Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
File: eYuFtR4z3wxpTb13vIwro-q01Rk.mft (raw, json)
Hash identifier: JZ89hWf9zSGl4pEU1b9T9Xpsx918GBy82HGGs9AMYpc=
Subject key identifier: BA:22:E2:8C:06:99:99:0F:9C:93:88:5C:0B:A3:2F:C7:4A:90:46:BD
Authority key identifier: 79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19
Certificate issuer: /CN=798b85b51e33df0c694dbd77bc8c2ba3eab4d519
Certificate serial: 019D25F20F81F032F2578D6FD3989ED358AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 17:01:53 +0000
Manifest this update: Wed 25 Mar 2026 17:01:53 +0000
Manifest next update: Thu 26 Mar 2026 17:01:53 +0000
Files and hashes: 1: YKCft9HN6Pst9hK3MaLfhUqHma8.roa (hash: Iaq8AqqZdxk3lIXgrLTs4UJ8UF+Xl1Tj1di8fJpanws=)
2: eYuFtR4z3wxpTb13vIwro-q01Rk.crl (hash: z3TyjeV33izquX3dykLRVPiSV2gs3JulYS8c7k+5soo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:0f:81:f0:32:f2:57:8d:6f:d3:98:9e:d3:58:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798b85b51e33df0c694dbd77bc8c2ba3eab4d519
Validity
Not Before: Mar 25 17:01:53 2026 GMT
Not After : Mar 26 17:01:53 2026 GMT
Subject: CN=ba22e28c0699990f9c93885c0ba32fc74a9046bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ee:3b:6d:c8:a0:ee:cb:aa:9d:52:ef:fb:a8:
f6:7b:e7:33:06:fd:66:6e:0b:50:69:93:37:38:5e:
03:5f:67:62:01:05:3e:23:c3:e9:30:35:e7:1b:be:
e5:68:ca:27:c0:4a:c9:7b:26:8e:5a:b7:4d:8c:34:
51:e4:8c:2b:6d:b7:52:ed:80:5d:e4:d5:0a:04:d3:
d6:ef:66:83:33:e3:41:39:13:89:7d:ae:c3:94:ce:
4e:be:f7:58:6d:13:de:3e:c1:b8:25:af:ff:f1:15:
d2:4c:39:5d:9c:6e:6d:4b:48:5a:be:bf:e2:1a:74:
11:45:51:28:64:aa:d2:33:b9:ba:d9:c0:75:02:47:
c5:21:94:5d:0f:77:a2:fd:c4:9d:5c:a1:99:d3:6f:
02:27:64:8c:ea:a0:17:81:0e:9a:3b:12:a5:66:9a:
be:0a:c2:b2:74:a2:7f:71:0a:91:20:43:8e:61:b2:
9f:ef:db:7a:42:9c:e8:b3:16:22:bf:2e:15:a2:c2:
a9:23:09:1d:b7:fe:82:2e:c5:0f:0b:ba:c1:ec:a3:
d5:a7:59:2a:19:ad:38:7f:d3:7a:d3:fd:d0:59:92:
a8:78:ee:9f:e2:6e:b7:aa:a3:1d:92:54:f2:83:43:
77:13:9d:d1:79:45:a0:45:65:ff:fb:a6:1c:82:6d:
a3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:22:E2:8C:06:99:99:0F:9C:93:88:5C:0B:A3:2F:C7:4A:90:46:BD
X509v3 Authority Key Identifier:
keyid:79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:24:9a:d0:ce:f2:4e:ec:38:d7:10:b0:e8:44:ff:a7:fa:75:
c9:41:7b:f2:fa:7b:b6:14:0d:5e:7a:c2:84:42:8e:0b:75:81:
db:af:06:03:ae:77:d0:d1:21:db:61:de:21:db:4e:d9:9e:c1:
38:ec:d1:f8:6e:0a:56:e7:8e:af:4d:81:9e:31:99:0a:17:d7:
7e:20:82:67:29:b3:e1:c1:ce:0a:47:a0:87:79:63:ff:2e:43:
9f:38:05:2c:b4:3f:5a:05:3e:db:59:ee:2b:d9:96:42:56:af:
cf:b1:db:5a:aa:a7:7f:37:80:35:2c:4d:7b:99:f7:a5:31:d4:
94:b8:4a:54:4c:20:75:23:25:8c:50:04:f3:c7:c0:e6:66:f5:
99:ca:0f:e2:25:d3:64:68:45:a1:31:76:4f:0b:5a:68:89:63:
73:59:49:db:32:a8:4b:d9:fb:94:65:d6:9f:9d:3a:6f:a0:0d:
4d:82:06:ae:37:e9:5b:3e:b8:d2:84:cf:8c:44:ff:65:ec:44:
20:69:0e:7c:fb:dd:65:c2:5f:7d:98:f1:3c:39:1b:e0:d7:88:
a6:d9:8e:63:ad:7f:0e:0d:c8:ff:dc:6c:1d:90:5a:10:5a:58:
8c:30:0b:4a:ac:80:e6:6b:9f:c9:f8:7a:87:8d:34:fd:65:c9:
2b:ff:64:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:47:59 2026 by rpki-client