
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
File: eQ0cp4dhMQrDmnFP9i87krLnfYo.mft (raw, json)
Hash identifier: SNriNH3qWAmTV/0CXqPmc2O5iML6RWuaLHDpvCsBrTY=
Subject key identifier: 45:3E:30:1B:70:40:58:37:AB:49:46:D7:B0:6A:7E:A4:27:CD:72:A6
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Certificate issuer: /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial: 019D27A8B597DB8AA5CCB515A40ACADB95DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 01:01:01 +0000
Manifest this update: Thu 26 Mar 2026 01:01:01 +0000
Manifest next update: Fri 27 Mar 2026 01:01:01 +0000
Files and hashes: 1: EYMrlefUd_XSaWfylZCHkmVeXK4.roa (hash: 8jOCsUwGr5s+6E9DbnoIutjLx2+bBNXxqyvTsEuVuEY=)
2: eQ0cp4dhMQrDmnFP9i87krLnfYo.crl (hash: 6xWppzlBGsgKuDg+YMqObV5bVkNp5buyicuUWFhunrU=)
3: xeqelJo79Mi4ptPjtrax6cg2B_s.roa (hash: t6o74vCypP/JXaPY7ExWQCtzzyBRmlLod50GjeunzUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:b5:97:db:8a:a5:cc:b5:15:a4:0a:ca:db:95:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Validity
Not Before: Mar 26 01:01:01 2026 GMT
Not After : Mar 27 01:01:01 2026 GMT
Subject: CN=453e301b70405837ab4946d7b06a7ea427cd72a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:82:86:e2:92:bb:d7:84:c7:46:0c:6b:8e:
fc:b9:1c:5a:68:ae:39:42:a5:8f:1b:a9:1b:96:3c:
6e:8a:a8:df:4a:0b:eb:01:77:20:42:a6:bb:89:0a:
ed:37:e9:92:db:3a:43:b8:ff:12:a1:e1:c9:1e:03:
7d:c6:b5:6a:df:55:09:30:4c:9a:ec:3d:87:da:ee:
c7:98:85:cb:c1:52:09:55:24:68:80:42:f1:ef:6a:
d5:5d:8e:24:c1:4c:12:44:b0:f3:9b:09:6c:e7:ca:
a6:ad:24:c5:0d:f5:6b:ab:99:6b:de:9b:81:a8:49:
db:e5:ec:b1:8e:e0:60:60:46:c4:7f:90:1e:94:f1:
29:4b:7e:3a:b5:4a:44:c0:b6:a8:fb:a5:4c:78:59:
a4:fd:28:85:c7:b8:cb:a4:47:9d:86:26:d8:5b:06:
68:f8:b4:5f:b0:40:01:6f:8c:38:90:dd:48:8e:9d:
68:ba:06:3b:e2:ab:ef:10:67:ad:e9:02:51:49:ff:
17:fc:cd:39:83:d9:e7:01:29:87:cc:75:45:4e:4b:
3c:39:c7:50:1b:a6:cf:85:1a:08:47:de:9e:84:f3:
03:6a:d4:ae:6a:d0:32:51:8c:fd:25:2b:e0:7f:10:
22:4c:f2:fc:71:3c:c9:bd:c1:82:e9:0f:45:77:c0:
5f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3E:30:1B:70:40:58:37:AB:49:46:D7:B0:6A:7E:A4:27:CD:72:A6
X509v3 Authority Key Identifier:
keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5e:3f:0a:26:03:2b:f3:2d:34:22:c5:1c:c1:a9:76:83:97:
c8:03:b6:82:fe:38:db:90:09:8b:92:dc:88:52:77:2e:46:da:
2c:74:b1:98:db:c2:11:8c:8d:6c:95:1b:d2:f3:28:53:76:ec:
89:c1:47:65:f5:11:07:cc:a6:0f:4f:9f:b6:44:ac:c0:b0:4d:
2e:2f:b5:2a:15:8c:93:18:8c:b4:61:a3:65:7f:16:7a:6c:ac:
ab:65:eb:e5:34:0a:45:ef:f4:65:36:26:00:ff:b2:b0:1d:ab:
a6:0c:f4:3f:c0:69:41:d0:9c:22:70:b8:42:51:8b:45:3d:69:
60:08:61:44:bf:ef:5a:ea:1c:eb:32:a8:64:f2:2b:d8:02:45:
c8:ec:65:3a:6b:fc:07:cf:46:49:0c:23:d1:e0:82:2a:22:db:
72:be:14:9c:dd:9f:a1:10:ee:f2:55:12:ad:80:52:03:82:60:
76:5c:a3:e8:b8:4e:2e:02:4c:25:9a:7e:12:ab:cc:d4:09:92:
55:6c:aa:ce:10:c7:52:cf:05:56:27:a2:59:2e:8f:92:77:0e:
71:60:5f:ea:a9:fc:50:56:fe:74:87:02:35:4b:a1:15:a0:59:
70:8c:62:99:8d:7b:b1:aa:4d:de:83:8a:42:c5:9e:5f:9b:06:
3e:8d:fd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:04 2026 by rpki-client