
df:1f:5f:8b:f2:db:6b:05:b9:71:30:db:10:2e:98:de:d2:ed:
04:18:d8:fc:6e:57:d0:fd:4a:05:fb:4f:35:bf:bf:05:c7:05:
ee:70:60:c3:66:ac:f6:dd:8a:1d:36:39:4b:54:69:92:45:e0:
bc:39:f0:50:98:da:90:25:be:16:5e:ff:92:01:12:49:e1:ac:
b5:f1:24:06:79:d9:b8:4f:06:e6:4c:3c:ce:d4:ae:cd:91:04:
c0:e8:d5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:17:29 2026 by rpki-client