Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
File: eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json)
Hash identifier: rCDjIl5nS8eqWAiP7zE4bj9074F7+bzjPnjiVlxjEiM=
Subject key identifier: D2:BE:B6:88:23:85:03:3F:4E:3E:F8:8A:E2:DE:FD:CA:C2:FF:AD:70
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Certificate issuer: /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial: 019E20237B581A2A452111A30C92A30FFF9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
Manifest number: 12C9
Signing time: Wed 13 May 2026 07:00:56 +0000
Manifest this update: Wed 13 May 2026 07:00:56 +0000
Manifest next update: Thu 14 May 2026 07:00:56 +0000
Files and hashes: 1: Ovz5_uXaopmCFA2hM3c3dActUxA.roa (hash: c9mXjNhTNI7nbpo+Q8eDzbpgYffEF1OmRMytYW5lsxc=)
2: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: Tg/BXSMOva7vTE15jkmR0MXYPIBH23RwUY7rKcuw8TI=)
3: iiLRQTaQQ6IVIkbg2il6ZXlFwVQ.roa (hash: tutx4i5TMPBaqEME1ocqA/S91MUf42k0v3h4figQjcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:7b:58:1a:2a:45:21:11:a3:0c:92:a3:0f:ff:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Validity
Not Before: May 13 07:00:56 2026 GMT
Not After : May 14 07:00:56 2026 GMT
Subject: CN=d2beb6882385033f4e3ef88ae2defdcac2ffad70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:92:52:b5:ac:8d:48:13:15:ce:a7:ea:4e:
55:43:01:4d:86:c6:98:97:16:68:61:b7:d9:3f:e1:
47:89:54:84:79:ec:f5:b7:b7:de:cf:b5:f9:60:df:
52:ea:93:19:1b:5f:32:fb:51:71:89:7d:0d:6f:4c:
a3:fc:0d:34:b0:e1:d1:a4:f5:c1:9c:9e:47:6b:e7:
0c:16:23:89:f5:e2:12:6f:23:bf:01:d2:4c:60:8d:
bb:26:ed:0c:5d:60:f0:18:dd:d9:7e:9b:97:14:9b:
f8:59:dd:cf:18:f1:48:0e:24:58:7a:f3:ac:1e:a9:
ea:ec:02:91:4d:80:be:ea:49:f6:f8:34:a4:4e:29:
bf:4c:7b:ae:de:e7:7a:01:cc:2b:08:50:8f:30:84:
49:16:79:9c:db:d8:77:07:d5:4e:7a:f4:69:b7:25:
dd:3e:30:d9:44:90:d3:de:4b:09:de:42:60:9b:4e:
dd:77:da:d5:82:1c:d7:80:e7:07:08:15:40:32:05:
d3:1a:01:84:05:ad:c1:4b:86:0a:96:81:17:e8:75:
e4:a2:c5:5c:0a:b4:9f:8e:80:e6:d1:78:b1:2a:2c:
50:d8:84:df:fe:1b:de:03:c7:15:24:85:8a:41:c8:
19:82:74:3e:22:1a:b2:1a:92:b9:a6:dc:0f:c0:17:
f0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BE:B6:88:23:85:03:3F:4E:3E:F8:8A:E2:DE:FD:CA:C2:FF:AD:70
X509v3 Authority Key Identifier:
keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5a:09:7f:9a:76:eb:cf:ff:31:6a:51:b2:6a:aa:ed:98:70:
a7:ba:5d:cc:8e:82:72:56:65:a8:bf:8d:20:40:d3:9d:8d:61:
d8:19:a5:06:ab:c5:c6:25:fb:11:5d:bd:20:c6:ed:34:a1:3e:
18:bd:2f:ae:7e:1f:01:fb:01:41:e4:5b:a2:a8:ae:fd:f5:d2:
2c:89:c9:a0:d2:21:7a:4e:89:cf:9d:98:59:af:0e:fd:c0:8e:
1c:c0:c8:14:9b:55:6e:4b:e4:12:44:e8:67:8f:e7:90:72:93:
88:9a:b5:50:3c:07:05:23:a6:e8:4c:2b:89:31:ed:b4:f3:c0:
af:a1:33:73:fc:30:ac:ad:1f:8e:d1:03:e0:4a:d8:b9:5f:99:
ad:df:0c:5c:54:52:5d:0c:12:d6:fe:4e:24:9a:97:d9:4b:dd:
e4:3c:69:60:ce:41:65:88:c2:8c:72:72:0f:fd:1e:c0:3d:bf:
7b:32:b8:c9:88:85:fc:83:14:8f:eb:ec:a3:ab:89:83:fd:7c:
57:71:c9:f9:32:75:b0:aa:f9:f8:fd:b4:5d:78:60:62:4d:44:
a9:29:10:72:5f:3e:bd:f8:ed:b0:b9:5d:00:5f:55:46:65:be:
e3:2d:74:a9:0e:4c:ea:84:fb:86:e8:3c:0a:a6:23:42:96:bd:
49:a8:27:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:03:00 2026 by rpki-client