Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
File: eyqKwwKLcJEcthEf_aOi7-VYhi0.mft (raw, json)
Hash identifier: pnJmVaAfuyhE/CIkeLiprX3Y70ZHOnyTApBMcHFttms=
Subject key identifier: BE:B3:D6:56:A7:8F:37:8E:C7:C3:2E:58:1F:CF:A6:96:90:3C:70:B4
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 019E20913FB95CA5E9F54BF94E8DD8A91ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 09:00:50 +0000
Manifest this update: Wed 13 May 2026 09:00:50 +0000
Manifest next update: Thu 14 May 2026 09:00:50 +0000
Files and hashes: 1: QKSBmP3gzvhQzJUUPBNcCLWHKHM.roa (hash: KF0eVyAAEY8VGFQ1+W9WFibrhH45a/vXshpeDiUAhF0=)
2: eyqKwwKLcJEcthEf_aOi7-VYhi0.crl (hash: MNViYoESKtnVUd4k3Hbpj3S4MeF9S0LAecYGUPAinrY=)
3: ycdkqwKUZrrAqLHqkXN7UpQhhcY.roa (hash: eyPv8WnShqVImAMmncYrIFp/3E9eBCBd7q2DigUVUPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:3f:b9:5c:a5:e9:f5:4b:f9:4e:8d:d8:a9:1e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: May 13 09:00:50 2026 GMT
Not After : May 14 09:00:50 2026 GMT
Subject: CN=beb3d656a78f378ec7c32e581fcfa696903c70b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:51:e8:4d:a6:dd:da:b7:9d:f4:b3:b4:ee:01:
b6:3d:68:40:b9:5d:93:9b:be:81:1e:50:91:45:73:
71:99:52:40:5f:e8:10:35:40:f4:0e:a8:65:58:8c:
76:eb:a6:3a:c9:09:ec:b1:46:af:7d:11:d8:03:fe:
81:b3:d7:cb:7a:fa:fc:d5:26:d6:41:be:3f:db:6f:
a0:af:84:28:b3:d2:d0:78:e6:95:fc:88:28:e6:60:
6c:6e:f6:f9:4c:fc:f9:93:72:65:d6:ab:a2:fe:96:
e0:e0:b6:be:83:e3:ad:f8:61:17:a2:9b:a1:53:4b:
4f:97:c5:b7:15:34:8a:3a:eb:6d:34:7b:99:7a:c8:
dc:9b:16:71:13:c5:2b:c9:97:72:56:8a:f0:af:fe:
d3:21:19:e3:2a:e6:0b:29:22:e1:e9:b5:92:78:8f:
cb:b0:07:40:5e:12:af:f7:c0:b3:a7:d5:e6:33:06:
ea:53:e4:e8:c8:27:e3:82:6a:f6:ce:b3:e8:0a:02:
8f:d2:dd:5c:8c:63:ed:28:06:b6:fb:f4:a4:41:e6:
bf:44:a7:3c:24:4e:c4:09:84:65:c3:52:91:32:f9:
23:89:63:2a:2a:2b:4d:af:b0:9d:ef:b7:77:27:49:
07:f1:ca:84:9d:6e:0a:a5:ca:c1:57:12:87:71:dc:
98:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B3:D6:56:A7:8F:37:8E:C7:C3:2E:58:1F:CF:A6:96:90:3C:70:B4
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8f:60:bd:3e:74:b1:d4:79:d2:ad:53:42:6c:2d:89:19:9a:
fd:f6:4d:67:27:c2:a7:ea:67:df:8a:a9:bc:22:92:80:d5:fa:
3e:ff:f0:45:46:19:85:08:48:c0:b0:4e:ca:77:60:54:2b:75:
69:70:bc:42:0e:3b:b4:36:5a:a4:bf:c9:06:cd:b8:95:5a:74:
3e:b7:72:9a:52:8e:5e:9f:bc:50:ae:04:eb:d7:6c:34:28:f2:
8f:a8:ab:20:f2:72:28:07:8f:08:9c:31:a5:c0:59:da:05:58:
be:72:e0:ac:ea:ef:88:fb:b8:fc:92:9a:7f:3f:81:8d:78:7b:
c8:94:50:73:ab:17:87:f4:32:fa:57:16:33:e4:ac:a5:2b:8f:
33:cc:1d:ba:14:94:81:46:24:d9:74:00:f1:53:00:99:6c:5d:
79:37:11:fe:54:0e:c3:36:74:f6:89:b9:46:df:d8:df:69:ae:
d6:bc:6e:ec:4b:4a:59:c1:35:1b:30:fb:24:f9:2b:2a:2b:d4:
4f:ad:f9:e6:b9:de:4c:ec:2a:f0:e3:78:24:19:83:e0:e7:d7:
26:de:59:25:b5:2a:db:3e:b2:61:67:05:c4:ad:89:b5:2a:bb:
b8:b8:fb:11:e1:fc:1b:f5:9d:b0:fe:77:ed:1b:6d:b7:ba:e0:
22:91:23:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:07:26 2026 by rpki-client