Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9b1522-8cb0-4c9e-8be0-1a9b45e14557/1/eIGF2YREhCtpfiv97jlgqT8nru0.mft
File: eIGF2YREhCtpfiv97jlgqT8nru0.mft (raw, json)
Hash identifier: 9u1B0vAGqKtHVqAewjcZwmroUymMXBB61+wMbkuA/pY=
Subject key identifier: B4:1D:4D:4D:FE:69:3C:FF:18:C2:20:30:9D:04:27:B7:D2:3D:74:A3
Authority key identifier: 78:81:85:D9:84:44:84:2B:69:7E:2B:FD:EE:39:60:A9:3F:27:AE:ED
Certificate issuer: /CN=788185d98444842b697e2bfdee3960a93f27aeed
Certificate serial: 019D28F2BD430EB1586C5D577DBD149FCEDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIGF2YREhCtpfiv97jlgqT8nru0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9b1522-8cb0-4c9e-8be0-1a9b45e14557/1/eIGF2YREhCtpfiv97jlgqT8nru0.mft
Manifest number: 02E0
Signing time: Thu 26 Mar 2026 07:01:29 +0000
Manifest this update: Thu 26 Mar 2026 07:01:29 +0000
Manifest next update: Fri 27 Mar 2026 07:01:29 +0000
Files and hashes: 1: eIGF2YREhCtpfiv97jlgqT8nru0.crl (hash: paKENAPa1rsZhVTKLkuIy820r00lQSKnRvDF8ob+z24=)
2: jFnUs6ThEVcAY0TkKR5ykBnbIW4.roa (hash: E9HrpMUKlTs1bknCrQYIqhov7YdXYHdxBD9j/VBCm2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9b1522-8cb0-4c9e-8be0-1a9b45e14557/1/eIGF2YREhCtpfiv97jlgqT8nru0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9b1522-8cb0-4c9e-8be0-1a9b45e14557/1/eIGF2YREhCtpfiv97jlgqT8nru0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIGF2YREhCtpfiv97jlgqT8nru0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:bd:43:0e:b1:58:6c:5d:57:7d:bd:14:9f:ce:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788185d98444842b697e2bfdee3960a93f27aeed
Validity
Not Before: Mar 26 07:01:29 2026 GMT
Not After : Mar 27 07:01:29 2026 GMT
Subject: CN=b41d4d4dfe693cff18c220309d0427b7d23d74a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a1:a6:73:05:8d:63:f6:e4:5b:c6:4a:9f:6b:
25:0f:f0:5c:4e:e5:8a:44:5f:f7:9c:d1:42:f9:38:
94:ba:75:9e:a8:0e:4e:14:80:5c:66:28:54:44:f8:
e1:33:aa:43:7d:50:a0:9d:ba:d3:95:9a:ef:bc:fa:
a2:bf:69:e8:b6:93:1b:13:66:88:53:e5:0c:b0:62:
4d:49:8d:84:25:37:54:57:c9:dd:df:31:4e:b6:62:
22:a1:9e:02:d8:55:1c:c6:97:27:29:c5:78:c6:f6:
46:88:98:48:73:26:f7:cb:b4:31:d8:9c:aa:ae:3c:
37:87:56:ca:4d:82:62:bd:68:f6:67:8a:bd:ac:d7:
bc:6e:2d:88:d0:72:61:d4:8b:c8:30:b9:95:cc:9d:
8b:47:b5:2f:6a:8c:8c:3e:3c:48:df:e0:ef:23:e8:
43:a0:4c:0b:d2:33:b0:12:44:c6:23:d4:f0:3f:71:
af:3c:f0:b7:03:88:96:7b:fd:26:87:8e:a6:ce:cb:
e3:91:e3:a7:78:c3:f6:bf:b9:02:57:ec:02:9f:96:
55:2a:1b:d3:51:7e:98:8a:00:29:df:e2:52:bf:a1:
07:62:c0:7f:35:5b:2f:3b:ad:8f:6b:de:cc:93:d2:
6f:9a:0e:26:5d:b7:1d:7b:af:6a:e6:1f:93:b8:0b:
b8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1D:4D:4D:FE:69:3C:FF:18:C2:20:30:9D:04:27:B7:D2:3D:74:A3
X509v3 Authority Key Identifier:
keyid:78:81:85:D9:84:44:84:2B:69:7E:2B:FD:EE:39:60:A9:3F:27:AE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIGF2YREhCtpfiv97jlgqT8nru0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9b1522-8cb0-4c9e-8be0-1a9b45e14557/1/eIGF2YREhCtpfiv97jlgqT8nru0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9b1522-8cb0-4c9e-8be0-1a9b45e14557/1/eIGF2YREhCtpfiv97jlgqT8nru0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:aa:fa:8d:ba:79:44:33:01:e0:ca:81:69:49:15:4d:e2:76:
e3:20:f3:98:80:42:61:f7:0a:3d:91:17:bb:7c:e6:0e:1f:79:
cb:a0:f8:77:4c:93:63:bc:46:1c:79:48:82:db:5b:ba:39:63:
0b:ed:35:be:5d:cd:b9:d6:99:02:f2:71:b2:d2:43:2f:2a:79:
31:1f:78:a7:14:d1:6c:a3:c5:e1:e6:d2:66:38:cf:da:34:23:
72:b4:53:00:5f:70:8b:0f:fa:a5:98:10:52:4c:cb:df:5c:b9:
3f:0b:db:ba:c8:66:6d:39:48:b4:d6:92:d3:db:72:1e:de:e1:
3c:f4:f7:31:11:5a:b9:64:a7:75:73:f1:19:69:7a:a7:84:c2:
08:76:c8:18:88:0e:89:01:5a:fd:28:85:cc:5e:ed:3b:db:88:
25:2e:15:a0:aa:7e:8c:cd:fb:b1:f3:41:89:64:f8:cb:b8:4f:
0f:e0:49:21:ff:ee:91:97:fa:1d:6d:7a:8e:b2:2e:c2:21:50:
63:c3:0d:52:d0:bc:6c:49:c8:e1:cf:bd:42:3a:b3:25:24:4c:
8f:c0:5f:b8:d1:0a:7a:f8:93:7e:97:ca:5f:62:c8:e7:35:4d:
b9:d1:a3:47:de:91:0e:3b:57:ca:56:ea:c6:f3:69:07:e8:ab:
04:07:69:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:30:27 2026 by rpki-client