Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
File: eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft (raw, json)
Hash identifier: sFIrksZHl301lzxof+vzpRpG2nu+wYJRqxAWj0y5PP0=
Subject key identifier: 0B:05:9C:1B:40:DE:38:24:8B:7E:B3:F2:B5:49:56:49:92:55:F4:4A
Authority key identifier: 79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53
Certificate issuer: /CN=794f6b59b439d1769932059d198428cb806ae753
Certificate serial: 019D27DF7195BCEE62BCD945B36809EAA9DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
Manifest number: 170A
Signing time: Thu 26 Mar 2026 02:00:48 +0000
Manifest this update: Thu 26 Mar 2026 02:00:48 +0000
Manifest next update: Fri 27 Mar 2026 02:00:48 +0000
Files and hashes: 1: 46SpZkulob1qI8XSQosdiJhHEWo.roa (hash: HfmlNEm+q4mKiMwfDLGAB9WzmcIjE5Zp5Gvj/U9yVns=)
2: eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl (hash: 5b2vmq5l+cMe6m2DxIHt6ec/oqdeAvD4iXC212KQN+o=)
3: wVHVc0bqRNzroQm7A3wRlpqpwnw.roa (hash: c/GhDxl0nFCEK8Y/vnuoeBfu7bdOUD08bFNu1z8ZDmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:71:95:bc:ee:62:bc:d9:45:b3:68:09:ea:a9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f6b59b439d1769932059d198428cb806ae753
Validity
Not Before: Mar 26 02:00:48 2026 GMT
Not After : Mar 27 02:00:48 2026 GMT
Subject: CN=0b059c1b40de38248b7eb3f2b54956499255f44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:47:95:b7:2e:01:c7:a0:34:61:04:31:70:
95:a4:75:34:d5:a9:a8:65:31:45:ab:9d:be:c4:3e:
41:ca:37:e7:4c:91:6b:05:50:76:5b:6c:ee:1e:8e:
89:83:9b:24:23:95:22:6a:2f:24:85:33:a0:28:11:
68:a9:fb:7e:da:4c:1c:40:49:76:ba:36:ca:c7:54:
d4:b9:ff:38:b4:8e:47:5c:ca:f5:60:f3:4f:d2:4d:
52:4d:88:08:15:6b:95:4f:21:76:9d:44:47:cc:40:
db:7e:2c:1b:22:fe:f2:85:c9:d6:dc:47:3e:eb:ae:
f8:2e:42:fa:86:bb:c0:67:5c:98:cc:53:bb:54:57:
d1:8e:08:c2:c7:0f:8d:5d:5c:5e:fe:24:5d:0c:48:
12:6c:2b:7f:19:a3:b7:ab:46:ea:5c:f0:fe:dd:13:
2f:2d:14:9a:05:1b:a1:dd:2a:29:82:3e:0a:ec:23:
d2:18:2d:87:05:4e:81:50:53:1f:58:c4:3d:54:28:
07:80:68:81:ef:73:65:a0:89:ea:26:df:0d:74:c5:
ad:6b:d5:e8:5a:46:6a:96:94:01:3d:ae:d8:4e:0d:
d0:68:90:f5:20:58:a1:69:78:bb:af:c4:05:53:2b:
09:7f:c4:d3:47:db:26:75:45:05:a4:18:27:f9:84:
66:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:05:9C:1B:40:DE:38:24:8B:7E:B3:F2:B5:49:56:49:92:55:F4:4A
X509v3 Authority Key Identifier:
keyid:79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c3:70:f3:ef:02:bf:c5:3d:ef:8f:4b:51:f1:39:a8:aa:2e:
0f:2a:1d:73:01:00:2d:c4:63:6c:3d:1f:da:7a:da:4d:9f:76:
38:3f:f7:53:f7:8f:6c:33:86:35:32:e9:26:21:99:8f:88:10:
d1:0d:f0:a0:2f:aa:b1:b2:88:82:1e:f4:8b:ee:16:c9:98:ac:
05:cb:6c:69:a2:76:d1:5f:f9:4e:40:e3:7c:38:02:5a:1f:c1:
ea:d9:c1:0b:1e:df:d5:46:86:fb:d5:aa:14:b8:4f:1c:45:b3:
06:a7:79:9e:85:a4:75:51:0b:2d:c3:63:2c:58:27:93:1c:80:
1e:63:67:80:c0:93:7e:cc:30:da:d6:fa:4f:89:ad:2a:1b:3c:
0f:3b:47:8a:85:00:74:2d:b8:69:f3:69:06:b2:e6:eb:31:59:
79:f2:fe:c4:3a:29:97:29:6e:74:f3:6e:a3:23:4d:42:f5:28:
1e:6d:9c:38:aa:e6:94:58:17:13:c5:18:1a:dd:0c:f1:b0:81:
79:10:bd:56:e9:d6:ec:13:98:8d:43:a4:cc:e9:cf:d6:bb:2a:
96:e1:65:9b:36:20:c5:9d:75:0c:f8:81:88:72:a5:c8:b3:ae:
d5:ed:99:cc:21:a4:bc:45:5c:f3:a0:83:ff:a4:1c:6c:07:06:
23:b5:d1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:55:46 2026 by rpki-client