Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.mft
File: EyMNpwIy9meEcw_WwSVRNbf40J8.mft (raw, json)
Hash identifier: MkioCq93//++tKjIpNhniYpBLBlV/5K9DdiCI9V1Xs0=
Subject key identifier: 3B:17:D9:AC:B1:B3:0C:27:D8:02:75:55:31:E8:34:3C:CA:24:13:30
Authority key identifier: 13:23:0D:A7:02:32:F6:67:84:73:0F:D6:C1:25:51:35:B7:F8:D0:9F
Certificate issuer: /CN=13230da70232f66784730fd6c1255135b7f8d09f
Certificate serial: 019D284DC1250B719250F4B8C6298A141D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EyMNpwIy9meEcw_WwSVRNbf40J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 04:01:17 +0000
Manifest this update: Thu 26 Mar 2026 04:01:17 +0000
Manifest next update: Fri 27 Mar 2026 04:01:17 +0000
Files and hashes: 1: 2anahPKNms3y710gencrWiHxjKo.roa (hash: VmazSTwgzYudVyadHVOYGFSp9iz4KiJPufdCdGzHpJ8=)
2: 37ovZ2hnSX5grcREq5tN4V1BfaQ.roa (hash: YrRPkZiMPn0MGs5vlmASyvzKOP5xZ6fhans4OhfAr2U=)
3: EyMNpwIy9meEcw_WwSVRNbf40J8.crl (hash: 7PPRCLp03qt7ulyFN0huP7MhZyA8WnrKl4NO/Tjg6ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EyMNpwIy9meEcw_WwSVRNbf40J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:c1:25:0b:71:92:50:f4:b8:c6:29:8a:14:1d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13230da70232f66784730fd6c1255135b7f8d09f
Validity
Not Before: Mar 26 04:01:17 2026 GMT
Not After : Mar 27 04:01:17 2026 GMT
Subject: CN=3b17d9acb1b30c27d802755531e8343cca241330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:41:79:4a:4f:78:df:2f:c1:e3:01:6a:60:1e:
de:39:6e:8f:a9:64:00:7c:ca:c0:2a:2d:1a:1e:d6:
53:9a:ed:67:95:cc:18:e5:85:72:d1:88:04:ae:c8:
d5:81:e5:78:87:53:9a:09:58:b7:16:d4:53:b3:26:
8b:5f:7f:b1:e9:00:91:0f:42:34:66:d8:77:d5:80:
b9:11:33:33:6c:3f:1f:56:9d:8c:be:81:c7:09:9d:
6c:0c:f6:fd:7d:b1:27:da:47:d3:5f:7a:f5:20:1d:
fc:63:f3:18:ed:16:7e:fb:da:8a:7f:8d:f5:4f:34:
6c:04:35:fc:de:96:05:2b:ec:a5:02:60:07:a5:33:
a8:ac:d4:de:76:10:3e:08:7e:fa:39:6f:b2:44:39:
6c:40:74:48:69:36:57:36:e0:76:53:fb:04:41:e4:
82:d0:a4:0b:d8:67:55:b1:40:7f:71:66:a0:7b:9e:
55:44:6c:07:68:df:88:dc:f0:5c:13:9a:5b:05:c9:
68:77:fd:9f:b3:72:18:78:17:57:1d:ef:9d:88:83:
5b:c9:75:31:4c:82:bb:f3:7b:f7:e8:06:7b:01:73:
00:8e:0c:0a:9a:16:73:c2:2d:58:a1:f1:3b:34:a9:
b7:bb:4e:54:8f:7a:49:3a:a5:1f:a6:e3:5a:24:2c:
c3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:17:D9:AC:B1:B3:0C:27:D8:02:75:55:31:E8:34:3C:CA:24:13:30
X509v3 Authority Key Identifier:
keyid:13:23:0D:A7:02:32:F6:67:84:73:0F:D6:C1:25:51:35:B7:F8:D0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyMNpwIy9meEcw_WwSVRNbf40J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:30:14:81:3c:6d:5a:4c:c0:58:86:5a:01:d3:9b:50:68:2b:
79:ec:7b:ee:0b:8a:0c:07:77:38:00:ed:5f:3f:31:3a:39:35:
7f:3e:31:15:7e:d3:25:c5:84:2b:80:b2:03:ce:e7:9c:69:ae:
f3:ee:95:7e:af:2d:97:8f:79:16:78:9b:5c:6d:eb:25:6c:2b:
9d:ed:c2:75:b9:01:c5:b1:2e:1e:c7:e2:cb:0f:71:c8:a9:4d:
b2:a9:26:59:42:8a:3f:50:30:a4:10:61:8f:f3:7c:b1:39:1a:
70:26:14:fb:d2:b9:61:50:91:f3:d6:48:ca:73:49:6b:57:63:
b4:c3:39:71:23:c7:e7:13:1b:e5:06:57:17:bc:27:99:ae:1d:
e7:b4:28:c9:22:50:7a:3e:ea:c1:8e:3c:31:8d:b6:87:6b:af:
0f:6a:96:8b:17:99:a4:51:61:9f:fa:cf:26:68:66:fc:6b:75:
6e:0e:3e:90:dd:a2:e2:83:b4:03:fb:66:34:dc:90:5c:67:12:
61:ac:9c:85:ed:58:f7:e8:11:64:16:a7:99:ce:88:30:e3:5c:
44:06:90:86:99:5a:ce:04:e6:6f:e4:0f:77:f0:2e:72:8c:c7:
d8:1d:86:2d:50:4e:5a:a6:21:8b:59:38:28:41:80:13:6b:b7:
ad:0e:a3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:45 2026 by rpki-client