Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
File: eXpIzBPiAOLT84r4MxjRvK9vYzE.mft (raw, json)
Hash identifier: AK2kMotGE4wdSLUi4v1a0SGPJuO9ZkYeFBMu1wSbU8g=
Subject key identifier: 64:80:BA:0F:9A:57:BB:45:14:2C:57:2E:5C:EC:22:BF:DD:2E:EF:2F
Authority key identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
Certificate issuer: /CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Certificate serial: 019D28BB204A95E2ACFB799C1088928DE879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 06:00:45 +0000
Manifest this update: Thu 26 Mar 2026 06:00:45 +0000
Manifest next update: Fri 27 Mar 2026 06:00:45 +0000
Files and hashes: 1: 1CoDti7UyWuABXfzaLp-v2yW2HA.roa (hash: E0ry/JWuGn8+ExPO+znV4eEnxCmGw1JlXLAD1xMsn3M=)
2: CM5wA7_Mj4XNK2JxKM8h4YQ6N-c.roa (hash: vqRJimrGP27MPdv4zjttCm0+Djwer+Zrgp7ip8OhqNI=)
3: eXpIzBPiAOLT84r4MxjRvK9vYzE.crl (hash: ax0n47AtYj6IFIRVfqq9XJX9PfNosEYrnfHuIbndQcI=)
4: vrHxDQdDvD5FkJJ9HXKxIeXSD6g.roa (hash: 6/LxhvXlOR/ty2sj2ZAK5GVcT8Qr18RlIGwO+dZwois=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:20:4a:95:e2:ac:fb:79:9c:10:88:92:8d:e8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Validity
Not Before: Mar 26 06:00:45 2026 GMT
Not After : Mar 27 06:00:45 2026 GMT
Subject: CN=6480ba0f9a57bb45142c572e5cec22bfdd2eef2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e5:e4:da:9f:3e:3f:fc:04:3f:f3:06:78:ec:
85:17:cf:7d:49:90:33:cc:30:06:7b:47:51:ac:dd:
7b:2c:c5:6b:fa:e0:a3:8f:ea:c0:22:13:d8:c6:59:
44:d2:56:03:75:00:49:6c:eb:b7:d2:dc:3b:a4:5a:
d0:a7:6a:15:18:bb:be:2f:17:4b:56:28:e4:82:4a:
ad:c6:bd:cc:1b:b0:e3:49:1c:bd:8f:79:13:b1:c2:
97:af:d5:78:69:9b:47:34:4b:86:a8:9f:1e:7c:2e:
cc:22:e1:4d:77:ab:98:4f:10:5f:d6:65:0a:b7:91:
5a:3d:45:38:61:97:e0:d9:47:ae:e5:39:08:7b:87:
71:f9:0d:a7:f8:9c:4f:ba:fd:0e:3d:d8:85:06:31:
de:ea:88:a4:df:56:bf:1d:76:6b:ce:93:8c:62:51:
56:6c:78:43:eb:01:8c:2a:7f:5b:a5:0e:b5:97:78:
b3:ba:e0:12:18:fe:99:ea:c3:25:0c:85:82:24:8f:
75:33:ba:b2:86:6d:53:e2:48:4e:d0:22:4a:15:75:
87:b4:80:c2:76:c2:23:90:1f:0a:ea:ea:7a:68:a3:
62:c6:a3:d0:d2:ef:4b:c8:4d:31:e2:ac:d4:5c:d6:
61:25:a7:d0:d5:51:fc:88:8f:92:8b:7a:d2:68:5a:
0b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:80:BA:0F:9A:57:BB:45:14:2C:57:2E:5C:EC:22:BF:DD:2E:EF:2F
X509v3 Authority Key Identifier:
keyid:79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:26:f3:25:41:15:d9:ce:bb:b0:8d:6a:93:fa:c4:6b:76:2f:
ca:e0:4e:81:f1:d0:99:ca:7d:24:16:27:a8:e9:45:6f:10:a9:
ce:12:fb:ad:35:ba:35:7e:ed:cb:3b:a9:d2:0b:57:e9:4a:4c:
30:5d:f8:f0:08:7e:25:4d:ec:1a:7b:f6:4b:dc:fc:a0:7b:91:
70:89:2c:85:f2:68:8e:f4:eb:a7:73:aa:43:8c:86:20:d1:71:
91:f6:28:c5:35:86:ea:ac:f8:12:78:ac:10:cb:dc:ea:55:13:
ca:e1:99:bf:b8:97:1b:e7:7b:04:1e:23:78:3f:3b:81:b3:db:
03:fc:cc:62:50:9e:29:25:49:95:17:d8:29:5e:cc:09:de:d0:
d9:5a:96:23:ea:c5:61:fe:f4:05:40:cb:95:ce:64:0b:e1:a9:
7f:a4:32:8e:0c:ef:4a:40:68:c6:fe:ea:45:e9:72:f4:4c:05:
22:9a:ff:6a:cd:0b:88:ec:6d:5b:b7:02:13:1b:4f:c7:bc:f1:
2b:06:ea:9d:9f:2d:b7:92:ee:9f:37:26:47:bd:ff:67:7a:43:
76:10:f3:14:bc:e9:e1:03:55:84:75:22:4d:5a:be:d8:89:bb:
49:64:c2:a0:12:44:e5:9a:1e:e3:58:3b:62:b5:4d:0e:8b:79:
ac:b6:b6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:38:29 2026 by rpki-client