Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
File: eC-fO7vgtR6p6bLpbGhodI-gePc.mft (raw, json)
Hash identifier: c6dgKUUnrbVKomqnqCnJcRCVDG19Xw0kLyvMv47pjqg=
Subject key identifier: BD:FC:EA:1E:E1:72:9D:BD:CE:9F:68:09:04:DA:C2:44:F0:38:EA:26
Authority key identifier: 78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7
Certificate issuer: /CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7
Certificate serial: 019D29298550E0EB922A5F9FDD5545657B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
Manifest number: 0AE5
Signing time: Thu 26 Mar 2026 08:01:20 +0000
Manifest this update: Thu 26 Mar 2026 08:01:20 +0000
Manifest next update: Fri 27 Mar 2026 08:01:20 +0000
Files and hashes: 1: OqblUTqMRXsZt8pZ5pRXhex6Zkg.roa (hash: XCOdkvew4k3OnvrnXuLCOWZ3jOmwLtq3F1NbKBNNtwQ=)
2: eC-fO7vgtR6p6bLpbGhodI-gePc.crl (hash: XBfZKhIHRkLEzoKEzjI+ns6Qv/IOKl6NCGJZ7docF8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:85:50:e0:eb:92:2a:5f:9f:dd:55:45:65:7b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7
Validity
Not Before: Mar 26 08:01:20 2026 GMT
Not After : Mar 27 08:01:20 2026 GMT
Subject: CN=bdfcea1ee1729dbdce9f680904dac244f038ea26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b4:58:5a:fe:b1:a2:64:3d:58:a2:4c:23:46:
ca:8c:b4:38:1c:2f:32:4e:ea:43:9e:b3:98:73:20:
c6:31:da:92:d1:24:43:dd:22:dd:67:76:92:19:d9:
f4:fa:98:92:01:79:64:7b:11:3f:bd:4b:6b:49:fb:
b9:8b:5a:75:28:48:9b:ac:fb:87:fb:77:73:5f:b4:
22:c5:76:df:b5:12:d5:8a:ea:a2:8f:3f:a9:83:91:
f4:dc:87:6b:2a:b5:d1:6d:be:7b:f9:d6:ad:c2:72:
78:6a:7a:55:9f:43:41:1d:b7:20:97:58:33:21:e8:
90:7b:f9:0b:d7:7a:88:f0:b9:cc:51:73:ff:f0:b2:
1c:9e:95:8b:36:65:de:0d:e4:8c:7b:7b:56:94:82:
03:5a:53:eb:f5:26:fb:cc:a7:21:f3:01:c1:89:1b:
9c:54:b2:0e:ff:64:1d:e7:a1:45:76:20:37:c4:43:
74:db:f8:65:12:7e:b6:eb:f0:3b:2d:44:8d:9e:35:
4c:a4:5f:56:b8:a3:f5:33:e2:1d:73:e0:cd:7b:08:
f5:8c:68:b2:b1:b0:62:68:ae:dc:bb:c9:70:4e:a2:
9b:7f:61:f2:19:b0:00:17:c7:cf:20:fe:36:ff:5b:
bd:42:52:ce:50:63:f0:c3:c1:b8:6e:f5:02:f5:76:
1c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FC:EA:1E:E1:72:9D:BD:CE:9F:68:09:04:DA:C2:44:F0:38:EA:26
X509v3 Authority Key Identifier:
keyid:78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5e:fa:9a:37:46:fc:34:dc:0b:07:1f:86:4f:87:19:19:ef:
df:ae:53:6e:39:f6:3c:86:1b:c5:2a:89:3b:4b:a1:d0:34:10:
12:4a:cd:13:23:cd:95:88:59:fc:01:72:b8:da:c0:53:82:4b:
27:8d:9c:98:5f:0c:e4:6b:ce:af:fe:56:41:2b:c8:53:89:1c:
a6:00:70:50:17:ea:f9:31:bc:ce:3c:63:a3:fb:89:d2:64:f5:
e3:91:a4:d0:cb:b8:c2:cd:4b:bf:bd:1e:5e:70:2a:0b:93:e2:
36:42:63:46:63:81:98:37:63:4f:f6:5b:23:43:d3:68:ba:85:
43:26:c3:9c:1e:75:c2:16:09:b4:d1:6f:6c:66:1e:74:b8:8c:
8a:d0:ab:9d:ed:f3:86:9b:97:57:78:7d:65:e5:22:d6:fb:63:
0a:3a:bb:82:49:51:41:e2:37:e5:bf:b0:eb:90:bd:73:ba:eb:
43:ec:94:77:e1:5f:eb:29:5a:fa:82:a6:05:18:04:ee:ea:cb:
af:c6:32:4f:f1:31:e3:77:f3:b5:90:44:8a:5a:5f:04:f4:f1:
ef:34:89:14:66:05:bc:06:21:f1:75:38:3b:15:62:a7:c1:bc:
7d:ae:22:6f:08:c0:db:af:64:61:be:22:8d:d7:93:3d:bd:e5:
fd:3b:b2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:49:16 2026 by rpki-client