Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
File: etB83meC_U_FaIV-hIRlW1AkhxA.mft (raw, json)
Hash identifier: +vBTxIE99xhxxnkb3HV33/sLDFrgWqZOAY6pV6h2FeA=
Subject key identifier: AC:08:DD:11:B0:8F:0F:76:EE:20:8E:FA:57:24:D1:64:A8:B2:FD:EC
Authority key identifier: 7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
Certificate issuer: /CN=7ad07cde6782fd4fc568857e8484655b50248710
Certificate serial: 019D27A8BF4148C3A2505174284857B46DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
Manifest number: 069B
Signing time: Thu 26 Mar 2026 01:01:03 +0000
Manifest this update: Thu 26 Mar 2026 01:01:03 +0000
Manifest next update: Fri 27 Mar 2026 01:01:03 +0000
Files and hashes: 1: eCo9qXRcDZLgJlgoHLS9NExTbx4.roa (hash: BYg8Ba7NDfA7mgNndMx+S8c/mZhCBPail+1jI3QYxnk=)
2: etB83meC_U_FaIV-hIRlW1AkhxA.crl (hash: C7dMvITIpYX17JgJbXCQP7H+ooy60C2ouFS8vd6e5gY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:bf:41:48:c3:a2:50:51:74:28:48:57:b4:6d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ad07cde6782fd4fc568857e8484655b50248710
Validity
Not Before: Mar 26 01:01:03 2026 GMT
Not After : Mar 27 01:01:03 2026 GMT
Subject: CN=ac08dd11b08f0f76ee208efa5724d164a8b2fdec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:86:8d:74:c7:31:6c:94:cb:85:84:b2:e6:fc:
b7:70:29:45:7b:10:5f:a7:b8:60:39:1f:c7:f8:80:
09:61:74:19:a3:c5:bd:2e:d1:20:d9:73:b0:22:ce:
61:10:88:0f:ae:b5:1e:01:d2:6b:fd:01:da:f8:40:
8d:e4:b4:f8:c3:03:3c:7c:fb:7a:6a:8d:0d:8e:45:
e4:c7:89:4b:d0:09:63:49:ac:2b:59:0c:23:1d:68:
1a:b2:14:d9:3f:97:94:ab:c0:98:2b:c0:54:1b:64:
12:8c:33:12:07:57:96:33:80:9f:85:34:ca:54:d8:
c0:42:33:d2:10:22:a9:e6:fb:da:01:e0:bb:88:58:
03:32:1c:e4:a9:f6:5c:6f:2c:ea:e8:f6:bc:dd:1d:
19:cc:ae:15:cc:2e:c7:4f:23:37:b8:3a:c6:ce:47:
59:29:1f:b2:30:59:f5:6b:19:01:d0:d6:3d:55:5b:
28:13:ef:ee:1a:6a:c4:43:29:b1:f5:c7:9f:4f:df:
f6:22:59:33:08:fd:f4:71:ed:95:57:00:68:16:6f:
d3:33:28:63:0f:07:02:af:de:bb:c2:83:21:90:f9:
3c:c3:47:08:cc:1e:fc:7f:f3:3a:73:d4:77:0e:c9:
2a:e1:07:dd:a9:27:04:10:35:64:a5:6d:fb:fc:18:
34:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:08:DD:11:B0:8F:0F:76:EE:20:8E:FA:57:24:D1:64:A8:B2:FD:EC
X509v3 Authority Key Identifier:
keyid:7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:c2:a2:d8:d2:99:bf:ad:a9:34:cf:53:54:38:4d:ef:68:6b:
25:e4:6d:06:66:17:b8:1e:ef:22:ea:53:5c:7a:ac:52:c0:22:
62:bb:d3:49:0a:a5:ea:32:d8:cf:82:f1:5e:24:39:95:d3:64:
77:71:f8:6f:22:44:89:1a:24:6f:4b:5f:d7:52:c9:22:bd:76:
40:4b:1e:92:04:4b:d8:d0:b2:6e:eb:bd:19:cb:6a:bc:55:3a:
b6:84:a2:3e:4b:d3:00:26:84:f3:84:9f:75:fc:14:e9:ea:ad:
93:d7:6a:72:bf:1f:96:4c:8d:2a:b7:9b:b0:fc:87:ae:bc:4e:
be:3f:f5:1a:af:45:83:c7:6e:57:f0:96:c2:42:b1:ef:09:cb:
16:e0:bf:97:99:32:ae:37:92:9a:65:bd:97:14:7f:3c:9c:37:
62:16:f5:a7:0f:f5:b5:18:84:33:58:db:44:fa:d0:fd:b0:2b:
d1:3b:bd:b2:1e:8f:76:23:20:f4:f2:b9:d7:1a:85:bc:a1:75:
11:d7:45:56:93:29:f4:2d:57:08:8d:ca:36:f0:6a:97:0e:da:
54:a4:5a:7b:be:3e:48:dc:96:6a:c8:f1:d1:48:85:11:6f:86:
2b:75:fa:87:42:fd:03:ac:5e:77:e6:46:2c:4f:02:86:34:1a:
d3:c2:a7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:45 2026 by rpki-client