Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
File: eNY2xQXVavQqQUwWfVJAfTVrPQs.mft (raw, json)
Hash identifier: zQCRyKkoU/kjztu1PelP9vvZ8Jnr9XZWmdodVLdLf0o=
Subject key identifier: 03:41:A3:D7:B0:5A:9F:67:A9:B7:DC:4C:8D:5A:B0:BB:4B:5E:93:1E
Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
Certificate issuer: /CN=78d636c505d56af42a414c167d52407d356b3d0b
Certificate serial: 019D2A7235D0D86041E44947C138D78A9D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 14:00:20 +0000
Manifest this update: Thu 26 Mar 2026 14:00:20 +0000
Manifest next update: Fri 27 Mar 2026 14:00:20 +0000
Files and hashes: 1: 91m9d-4rp7TRVtPcYvV9NGes_jg.roa (hash: I0D8Damt//4B0Kf8Q3SX0Wwm5LPekD0IgYEQxvGqNNI=)
2: eNY2xQXVavQqQUwWfVJAfTVrPQs.crl (hash: +UYrS+DRFvnnZV8UFd9d/vcfiXZ2qb2ZQBMibFlIVbc=)
3: zHOXRdXkiM-RbCdgutluwx22gJ8.roa (hash: ddTQ3xyy/qh9SFlJgrOiIvTTzcQtTPf5+YJxupFgPas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:35:d0:d8:60:41:e4:49:47:c1:38:d7:8a:9d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b
Validity
Not Before: Mar 26 14:00:20 2026 GMT
Not After : Mar 27 14:00:20 2026 GMT
Subject: CN=0341a3d7b05a9f67a9b7dc4c8d5ab0bb4b5e931e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:dd:46:0c:91:34:ad:1c:c7:91:f8:9a:43:
9b:ce:0a:c9:bc:e9:ef:6a:6a:49:69:31:33:36:7f:
22:0e:72:8b:91:83:c2:76:56:1a:1c:de:7f:0e:ca:
d4:5e:cd:3b:a5:49:14:7b:88:ba:36:b9:7c:17:05:
78:79:64:85:6e:ff:4a:09:d1:ff:38:f6:56:05:20:
e9:30:c8:8a:d9:83:23:64:0d:6a:9d:0a:af:1b:17:
c1:2f:b8:65:3c:be:6e:a5:e2:00:68:30:cf:dc:84:
2b:c7:36:5e:e2:37:54:0c:23:89:df:42:93:40:c7:
46:3f:23:21:fd:1e:17:03:56:fc:bb:b2:5a:af:15:
3e:53:08:b5:85:ba:54:48:a3:85:08:a4:a3:30:86:
88:4d:25:f8:d5:6e:73:7e:d8:71:82:f9:a1:50:5e:
15:5c:b3:04:6d:a5:6d:fb:c6:96:a1:fb:60:61:eb:
c1:f7:3d:c3:01:d3:9a:d0:0e:25:d7:f9:ca:4c:36:
a8:37:20:60:d3:b7:81:15:34:77:3c:38:d0:47:a3:
93:26:28:f7:7e:b9:d0:d7:36:af:51:1f:a5:00:71:
08:4f:3d:f7:b4:71:78:c8:9b:d2:d6:d2:57:b1:3a:
04:84:02:82:22:49:42:19:8b:f4:7f:94:6c:82:16:
83:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:41:A3:D7:B0:5A:9F:67:A9:B7:DC:4C:8D:5A:B0:BB:4B:5E:93:1E
X509v3 Authority Key Identifier:
keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c0:e4:27:31:c3:9b:7c:23:6c:6f:92:9a:0d:bf:d9:f2:8b:
83:51:c8:b4:3b:b3:7f:5d:43:7e:ba:38:29:71:85:60:5e:00:
c6:2f:fb:6e:7d:9b:41:28:b4:be:89:bd:67:95:9d:b0:77:13:
7a:66:56:24:51:7c:8e:87:db:d3:3f:3b:e0:89:42:99:62:33:
01:a9:84:72:3b:94:6a:b3:b9:a7:0d:ac:5b:5c:ff:d9:ef:ee:
0b:15:7e:a3:63:12:51:2b:4c:69:04:57:ab:16:e1:72:a7:8c:
bd:a3:6b:29:3b:f5:7c:71:2d:86:f3:be:4a:bb:79:c7:b8:e9:
d5:e6:96:5f:f7:7e:86:98:23:de:00:e4:60:2a:a1:8a:cf:d1:
7c:2c:0d:2a:30:09:f5:5b:4d:82:9d:ac:94:f0:2e:b5:d8:25:
82:2d:b1:1e:a9:df:51:d3:8c:06:59:21:b3:ab:6b:a2:c2:70:
01:75:9a:86:23:9b:34:16:5f:d2:f7:67:14:4e:b7:00:d1:d0:
9c:75:db:4c:f0:13:7e:27:43:51:a0:2e:ff:ff:c5:b7:42:32:
16:3d:1c:d1:06:97:f0:3e:1a:97:5f:57:e8:ce:8f:b8:4e:35:
e9:05:f9:1c:63:48:76:a3:34:d0:21:9d:d4:1c:e2:a6:ba:09:
6c:59:76:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:24:55 2026 by rpki-client