Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
File: ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft (raw, json)
Hash identifier: SkCatCN1QEj2ClgETgimt4ex6ddpQW99kH0xekWOID8=
Subject key identifier: B0:9F:AE:87:BC:4E:C0:27:1D:64:5D:DD:BA:50:26:59:42:5C:32:7B
Authority key identifier: 79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
Certificate issuer: /CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Certificate serial: 019D26960FA271715CE1E5D012B30A9AE53E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
Manifest number: 1874
Signing time: Wed 25 Mar 2026 20:01:01 +0000
Manifest this update: Wed 25 Mar 2026 20:01:01 +0000
Manifest next update: Thu 26 Mar 2026 20:01:01 +0000
Files and hashes: 1: DHHjGMt7-3BtKh8jbUtHgjtd7Zk.roa (hash: AGrA4B/DyddJdpJQ+MaOxYEeNzNiJWqbWYvLiR+2oDU=)
2: ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl (hash: Z6A6kDxjevQlvCYVnCdzIX6Wx1I1aVcn4nNdPrrXID4=)
3: ynu8tUDUEPguQB0iGrynuoA2iPw.roa (hash: johc23xrqxWrSzPXwvlfoLCZ1FTv0QQ+G+sZUcEYX8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:0f:a2:71:71:5c:e1:e5:d0:12:b3:0a:9a:e5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Validity
Not Before: Mar 25 20:01:01 2026 GMT
Not After : Mar 26 20:01:01 2026 GMT
Subject: CN=b09fae87bc4ec0271d645dddba502659425c327b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:58:ee:e6:81:ba:60:9d:0c:ed:19:4b:60:8a:
07:9a:38:7a:fc:24:97:22:a5:49:6f:4f:92:e9:4f:
46:b2:41:55:e7:f3:08:e4:44:55:b9:86:95:f5:bc:
f4:db:e0:58:e9:47:cc:cd:75:3d:ef:e9:d6:2a:33:
9b:ab:7e:ce:07:cd:61:56:1b:16:71:97:df:be:71:
e9:74:4a:56:9a:2c:c8:42:0e:67:37:dc:2e:ad:28:
ae:3d:96:36:47:43:22:d5:c7:08:97:c7:e3:11:ef:
a2:18:76:6a:f1:8a:ed:f4:b5:39:f1:9b:3b:18:cd:
80:fb:fc:a5:c3:0a:ff:f5:67:13:9d:40:f7:c2:53:
d1:2d:c9:4a:1e:bc:b2:ad:14:69:3e:c8:f2:79:f1:
0a:79:2f:76:15:90:52:cd:e5:fd:32:e0:16:c8:6d:
c1:5d:ed:7a:fe:0f:d7:a2:0c:f5:66:33:bc:8d:d3:
7d:47:87:8f:c1:29:43:82:00:b3:0d:52:7c:ec:a1:
1b:9d:d3:b0:dc:e1:f9:ce:e9:12:00:8e:e1:0f:70:
ac:31:df:7b:1d:dc:0a:9e:06:33:bb:eb:d0:5e:db:
94:fa:1c:9c:a8:80:82:a3:24:b7:5f:cd:4d:38:d4:
3d:13:98:fc:85:d0:a6:a7:6d:e1:ef:08:53:ea:ee:
68:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9F:AE:87:BC:4E:C0:27:1D:64:5D:DD:BA:50:26:59:42:5C:32:7B
X509v3 Authority Key Identifier:
keyid:79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e0:0e:a3:d7:2a:05:a1:84:8b:ab:a8:a6:86:50:53:53:cf:
0f:fd:16:c7:cc:65:07:f9:b4:97:5c:ed:04:62:a0:d5:2d:b2:
8b:a2:cc:bf:09:c9:f5:f7:1c:8d:ab:4c:5d:12:73:c3:04:2a:
97:99:fa:28:f5:29:a6:7f:f8:7d:ea:ff:00:35:31:36:4d:c6:
ed:2d:cd:5c:ec:b1:b2:3b:30:16:99:bc:2d:b2:7e:85:b1:7c:
9d:95:69:7a:4f:c5:f0:4d:c2:f2:24:e6:96:94:fb:0f:91:8a:
91:48:56:60:fe:8e:58:8a:7a:6a:62:2f:1a:fb:e4:d9:d7:a8:
1c:0b:27:f8:a8:1f:43:79:62:a8:55:ee:80:10:1d:82:c0:f4:
d6:99:d6:d0:bd:02:58:ff:b0:af:f7:d9:46:f5:1e:d6:ad:d0:
57:ac:91:b2:1f:11:aa:af:a6:aa:ba:e2:7c:24:e2:14:ee:d2:
72:aa:f7:19:26:5e:3e:be:44:34:6d:9a:aa:3b:01:6f:5a:0a:
f0:96:f8:74:58:3c:e1:c5:46:e1:46:2a:cf:29:6b:5a:3f:bb:
0d:c2:11:bc:82:e3:10:b3:48:1b:fd:63:9a:66:85:88:f8:9d:
62:76:d9:fa:c6:d6:b0:b0:3b:3a:a1:17:4b:c0:0c:98:86:8a:
a5:1d:16:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:42 2026 by rpki-client