Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
File: eyqKwwKLcJEcthEf_aOi7-VYhi0.mft (raw, json)
Hash identifier: BirV8H927jKk+caBDpJrkTHkr3pfaNTgxXZq/D5yqLo=
Subject key identifier: BF:D3:6C:B8:6C:49:B3:8E:21:87:33:10:78:C9:EF:00:C1:D5:4D:FD
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 019F954AA55A149967E4857F6A7D3AE3579F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 18:02:04 +0000
Manifest this update: Fri 24 Jul 2026 18:02:04 +0000
Manifest next update: Sat 25 Jul 2026 18:02:04 +0000
Files and hashes: 1: QKSBmP3gzvhQzJUUPBNcCLWHKHM.roa (hash: KF0eVyAAEY8VGFQ1+W9WFibrhH45a/vXshpeDiUAhF0=)
2: eyqKwwKLcJEcthEf_aOi7-VYhi0.crl (hash: KP4ZgQCwipDeu6P+E3RP0oNDUMxeyR8iVe2axLV4iOk=)
3: ycdkqwKUZrrAqLHqkXN7UpQhhcY.roa (hash: eyPv8WnShqVImAMmncYrIFp/3E9eBCBd7q2DigUVUPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:a5:5a:14:99:67:e4:85:7f:6a:7d:3a:e3:57:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Jul 24 18:02:04 2026 GMT
Not After : Jul 25 18:02:04 2026 GMT
Subject: CN=bfd36cb86c49b38e2187331078c9ef00c1d54dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:34:c8:42:99:45:5d:04:bd:c2:86:ca:05:38:
dc:69:87:a1:58:1d:d2:0b:ec:27:71:16:f8:c7:96:
92:2c:89:cf:20:45:68:f9:4a:e5:fb:94:37:0e:b5:
62:5c:87:e6:b2:1c:48:a2:bb:52:13:9f:94:c7:bf:
61:b5:7f:e5:25:b8:73:93:0a:8a:79:e1:1a:5f:22:
f7:1d:17:6f:3f:68:ae:6e:aa:5f:2b:2b:2d:b4:a0:
20:5a:ee:43:0b:48:cf:bf:d7:e8:ae:0e:54:72:2b:
b7:8b:60:dd:bb:c0:2c:ef:df:10:ef:4d:81:c9:29:
67:ab:cf:37:88:3e:d5:a3:32:60:87:10:12:43:5d:
9b:9b:8a:79:56:15:fc:7e:22:7d:b5:c1:97:c8:f6:
12:de:dd:eb:cb:7e:76:e1:5d:fc:44:1f:f5:9f:09:
26:2a:79:fa:ef:e8:de:08:ac:47:b2:55:58:9b:8b:
09:e0:dd:ac:10:4d:69:55:ae:5a:03:b0:a1:0a:0a:
12:67:a8:78:d0:79:94:d7:72:09:0e:54:52:96:0b:
39:89:03:2a:55:ff:68:4f:fc:e8:f9:6c:23:01:13:
81:0e:0e:2e:7f:02:09:1e:dc:89:23:5d:ea:6a:f8:
b7:14:25:6a:60:9f:72:76:c0:51:40:01:af:79:7b:
b9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D3:6C:B8:6C:49:B3:8E:21:87:33:10:78:C9:EF:00:C1:D5:4D:FD
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:53:ad:a3:87:67:86:14:4b:d6:97:50:a9:97:85:e3:2e:86:
37:86:33:d5:5c:65:75:99:b4:f4:7f:fb:d5:6c:3c:b5:8e:10:
36:a4:19:14:7d:16:9b:f4:c4:99:f1:ad:74:db:01:18:6f:e5:
66:b9:4a:eb:7f:4c:a5:24:5c:4c:66:ce:22:ed:ab:e1:97:64:
4a:a2:09:e1:2f:ea:dd:66:29:83:ed:4a:4f:33:2b:a1:f5:8f:
26:51:1a:d6:67:4f:5c:3e:ae:89:84:48:4a:80:dd:ac:e3:2f:
76:b4:94:15:91:b5:a4:a0:7a:10:6d:39:68:f0:59:fc:15:6b:
ad:7e:bb:0f:14:22:01:42:4d:03:ef:44:af:56:0d:c6:58:bb:
87:bb:01:9a:68:55:2c:81:5a:bb:f0:84:4e:86:aa:53:d8:52:
5c:f1:d9:b1:62:be:a1:fb:49:32:3b:69:c7:5b:71:af:7d:c5:
96:ac:68:4a:a1:0c:b8:57:b3:64:55:4f:bd:88:92:71:04:91:
7d:b5:1a:e9:11:d7:99:a4:bb:82:5a:38:48:87:b7:06:59:0b:
92:85:cc:3e:4f:2e:fe:6d:2c:e1:ac:77:a1:7f:ec:07:38:92:
b8:88:ff:e7:df:88:8a:9d:30:8f:9f:c0:d6:f1:f6:fa:92:cc:
af:2c:25:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:49:53 2026 by rpki-client