Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
File: eYvLVDKkXyWwQQOWerQDwp0NQwo.mft (raw, json)
Hash identifier: TNCXUdqpsvSQv+DTyoWKrCKywK6OQ/zQAKr0xED/c2U=
Subject key identifier: 4B:EC:08:F4:AD:F9:66:54:44:AD:6B:21:C5:FE:62:47:89:7F:66:F1
Authority key identifier: 79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A
Certificate issuer: /CN=798bcb5432a45f25b04103967ab403c29d0d430a
Certificate serial: 019D33E43042751EB5EDA75C8AFE31D06EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
Manifest number: 0F7A
Signing time: Sat 28 Mar 2026 10:01:25 +0000
Manifest this update: Sat 28 Mar 2026 10:01:25 +0000
Manifest next update: Sun 29 Mar 2026 10:01:25 +0000
Files and hashes: 1: dCyoKR5apw3K_fSnvb1rgkMrMws.roa (hash: DGTBczW2NPAlgw2GdKvgzlgm3Sxc4ppIF+D7Dpe6V40=)
2: eYvLVDKkXyWwQQOWerQDwp0NQwo.crl (hash: LNs+4LMoJ4kIj0lPmps5JtDQl78AdBIbCYp/hCdysuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e4:30:42:75:1e:b5:ed:a7:5c:8a:fe:31:d0:6e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798bcb5432a45f25b04103967ab403c29d0d430a
Validity
Not Before: Mar 28 10:01:25 2026 GMT
Not After : Mar 29 10:01:25 2026 GMT
Subject: CN=4bec08f4adf9665444ad6b21c5fe6247897f66f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:10:60:1e:c5:7f:b3:05:2c:20:76:44:3f:c1:
4b:1b:ad:78:f3:5e:bd:5b:f2:dc:b3:1f:fc:fe:29:
6f:d1:fa:97:46:43:c7:4c:11:5c:d1:74:65:53:fa:
d6:84:70:09:e9:d5:de:d1:3d:a8:d5:96:ac:d7:fe:
28:7e:99:11:50:6f:5b:49:81:d3:c1:bf:85:a6:51:
0b:a1:8f:3c:9c:d0:a1:79:6c:90:76:a9:8e:58:56:
88:93:8a:b7:65:25:12:d4:2c:94:ae:46:2a:81:be:
a2:5e:ac:c2:5f:90:a4:a9:ad:ff:18:15:4b:87:57:
d9:fc:18:c5:4f:74:15:ec:51:f0:13:9e:c6:79:f9:
06:98:80:18:f2:91:c0:08:15:b8:bc:11:c4:d5:59:
4f:59:27:c2:a8:3e:ed:01:84:9b:c8:1c:ad:e2:85:
3d:50:ea:9d:7c:f9:b2:8d:e6:bc:60:c8:f3:9d:8d:
09:e4:41:21:40:ea:1f:49:2b:23:73:c0:2d:e4:e9:
cd:ca:4a:b1:30:59:04:77:c3:2e:cd:bb:22:d4:92:
84:60:1a:a6:65:ca:f8:d6:2f:0f:db:28:22:89:60:
4a:d4:ea:fe:b6:cf:73:2f:96:45:5c:42:69:16:19:
17:36:b3:5e:e5:13:97:32:0b:73:82:96:f8:07:25:
38:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EC:08:F4:AD:F9:66:54:44:AD:6B:21:C5:FE:62:47:89:7F:66:F1
X509v3 Authority Key Identifier:
keyid:79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:73:8b:cc:b0:74:01:fc:8d:1e:31:dc:86:e1:c3:24:79:99:
ed:e1:b4:66:a4:b6:a4:de:7d:0f:42:d8:d6:4b:61:e7:50:96:
fe:44:33:c0:5c:85:80:fa:01:82:1c:f7:20:94:33:ee:09:84:
37:5e:ca:62:4a:9d:15:ff:cc:ec:9c:78:2d:21:5a:2c:fc:87:
2d:26:4a:82:63:80:f7:b0:ef:a2:34:31:ad:fd:a2:2a:dc:7c:
64:d4:91:3e:d0:5d:23:12:d0:79:51:74:0a:99:89:0e:a1:c2:
04:b8:6b:5b:22:9a:25:e6:66:9f:70:9d:17:4b:c0:bf:0c:10:
83:b6:43:9a:69:35:b9:aa:31:80:db:d1:29:62:90:be:dd:2a:
40:c4:3b:8a:91:9c:f1:6d:11:f6:e9:99:f0:fa:c3:89:ee:4d:
41:08:4f:f3:eb:f3:68:7b:0d:c3:18:da:fd:5e:88:55:27:50:
1e:ef:0a:16:cb:7f:ed:96:59:6b:fc:a9:81:59:f0:26:79:34:
f1:c8:9f:17:d2:a5:1b:a5:47:17:d9:1f:8b:cd:d2:2b:de:eb:
69:bc:20:53:45:cb:bf:2c:33:5e:1a:59:e2:31:45:4f:99:ba:
f4:15:5f:c4:a3:0a:52:2f:b5:71:8b:e2:73:90:f6:25:48:c5:
a1:14:c3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:35:05 2026 by rpki-client