Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
File: eKwxY10JG-YVV0MxH-HbfHrzR3s.mft (raw, json)
Hash identifier: mCwOAU3e1f7nloQiOeMkp06wkX8mkwn1hPFTyVLIzYA=
Subject key identifier: E8:74:1D:9C:3A:F5:71:A8:7E:A8:3F:DA:A1:DF:49:D4:01:12:77:F0
Authority key identifier: 78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
Certificate issuer: /CN=78ac31635d091be6155743311fe1db7c7af3477b
Certificate serial: 019D2B4E896F800BEB2A7AA1535409A240E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
Manifest number: 0CE2
Signing time: Thu 26 Mar 2026 18:01:00 +0000
Manifest this update: Thu 26 Mar 2026 18:01:00 +0000
Manifest next update: Fri 27 Mar 2026 18:01:00 +0000
Files and hashes: 1: VTBtuhupQkN3XNWCGG-SctrmNSc.roa (hash: MVRP12soTEVvkQMP4sWQe+ZD2ED7nGpPqffJ2oNbKlE=)
2: Yx6WCtdaJX-lZhNYpyoP3qTRTWA.roa (hash: SA4NVslryO/GKYfRH6uU7OXQ/zmv533QvWL9j3NGE/I=)
3: eKwxY10JG-YVV0MxH-HbfHrzR3s.crl (hash: CJFRUzRSsPtopk4ebJ974/FhaYuStDGtb/pcZ1UT/hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:89:6f:80:0b:eb:2a:7a:a1:53:54:09:a2:40:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ac31635d091be6155743311fe1db7c7af3477b
Validity
Not Before: Mar 26 18:01:00 2026 GMT
Not After : Mar 27 18:01:00 2026 GMT
Subject: CN=e8741d9c3af571a87ea83fdaa1df49d4011277f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:50:b1:73:0f:e2:00:05:ee:c4:5e:33:ed:
ad:e1:e6:88:0f:dc:fb:79:d1:cd:68:ae:5b:1e:30:
c0:01:ee:1a:ec:00:93:2b:92:98:4c:af:8c:78:f2:
1b:c0:3b:b3:25:d4:2c:ca:a0:d5:1b:9e:13:5b:c3:
38:83:48:a4:c8:7f:cd:86:98:42:5d:cd:bb:70:bd:
3d:1d:71:7c:32:0f:b2:b3:ad:d7:ef:5b:97:4e:9d:
28:f3:e7:2c:ac:39:01:66:c9:a6:c4:c4:3f:a3:4c:
04:23:e6:f3:21:68:25:71:ed:b6:9c:3c:90:2d:68:
19:41:cb:6e:29:b8:c7:aa:67:92:bc:ee:78:ab:7a:
da:4d:7b:26:8f:9f:ba:fc:c6:72:0b:ca:b1:f0:6e:
66:5d:8b:7c:41:76:9b:02:3a:0c:10:56:c8:72:49:
23:15:50:9d:7f:ce:33:1d:8b:2c:4d:ef:5e:7f:aa:
9a:c3:3f:fe:8a:10:62:aa:d0:90:eb:5c:ac:33:21:
ae:ea:95:f0:27:1b:86:d0:86:6c:04:36:cd:5c:70:
71:4a:37:db:f7:f6:a2:2c:3f:65:06:01:91:f6:b0:
96:f1:6f:5e:bf:03:0a:cf:60:cf:ec:17:42:1a:61:
79:39:59:bc:3c:a4:30:0c:50:a0:0d:5c:6f:0f:ef:
2a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:74:1D:9C:3A:F5:71:A8:7E:A8:3F:DA:A1:DF:49:D4:01:12:77:F0
X509v3 Authority Key Identifier:
keyid:78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:82:b9:7e:4c:12:4e:6a:2a:c5:75:88:1e:d1:d2:78:03:61:
8c:ea:7d:01:ae:29:2f:7c:af:c6:b2:7c:38:17:5c:56:25:6b:
27:ed:e3:b7:4c:6f:12:b9:10:eb:db:d9:b7:c4:2f:03:76:73:
06:5c:a8:ac:56:8f:58:e1:38:6c:fa:92:c1:01:d9:43:a6:ae:
48:68:83:23:dc:e3:8c:02:45:f5:ce:6b:44:cc:ae:ce:32:94:
ac:6a:ef:b2:a4:77:5c:3b:95:72:10:48:19:b6:d7:3a:58:27:
93:95:80:d6:bc:54:c7:3c:64:44:94:37:ba:9e:0e:4d:13:2e:
82:ac:0e:e3:a5:6b:eb:d3:18:87:94:e8:27:7c:ac:a7:7c:67:
d5:fc:9c:33:cc:5f:fd:a0:ed:a1:8b:41:ac:53:b2:df:92:66:
5f:72:b2:0e:d5:45:40:75:2b:bf:8b:d6:23:d8:9e:5e:af:83:
23:9b:91:74:7f:b5:fa:6e:65:d7:c6:c3:bb:8d:e8:d1:4e:c1:
82:f9:25:c4:a2:c2:80:c2:22:26:96:46:70:a0:b5:7e:30:ae:
54:f0:c6:22:3e:59:ad:a5:86:1f:0b:ed:d6:c2:f7:a2:18:aa:
7f:ee:e2:a5:05:c8:26:a3:93:34:76:6f:e1:9c:34:0b:1b:a8:
da:34:63:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:05:45 2026 by rpki-client