Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
File: eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft (raw, json)
Hash identifier: Jg9M6HEEyY4LMTeb5a7J95cFxCr0ucTKkQvjOzlVSeo=
Subject key identifier: 2F:D7:EE:60:57:DA:E1:E9:38:CD:30:63:93:44:90:E2:11:9F:4E:5A
Authority key identifier: 78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6
Certificate issuer: /CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6
Certificate serial: 019D273A994CBAF1103C478151FC8B2D9B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
Manifest number: 027A
Signing time: Wed 25 Mar 2026 23:00:44 +0000
Manifest this update: Wed 25 Mar 2026 23:00:44 +0000
Manifest next update: Thu 26 Mar 2026 23:00:44 +0000
Files and hashes: 1: TQNI8cQSDUVw34W6ZTwGYZVMqXk.roa (hash: Awh5KrfX+HKhRUgeqGTHvrRVEc6ZCfXov7wUkGa6uMc=)
2: eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl (hash: bpmgP2xOCAhQd39Muctiw4Fh6KZOduei2fqX0wSkAwE=)
3: vcYfbPfGVs0aMYKOlxwdnUc65Uc.roa (hash: YMNkeJBfcEDciUVO4DqSW7poLvVvmF0rwrSlq2tpwWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:99:4c:ba:f1:10:3c:47:81:51:fc:8b:2d:9b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6
Validity
Not Before: Mar 25 23:00:44 2026 GMT
Not After : Mar 26 23:00:44 2026 GMT
Subject: CN=2fd7ee6057dae1e938cd3063934490e2119f4e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bb:25:1d:a6:28:b9:45:d5:84:3b:35:55:bd:
5f:55:3c:f1:ca:83:53:b7:b0:33:42:49:b4:52:3c:
94:56:9c:c0:2d:38:fa:1e:e8:49:60:bc:74:4d:c1:
93:ef:6f:80:44:04:13:75:67:36:f9:f3:dd:67:26:
3a:d8:fc:87:2d:cf:98:6b:bd:90:64:c3:d9:c2:e4:
3a:c2:75:d0:fe:ae:3b:01:29:8a:41:b5:89:89:0b:
a5:24:ee:fc:3a:a1:4c:23:17:bf:be:33:a1:f9:ec:
b7:94:24:93:30:53:a0:72:10:55:41:fb:f7:9c:56:
10:97:79:48:ed:ee:52:81:64:f5:2f:d6:a3:c9:66:
43:0d:bd:35:58:fa:30:21:8d:f9:39:77:f3:08:f3:
57:af:9b:73:fa:2b:5c:88:2c:bd:6d:6c:31:4b:34:
9a:c3:16:59:7b:ad:b1:52:ec:f9:7d:14:fb:14:8b:
38:e6:22:5c:f9:9c:1e:15:d0:7a:f0:68:7c:d0:8d:
32:85:40:67:39:11:fe:41:c4:ab:53:e9:80:8a:10:
1e:2c:cb:21:dd:6b:0f:14:31:6e:99:e2:e5:e6:59:
1b:d1:8a:b0:fd:26:42:2a:ee:f2:81:4d:62:02:6d:
51:de:c4:57:58:f3:45:9b:9a:40:62:10:f4:5a:49:
5f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D7:EE:60:57:DA:E1:E9:38:CD:30:63:93:44:90:E2:11:9F:4E:5A
X509v3 Authority Key Identifier:
keyid:78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a7:48:49:b5:5e:ec:53:c3:aa:0a:93:d9:c2:d9:5f:7b:e1:
b9:f9:14:4f:52:5d:f6:b1:ab:72:68:04:76:c5:13:13:7f:3d:
e1:c4:aa:99:92:4c:1f:be:3c:d2:c9:38:70:34:87:a9:66:e7:
c2:84:6a:cc:d1:11:f2:73:ca:12:4e:c7:d4:27:3a:e8:5b:33:
02:2e:0b:e1:5b:67:91:ab:79:84:e1:b6:80:65:2a:17:15:15:
fc:be:e6:1c:3c:a6:31:67:b4:22:96:9c:c3:e5:5f:e8:19:c9:
38:ca:da:73:6f:d7:97:10:3d:54:d0:be:42:7b:52:f3:f9:7b:
c9:7e:e0:55:b6:06:2a:15:a0:48:13:66:ee:8a:12:e7:75:83:
32:96:33:4e:ec:29:59:c9:19:b5:8a:b4:2a:75:5e:5f:e7:7f:
0b:56:1c:5b:a6:46:53:51:e5:8f:56:4e:af:ce:d2:56:d6:a5:
21:cd:54:c5:5c:2d:56:c0:64:8d:30:ab:d6:98:73:b0:04:33:
5d:d0:b3:9a:ad:e6:e5:6c:6c:f2:fc:2d:1f:73:da:64:46:3d:
68:b9:1d:b3:a8:07:26:dc:64:87:e2:82:94:11:47:8c:5f:a5:
aa:1b:5e:e5:d7:4f:aa:86:15:62:59:f8:66:46:31:6d:57:c8:
eb:bd:03:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:15:19 2026 by rpki-client