Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
File: EghcVAwRT8iVegJQu0n0hLdDV7k.mft (raw, json)
Hash identifier: OxGIdOB/0m/LoMW/52+y7CNRHBNZ86MulNoAiNEMxqg=
Subject key identifier: C3:95:14:01:2D:4A:79:23:BA:85:D9:CF:A8:F7:9F:97:F1:66:2C:AA
Authority key identifier: 12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9
Certificate issuer: /CN=12085c540c114fc8957a0250bb49f484b74357b9
Certificate serial: 019D2695F02397F4D875ADAE82ACA674C9C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
Manifest number: 0A0E
Signing time: Wed 25 Mar 2026 20:00:53 +0000
Manifest this update: Wed 25 Mar 2026 20:00:53 +0000
Manifest next update: Thu 26 Mar 2026 20:00:53 +0000
Files and hashes: 1: EghcVAwRT8iVegJQu0n0hLdDV7k.crl (hash: gx0sDYzUee06NgvV4MNYnXseGDCYlpipA8gEBReZE7E=)
2: ygqyotocEDdtoHHhWJzx1G-yxq8.roa (hash: HyJom2GJVsUQou508bUlOx3xP/oj3d9zeLR3dffhdIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:f0:23:97:f4:d8:75:ad:ae:82:ac:a6:74:c9:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12085c540c114fc8957a0250bb49f484b74357b9
Validity
Not Before: Mar 25 20:00:53 2026 GMT
Not After : Mar 26 20:00:53 2026 GMT
Subject: CN=c39514012d4a7923ba85d9cfa8f79f97f1662caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:23:3c:a0:31:3f:44:e8:8b:c0:12:bf:f5:05:
7e:b6:83:e5:48:e7:d6:de:2e:4c:37:a1:d2:d9:3a:
5b:a3:0e:55:41:b4:58:35:73:4b:11:0c:b0:13:5e:
a5:36:98:bc:ab:ff:bf:4a:78:9c:bc:6a:9a:42:20:
0b:00:ae:9a:a4:29:32:fb:0c:b5:0e:98:b5:bb:7f:
b6:f9:82:c1:51:6a:68:5b:8b:6c:de:62:37:10:05:
dc:7e:b7:b7:44:19:56:46:4d:15:68:45:04:8f:9f:
d3:bd:d6:63:1b:d9:7c:f6:b1:8d:77:f0:fd:13:e3:
2d:b5:68:f2:5d:4d:ff:f1:4b:ee:d8:ed:b8:2f:d0:
33:7a:28:db:07:24:03:f8:ee:c4:42:34:3d:31:19:
a9:8b:de:1b:84:73:11:e6:66:3f:b1:0d:9c:70:6c:
f1:e0:ac:31:fb:18:8a:65:93:79:e2:fb:db:75:a1:
07:7d:60:5e:2c:d3:69:4a:6e:30:c5:0d:dd:d0:9d:
7a:8d:21:a4:6b:cd:d5:6e:15:32:75:90:3d:87:55:
d2:7a:63:41:47:9c:a2:a0:4e:6a:c5:2d:3a:ef:f1:
3f:b2:20:bb:6f:d9:9a:55:21:b8:02:ef:fd:1f:88:
04:52:01:6e:6f:2f:e0:45:f2:95:f1:ac:03:14:cf:
f4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:95:14:01:2D:4A:79:23:BA:85:D9:CF:A8:F7:9F:97:F1:66:2C:AA
X509v3 Authority Key Identifier:
keyid:12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:6f:4b:8d:bb:78:5f:0f:fe:54:e4:89:29:99:91:cd:60:fb:
cb:e7:ae:a5:8e:fd:fd:e1:00:85:0e:e9:ac:dd:e7:26:d6:ad:
1e:89:cd:42:4f:0d:cc:57:ab:c5:73:96:6a:02:d8:18:61:01:
cb:b3:91:f4:f0:41:69:bd:95:ed:85:c7:6e:2e:62:57:69:ff:
59:26:86:a0:51:b8:e3:12:85:05:9f:a7:28:e9:52:3b:68:b3:
27:00:69:43:f8:4f:81:b4:b7:59:90:c4:3d:f2:2f:89:6a:28:
42:e3:aa:e7:71:45:4c:10:87:12:e9:78:61:79:cf:2a:60:61:
e2:fb:c1:b8:39:8e:fe:02:e0:df:a8:e3:85:8d:9b:af:4f:42:
fe:12:fc:b1:91:97:dc:80:fd:44:fe:98:a6:d5:db:62:c1:19:
8e:db:7d:7e:8a:ff:31:c4:1c:af:7e:a4:6d:14:55:18:1e:5a:
2e:12:5b:9b:93:a5:c4:f5:19:d1:8f:0e:25:78:db:57:e6:b3:
cd:ae:c9:60:8a:60:fd:98:88:c0:b3:bb:66:84:fc:10:da:ec:
b4:cf:e2:6e:ab:0a:70:09:40:bc:ce:89:de:9f:02:09:cc:1f:
5a:9d:7c:0c:2e:50:af:9c:dc:87:f6:61:d2:16:cd:c3:9c:73:
98:8d:2d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:23 2026 by rpki-client