Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
File: eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft (raw, json)
Hash identifier: oCUC+T5o97/2BW2bAzZkMjDbEoHut4R2+RRZxxW7OrU=
Subject key identifier: 37:CF:3F:10:75:E6:5B:F0:4D:E1:39:51:CD:4E:99:6E:84:65:7C:CC
Authority key identifier: 79:E3:76:C8:E4:90:D2:86:20:C2:4F:97:E2:B9:33:D6:2F:D0:23:8B
Certificate issuer: /CN=79e376c8e490d28620c24f97e2b933d62fd0238b
Certificate serial: 019D2B177A179B293A35DC04E20A5A15FAD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
Manifest number: 09DC
Signing time: Thu 26 Mar 2026 17:00:51 +0000
Manifest this update: Thu 26 Mar 2026 17:00:51 +0000
Manifest next update: Fri 27 Mar 2026 17:00:51 +0000
Files and hashes: 1: eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl (hash: EOq7rHavqUC5QRyD+gFsUnnzycxuv0jTzW/r7XTMprk=)
2: kSFjelNK2nrw1yJcIllugBR2YRw.roa (hash: qC1YqVbi0emgXtAjk78XAWNuJjURPxEoZ1zs9JXTtbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:7a:17:9b:29:3a:35:dc:04:e2:0a:5a:15:fa:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79e376c8e490d28620c24f97e2b933d62fd0238b
Validity
Not Before: Mar 26 17:00:51 2026 GMT
Not After : Mar 27 17:00:51 2026 GMT
Subject: CN=37cf3f1075e65bf04de13951cd4e996e84657ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bd:d2:d8:3c:b3:3f:15:1d:da:9d:79:ed:4e:
d1:54:e1:ef:22:12:3e:c1:90:e5:9e:1b:aa:33:8f:
86:27:b6:91:74:25:b2:f7:ff:aa:de:d5:7f:da:b0:
44:10:b5:6f:2f:c4:0a:9a:f9:93:82:1c:db:b8:9f:
e6:db:bc:6d:b6:8e:f9:17:b2:b2:c8:09:a1:c8:d0:
34:a8:05:3e:b8:10:54:42:45:e1:1d:2b:12:45:e4:
19:9d:fc:f5:77:98:11:2b:56:9f:ca:72:0b:da:e0:
c7:89:2c:a7:06:06:e8:be:e5:b0:da:68:cd:99:93:
97:93:17:bb:2c:76:cc:42:ec:7a:6b:93:b0:62:a2:
71:e7:eb:b7:ae:b0:d6:ca:12:f0:94:d1:13:02:76:
38:c8:ed:84:4b:07:0b:76:36:20:6a:df:e7:61:0b:
d1:9f:32:5b:35:20:1d:cb:04:f6:4b:66:73:3f:58:
d3:82:76:f6:94:97:63:17:d5:38:64:87:90:2a:c5:
70:69:c5:78:e9:4a:85:28:ef:e6:1b:bb:2e:0c:d7:
d7:47:c8:1e:09:22:66:b0:7d:a1:60:79:21:e9:fe:
f9:00:8e:01:14:85:00:b6:af:41:52:38:49:b1:e8:
73:5e:6d:79:c7:f2:19:6f:f1:c4:d9:25:28:3d:d4:
0c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CF:3F:10:75:E6:5B:F0:4D:E1:39:51:CD:4E:99:6E:84:65:7C:CC
X509v3 Authority Key Identifier:
keyid:79:E3:76:C8:E4:90:D2:86:20:C2:4F:97:E2:B9:33:D6:2F:D0:23:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d1:ff:01:05:d4:30:38:87:65:f2:11:93:d7:94:cd:7d:f4:
da:4a:aa:0f:44:04:8d:b2:95:21:e4:4b:0f:21:d1:9d:33:83:
03:bf:1c:16:28:52:a2:6c:44:aa:4c:14:62:34:7b:0b:1a:39:
04:78:03:b1:a0:85:7f:40:48:dd:a9:d0:68:eb:c2:9f:cb:1f:
90:9a:fa:41:1f:33:5f:a6:83:6d:8f:62:0e:97:8b:73:59:2e:
aa:a4:1c:65:e9:d5:c3:bf:52:0a:1f:bc:06:14:c0:ee:8c:d8:
9e:74:c7:25:1b:10:6d:45:19:91:6a:1d:e9:5e:91:0c:54:eb:
f7:36:91:96:4f:69:66:09:57:d8:35:50:08:02:34:d0:6c:b5:
9b:0a:88:e9:cd:22:45:2c:1a:a1:7c:71:d9:db:4f:f4:f6:d6:
54:be:f1:cd:c7:35:ab:94:7c:43:d8:bb:4e:02:36:00:89:3a:
98:9a:68:91:82:76:88:b9:37:9b:ad:e2:b3:33:47:fa:65:d7:
0b:6e:f3:a6:03:1e:13:13:c6:40:69:23:32:4b:0a:39:16:8e:
49:84:22:c7:3a:e9:fa:0a:58:7d:2f:2d:67:73:d7:c0:48:72:
38:20:d3:3f:d8:57:83:0f:88:34:6a:e2:73:7a:62:d5:a4:7b:
5d:44:8f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:03:33 2026 by rpki-client