Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
File: eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft (raw, json)
Hash identifier: VLJOpkHuiSnZgJaZ4HYYDnwU+sAcyb3EjFJY0sT+3wo=
Subject key identifier: 3B:BC:8E:72:A3:1B:86:A9:56:5B:E4:4C:E9:8E:30:FE:2F:53:36:32
Authority key identifier: 78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
Certificate issuer: /CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Certificate serial: 019F93C9707F97EEF59FB62D116B2D3035BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
Manifest number: 0A3A
Signing time: Fri 24 Jul 2026 11:01:19 +0000
Manifest this update: Fri 24 Jul 2026 11:01:19 +0000
Manifest next update: Sat 25 Jul 2026 11:01:19 +0000
Files and hashes: 1: 5VmOpi03r_fL6ZM9_FCqD-4ELvY.roa (hash: 4huAnYa6nby7innz6R7TqYphvP6rJYEBi+2SzImbtCI=)
2: 770u0l1B70bIL0OjL2bsRR1d2sY.roa (hash: uO5mw4nMU516BWnsv4GqL4pOVudc9WSSFB2GhY5zuAU=)
3: eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl (hash: b5RrUp74k/QLr6XVWDJcgCCYc9QpIbJ1n4DXS13QLl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:70:7f:97:ee:f5:9f:b6:2d:11:6b:2d:30:35:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Validity
Not Before: Jul 24 11:01:19 2026 GMT
Not After : Jul 25 11:01:19 2026 GMT
Subject: CN=3bbc8e72a31b86a9565be44ce98e30fe2f533632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:54:dd:3c:59:d4:80:0c:3f:e0:a6:39:23:
e9:f9:da:41:d4:5c:44:c2:d4:30:7a:5d:a5:90:91:
53:88:c0:d5:88:d6:78:1b:d1:17:02:67:af:b5:34:
b9:94:16:c3:79:8b:a2:3a:aa:66:4a:75:48:30:d7:
f3:5e:5c:8c:a0:cb:86:ae:47:60:c6:bb:16:c1:29:
f0:3e:5f:04:db:48:ce:62:d2:f2:40:ca:84:e1:cd:
4e:6a:ed:22:12:46:c3:98:60:1b:44:30:51:e3:3a:
5b:3a:f0:34:c0:22:be:fa:fc:a4:ac:9b:3b:b6:f6:
3e:0c:98:9c:a1:d6:2a:c4:c6:56:24:7b:3e:77:36:
be:5c:24:45:4c:56:9c:c2:01:4a:5d:70:b9:26:64:
52:99:93:1f:51:be:62:0d:fc:d8:06:19:85:58:3b:
48:85:2e:d0:14:26:fa:54:38:ca:7d:b3:d5:95:b1:
ca:f9:fb:07:f7:c8:64:3e:41:65:f3:96:12:cf:81:
1b:13:f5:d5:5b:e1:5b:90:08:33:ae:64:84:7f:81:
20:50:c5:cf:b6:59:c8:93:8e:e2:70:e3:2b:b0:7c:
68:2c:27:76:1e:4d:5f:69:11:fd:3f:7b:a1:d6:25:
67:87:64:af:40:e1:24:ee:0c:7b:27:7e:aa:8f:d7:
61:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BC:8E:72:A3:1B:86:A9:56:5B:E4:4C:E9:8E:30:FE:2F:53:36:32
X509v3 Authority Key Identifier:
keyid:78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b5:4a:f4:8e:1f:65:18:1e:a8:b5:b2:c3:b4:6a:c8:09:88:
88:f9:7b:06:6c:8c:aa:5e:6d:8c:d7:88:92:2b:f5:9f:02:ff:
ec:bf:2d:1f:ba:e1:0c:55:86:f2:d7:bd:c1:8a:6c:ce:13:db:
52:dc:d5:e0:38:ce:6d:82:08:2d:a1:15:33:58:ff:2a:e6:ba:
81:2f:84:6c:c0:5f:ac:7a:07:47:7c:a3:a3:3b:67:d7:dd:b8:
47:72:e2:ce:aa:8a:99:d7:89:78:e8:e8:73:be:3b:31:a4:0a:
37:05:d6:8c:d0:93:97:27:1d:9f:31:73:f5:81:70:e0:0f:fc:
52:39:78:a0:04:1c:5f:2a:ff:65:4a:eb:b3:e0:12:08:b1:06:
b8:15:75:ae:6c:84:b8:4f:c3:a7:0a:c5:c1:b7:51:39:fc:f3:
e2:a1:fd:77:8e:d6:0b:06:0a:8a:02:eb:a1:9d:f1:ce:e2:46:
17:15:b8:60:4b:5f:0d:35:18:d3:e7:72:df:3d:0e:2e:11:e1:
54:c3:d0:92:29:02:07:0a:6d:74:32:32:12:5c:1d:84:a0:eb:
77:14:87:d7:83:e8:2a:35:72:dd:31:62:88:0c:0d:fa:43:37:
1e:a7:86:9d:83:77:af:3c:00:fe:55:8f:2c:fa:62:b8:3c:29:
b2:3f:fe:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:22:31 2026 by rpki-client