Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
File: eQ3IFFdVEBrMCIiqALsouZW5xPE.mft (raw, json)
Hash identifier: ARuJg67vGRKUSEW0aQyvkx9ximbBNwWLh/TNowthgpQ=
Subject key identifier: 43:32:9C:16:D8:06:AC:45:F9:B0:5F:75:59:13:14:FA:6A:18:64:F1
Authority key identifier: 79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
Certificate issuer: /CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Certificate serial: 019D33760084D8B3543292A7981FB1B17CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
Manifest number: 188E
Signing time: Sat 28 Mar 2026 08:01:04 +0000
Manifest this update: Sat 28 Mar 2026 08:01:04 +0000
Manifest next update: Sun 29 Mar 2026 08:01:04 +0000
Files and hashes: 1: E_fsK2xkMQPa9f4KE0p5s-E33Rs.roa (hash: fBstBj+krtA4Tx9gbY6Hp+BWosNY6KbmZu55yGuUOb4=)
2: eQ3IFFdVEBrMCIiqALsouZW5xPE.crl (hash: 6Tf4DxLJCVJmFzgj/hn06+INgoTAD1Ini/KHrFy6MQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:00:84:d8:b3:54:32:92:a7:98:1f:b1:b1:7c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Validity
Not Before: Mar 28 08:01:04 2026 GMT
Not After : Mar 29 08:01:04 2026 GMT
Subject: CN=43329c16d806ac45f9b05f75591314fa6a1864f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:de:b2:b5:67:41:f6:46:85:b2:af:da:d9:75:
80:af:d7:aa:50:d7:25:9b:16:6c:8b:9e:0f:13:ee:
fc:6d:5a:a4:5c:c0:08:11:e3:30:fd:df:15:03:36:
30:73:5b:2e:c9:7c:6d:54:27:c1:8f:9a:f9:cc:dd:
e2:e4:33:51:a4:7a:9e:82:d3:80:66:e2:98:be:27:
dc:e8:a5:cd:4e:23:ea:a6:7c:8f:6f:6a:1a:25:27:
e8:28:cf:36:95:ed:b0:4c:e7:c5:e8:cc:ec:44:5a:
ff:a9:0b:9c:e3:a0:35:96:f3:37:bd:54:da:eb:b8:
bd:d2:4a:45:aa:28:49:b1:84:6d:7e:8a:31:3a:e2:
61:0d:a6:2f:3d:ed:47:e1:27:ef:33:5d:7c:e1:77:
9d:f7:6a:dd:dd:9e:6d:a8:22:7e:8c:ac:8a:62:07:
46:61:26:59:06:c4:fd:f7:81:4c:0c:69:ed:13:7f:
42:c1:48:52:bc:d4:a4:4b:ce:0b:74:d3:98:e6:eb:
0c:11:91:1b:78:54:93:ac:f7:b3:90:a9:18:47:70:
72:5c:65:bc:a3:4d:a6:bf:4b:84:9f:80:0a:fc:0c:
c2:cc:ba:cf:8b:67:3f:c0:0c:44:80:d7:1e:db:20:
96:a9:31:ef:e8:33:7d:04:9e:41:7e:53:67:1d:63:
e7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:32:9C:16:D8:06:AC:45:F9:B0:5F:75:59:13:14:FA:6A:18:64:F1
X509v3 Authority Key Identifier:
keyid:79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:4e:3d:af:6a:08:05:80:8c:c9:34:29:91:93:01:33:40:8d:
06:61:db:a5:cd:10:ec:9c:c9:43:a3:3f:c3:16:f7:0e:6d:c3:
47:d6:4c:d9:8c:bd:13:f1:3d:5f:db:e9:3a:6b:c0:4d:86:b0:
23:0c:b1:db:7b:08:b9:71:0e:83:af:5d:34:57:8a:59:c0:69:
81:3a:ca:eb:af:b8:3f:57:e8:a6:ff:8e:e3:f0:a2:e2:b3:f6:
cc:4f:20:63:9c:ba:9d:f1:9b:0c:20:56:72:fe:53:dd:aa:07:
c2:e7:0b:bc:a8:10:54:21:de:38:d3:1e:a1:bd:d4:2e:be:f6:
dd:a3:82:8b:1d:82:6e:c7:20:7a:14:3a:55:0e:70:14:f9:3b:
1d:8f:3b:25:25:36:dd:89:2b:b4:c0:48:73:b7:60:dd:00:1f:
87:26:18:33:76:f7:03:e6:6d:ce:7f:b4:dd:d3:36:af:9a:b4:
b2:1b:6c:63:0f:7a:50:0e:ba:e7:4e:c7:a3:49:6b:cb:9e:aa:
e9:3e:01:2c:5c:c7:d1:b5:d6:2a:85:e2:24:5e:dd:7b:cb:ab:
c3:52:4d:37:1a:a7:85:8d:c5:77:97:10:d8:9d:30:f1:6c:3e:
4f:d5:7e:ce:7f:4d:85:5a:a2:49:db:9f:0a:c7:c2:01:bb:2c:
4e:f7:07:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:38:42 2026 by rpki-client