Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
File: eWnEvYdneAvsFhoq1hKic128q_0.mft (raw, json)
Hash identifier: +F92hhxdp1vAF1wSrcXBO69YQ87hZgl5PgR6ZEGKigs=
Subject key identifier: 12:20:D2:76:C0:64:CF:4A:7A:BB:F6:65:A8:06:70:06:5B:74:EE:E9
Authority key identifier: 79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
Certificate issuer: /CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Certificate serial: 019D27E022AE9DFE51EBD715C9F179D43B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
Manifest number: 1362
Signing time: Thu 26 Mar 2026 02:01:33 +0000
Manifest this update: Thu 26 Mar 2026 02:01:33 +0000
Manifest next update: Fri 27 Mar 2026 02:01:33 +0000
Files and hashes: 1: 3L8-SFiTWU4fVJqNJH9oAV2l1y4.roa (hash: xttM0UfqMX6deZWNGbRNOdSazxn0Mbttw4sD7m2GsmU=)
2: eWnEvYdneAvsFhoq1hKic128q_0.crl (hash: eUbeMrXQOflShpKaNM491Adl9Lt8axNHh/4LeRLJOM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:22:ae:9d:fe:51:eb:d7:15:c9:f1:79:d4:3b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Validity
Not Before: Mar 26 02:01:33 2026 GMT
Not After : Mar 27 02:01:33 2026 GMT
Subject: CN=1220d276c064cf4a7abbf665a80670065b74eee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:96:d2:96:a0:23:8a:69:72:bb:3a:ae:f3:
98:8a:b6:bb:4e:10:89:c0:fa:f3:d2:5e:e7:16:8f:
86:ed:c0:91:c0:d7:f7:98:5a:86:1e:84:31:d5:d6:
79:15:96:10:36:15:85:a2:3a:e0:e5:ec:aa:36:0b:
8a:ed:53:37:70:0d:33:d7:52:cd:b9:d0:f7:78:03:
21:05:bc:6d:a0:83:2c:df:cb:8e:dd:60:9e:5a:f1:
a4:3d:1f:86:9c:93:fb:e7:df:35:98:c6:a5:ae:1a:
de:5e:e9:34:13:2f:86:11:5b:04:05:53:15:31:ad:
cd:a5:01:af:20:6d:ea:10:17:05:bf:5e:52:cd:4b:
b4:4d:b2:23:e5:e2:46:95:7b:c5:a2:f0:8f:fd:9c:
1e:e3:36:98:37:66:af:3c:d0:c9:ca:70:50:b5:87:
35:84:78:fa:96:01:14:66:db:39:76:51:70:2d:76:
f6:35:5d:74:11:b7:25:44:53:c7:5e:6b:13:3c:58:
d1:c9:82:cb:47:fb:ac:85:f4:43:9f:fb:55:9f:0a:
7f:0c:51:3b:cb:99:00:33:5c:4c:67:66:10:26:1a:
6b:15:d3:ea:9a:b1:3e:f2:76:2e:96:33:19:b2:0b:
a5:74:ef:55:10:52:6b:29:6f:b1:9d:13:05:1e:f7:
36:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:20:D2:76:C0:64:CF:4A:7A:BB:F6:65:A8:06:70:06:5B:74:EE:E9
X509v3 Authority Key Identifier:
keyid:79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9f:4a:ca:b5:58:88:01:5c:c5:d0:2e:62:bc:53:93:24:d7:
22:26:1f:bd:e1:42:f0:66:1b:c2:3c:05:52:f6:76:5c:65:f6:
f4:0b:38:be:95:5c:6d:e1:56:a2:d4:63:a3:85:24:74:84:f3:
a9:d8:78:9f:79:1a:66:1c:44:ee:8d:26:39:39:8e:c8:5e:08:
05:62:6a:eb:71:c5:32:47:c8:54:a8:74:24:da:d8:5a:68:45:
7e:00:32:e0:fd:1e:30:43:2a:e5:23:cb:c5:cf:44:f3:7e:5f:
c4:68:03:4e:b6:e9:01:11:a7:e4:0a:76:77:13:3f:b8:24:7b:
0f:c8:6e:7b:7a:11:ce:c1:4d:a7:3b:86:d0:8d:54:97:03:5b:
93:d7:ad:80:fb:99:c4:a5:13:f8:d0:62:2b:c8:10:91:95:ee:
4e:f7:27:27:b5:e8:42:3e:6c:20:43:77:5c:8b:63:33:17:15:
a1:9c:75:2d:8c:ff:4a:23:fc:e1:6e:a3:a6:09:fa:84:9f:97:
24:2b:46:40:05:ce:f1:66:5a:9f:9f:43:fe:87:0c:30:d1:14:
eb:1e:45:a6:4d:08:ee:02:09:5d:00:2a:d6:9f:8c:d4:2a:bb:
b7:72:8a:94:91:fd:7f:c9:17:8f:f2:40:f8:9a:7a:42:48:bd:
bf:16:57:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:24 2026 by rpki-client