Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
File: eojTDTUC0d-66TDV6pzJ1yY-lQg.mft (raw, json)
Hash identifier: dA1PNY6OciELUFYBIwgNc1PWNYDVqn0lUdXy7i2eTcc=
Subject key identifier: 9D:19:07:98:1C:A7:5F:4C:87:2E:8A:95:A7:6A:12:C0:7B:24:00:9F
Authority key identifier: 7A:88:D3:0D:35:02:D1:DF:BA:E9:30:D5:EA:9C:C9:D7:26:3E:95:08
Certificate issuer: /CN=7a88d30d3502d1dfbae930d5ea9cc9d7263e9508
Certificate serial: 019D25BA5C17F8443E24BD3552440B7C228F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
Manifest number: 057B
Signing time: Wed 25 Mar 2026 16:01:03 +0000
Manifest this update: Wed 25 Mar 2026 16:01:03 +0000
Manifest next update: Thu 26 Mar 2026 16:01:03 +0000
Files and hashes: 1: 1-4K1IVOJn7nAT0rq7-vBNKDfOH0.roa (hash: zpB+4xP9DfxiPXYyO76KcFfYZAOeUtNUuwf832esy4E=)
2: eojTDTUC0d-66TDV6pzJ1yY-lQg.crl (hash: AJC7E/UEWtmOrDFcq89p5BdrBq3qtWtaxVaCvipvp18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:5c:17:f8:44:3e:24:bd:35:52:44:0b:7c:22:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a88d30d3502d1dfbae930d5ea9cc9d7263e9508
Validity
Not Before: Mar 25 16:01:03 2026 GMT
Not After : Mar 26 16:01:03 2026 GMT
Subject: CN=9d1907981ca75f4c872e8a95a76a12c07b24009f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fe:69:2f:9a:78:1b:cf:3a:7f:40:1f:ae:31:
7e:50:15:bc:58:46:0e:a7:62:fc:c0:52:2b:60:cf:
23:61:13:6f:5c:ad:35:1c:27:64:a5:16:5b:4f:b9:
02:2c:14:05:73:b2:e5:9c:7b:4e:10:1b:f4:f2:2b:
14:c6:c7:78:21:18:0b:2d:25:95:fa:8a:f6:0c:4a:
5c:e9:c4:0f:dd:4a:81:48:03:e1:9a:6f:c6:75:7d:
68:d4:e6:cb:6d:e8:be:60:a5:92:b3:1d:d1:39:1c:
d6:1e:a6:0a:4d:74:fa:8b:66:d5:77:54:86:26:1b:
62:91:43:4c:fa:21:9c:a9:8d:41:ec:87:51:f7:1e:
b6:01:94:50:ab:a1:68:50:0f:a1:78:f8:e5:3d:9a:
46:c9:81:4b:cf:b2:34:90:3f:60:8b:22:21:ec:71:
3d:31:a5:d1:1b:c5:4e:76:1a:80:5c:fc:af:79:80:
d1:02:5a:6b:e1:ba:42:08:fc:8a:60:36:c8:3e:fb:
f6:d1:3e:50:2f:1a:68:d7:ad:1e:d0:d3:48:69:46:
a5:1f:ca:d7:d9:11:5a:a4:e0:d7:8f:2f:47:57:4b:
cc:8e:8c:09:2e:f9:47:bd:91:7b:5c:58:89:fd:0c:
8c:1c:50:4c:f3:6d:a9:95:de:ff:1a:5d:ac:8d:2b:
41:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:19:07:98:1C:A7:5F:4C:87:2E:8A:95:A7:6A:12:C0:7B:24:00:9F
X509v3 Authority Key Identifier:
keyid:7A:88:D3:0D:35:02:D1:DF:BA:E9:30:D5:EA:9C:C9:D7:26:3E:95:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e2:9d:51:95:5f:ee:0b:f0:82:98:f1:27:1d:30:7d:a1:33:
c7:e4:84:52:df:ab:ec:13:1f:bd:c6:32:fa:10:ab:02:4e:1a:
80:01:e4:30:f0:15:98:bb:9b:60:cd:8d:0a:e3:db:9a:7a:07:
bc:97:82:26:d4:c2:5e:f5:fd:95:5e:b8:f8:dc:a8:8f:54:ec:
6a:cb:8b:af:12:10:92:2f:31:40:05:09:a5:0f:7f:3b:50:76:
1b:07:83:69:70:25:df:dd:04:3c:33:03:9e:b9:64:d1:ea:3b:
dc:ac:a3:f2:b1:85:b2:02:a0:c3:c8:f7:3c:9c:8f:cb:ca:4d:
09:28:9f:d4:31:07:26:ee:b3:aa:26:76:5d:74:a9:26:e1:17:
f1:cd:35:95:a0:5c:1a:b7:89:b9:84:5f:38:cc:60:86:c4:7b:
1c:3c:5c:51:fe:cb:09:f6:89:ca:d5:94:2c:35:46:cb:73:23:
2f:21:5f:56:82:80:fe:98:0c:47:83:bf:e6:89:05:2b:0a:51:
1f:d2:3b:47:45:ed:81:15:26:c6:5b:15:28:94:37:56:d1:40:
23:c6:ef:70:62:a2:5d:80:17:77:bc:29:05:3c:b1:bf:d5:02:
a7:ba:86:a3:4b:2b:a7:b6:6d:34:c6:45:4c:59:28:a4:cb:70:
4d:88:84:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:18 2026 by rpki-client