Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
File: eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json)
Hash identifier: BL6Vct1vj/2xHqzPV1K91EJ+AQUHp3bgikLps/ZouMw=
Subject key identifier: 54:4D:3E:08:2F:0B:C3:8D:BC:E3:F8:9A:B2:B9:D9:E6:FC:55:F1:A1
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Certificate issuer: /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial: 019E1FB5FC2B360E3BC2B6677DB59FA2CED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
Manifest number: 0EE3
Signing time: Wed 13 May 2026 05:01:20 +0000
Manifest this update: Wed 13 May 2026 05:01:20 +0000
Manifest next update: Thu 14 May 2026 05:01:20 +0000
Files and hashes: 1: 0YhVfBsZbIu7A5iYA94enjAmzkk.roa (hash: HsOjFTzanM+rOeHfu6ck2x7MS7PSUK04NQ5MvXhA+ZA=)
2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: yiQ6DNFAU766MGk9doO0MmTZdBfYWDgM1S3DKcCpqrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:fc:2b:36:0e:3b:c2:b6:67:7d:b5:9f:a2:ce:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Validity
Not Before: May 13 05:01:20 2026 GMT
Not After : May 14 05:01:20 2026 GMT
Subject: CN=544d3e082f0bc38dbce3f89ab2b9d9e6fc55f1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5e:be:77:18:ba:fc:e3:31:77:4c:cd:a2:6b:
3c:ce:d6:0c:6f:de:f1:a8:6d:07:be:ad:59:aa:cc:
5d:d2:ae:53:53:e8:26:00:ee:07:e4:50:f3:bb:28:
9e:36:f3:05:ae:77:bd:63:78:d4:ae:6c:6f:fa:7e:
8f:db:cb:49:51:25:d1:4b:74:b2:6f:ff:bb:fd:dc:
21:d6:b6:07:b0:ad:36:1c:d7:7f:f9:dc:b8:2f:ef:
c5:b8:6a:3b:ca:24:6b:59:73:5a:3d:d5:43:44:62:
41:b8:dd:88:a7:55:62:e1:70:44:06:be:89:61:9c:
d9:5c:ad:06:65:3d:41:fd:9b:67:8c:c1:6b:e4:65:
06:fa:b1:7b:f1:55:61:76:56:0f:de:1c:02:5b:9c:
e1:bb:78:cb:62:bf:9f:dd:76:af:08:2d:58:82:39:
86:2b:37:cf:b6:4a:ed:f0:f9:df:c6:1c:13:d2:4f:
91:ae:da:51:c3:f9:c4:e4:2e:79:a3:8a:0e:a3:14:
3b:a8:4c:12:19:eb:11:32:ca:c5:71:d1:c4:e5:70:
15:fa:1b:46:b9:b2:11:4c:ef:b6:a9:a4:38:8a:c7:
78:96:05:03:68:ed:58:7c:5a:2b:ae:3f:82:18:18:
1e:a0:60:92:d6:96:f2:63:a2:94:38:64:7f:fb:7f:
b6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4D:3E:08:2F:0B:C3:8D:BC:E3:F8:9A:B2:B9:D9:E6:FC:55:F1:A1
X509v3 Authority Key Identifier:
keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d5:d8:61:c9:0e:cb:c1:ec:8f:14:9c:e6:ca:06:6f:11:46:
c2:ee:5e:0f:3b:f2:6f:ba:03:9a:44:bb:f9:58:6d:e8:2f:4d:
45:d5:80:7d:2a:a4:bc:14:45:c3:26:1d:b4:10:b4:c8:62:a5:
f1:01:d0:02:2d:6f:6a:ee:ea:fa:c7:4b:5c:47:9f:c5:ab:4d:
e1:0d:a2:64:89:9f:19:ab:93:72:2a:2a:89:d7:28:91:36:7f:
be:33:c0:78:5a:c7:8c:99:bc:94:78:65:be:50:52:e0:23:4b:
47:98:8e:95:ed:b2:84:45:99:95:4f:ff:9e:54:4c:1b:da:34:
e9:d1:15:39:61:74:40:f6:46:60:1f:f7:ee:77:49:f3:4d:92:
13:4d:8e:25:f7:c7:34:b3:c0:af:a8:a3:3f:5a:56:4a:be:5d:
7f:fd:b3:ef:d0:50:20:98:09:c7:55:27:41:9b:5d:26:7a:01:
25:22:33:59:fa:98:99:dc:d4:d8:1d:fc:1a:c3:9f:6b:29:a5:
ad:54:ee:31:3a:76:5d:04:48:95:93:a2:cc:e1:8b:eb:9b:9a:
b1:ed:dc:ab:17:ac:38:07:62:f2:e4:18:95:94:63:5e:c3:86:
c9:30:18:c5:13:79:80:97:55:4c:c9:cd:72:a5:95:d4:8a:07:
2d:a2:7b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:12:17 2026 by rpki-client