Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
File: eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft (raw, json)
Hash identifier: 67GutJ9um1d6u69b/9apgKc+ZPeiCV2XFrydOfMzhx4=
Subject key identifier: 20:9B:41:34:40:ED:00:E7:81:16:90:70:D6:AC:63:3B:59:CF:E5:DB
Authority key identifier: 78:02:3B:5F:44:1A:4C:58:5C:68:C9:C3:BD:88:F9:D1:9D:65:4C:C9
Certificate issuer: /CN=78023b5f441a4c585c68c9c3bd88f9d19d654cc9
Certificate serial: 019D2704E4A691353CE1392E40A05A5BC027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
Manifest number: 02F2
Signing time: Wed 25 Mar 2026 22:02:05 +0000
Manifest this update: Wed 25 Mar 2026 22:02:05 +0000
Manifest next update: Thu 26 Mar 2026 22:02:05 +0000
Files and hashes: 1: eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl (hash: UcYYxbdPIb0hj7CdB/J1qWocmyppfTk9PtnvMp/tJ0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:e4:a6:91:35:3c:e1:39:2e:40:a0:5a:5b:c0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78023b5f441a4c585c68c9c3bd88f9d19d654cc9
Validity
Not Before: Mar 25 22:02:05 2026 GMT
Not After : Mar 26 22:02:05 2026 GMT
Subject: CN=209b413440ed00e781169070d6ac633b59cfe5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:38:26:79:8a:99:ba:91:77:27:4a:2a:42:
63:ec:96:f6:1b:57:6f:5f:2d:c4:4b:ed:39:73:07:
c9:00:14:1d:14:d4:2c:a9:a0:e3:64:c4:cb:ae:5a:
2d:e5:e0:28:4a:71:0c:ff:48:bd:df:5f:2f:50:6e:
f7:05:a8:0f:be:f1:64:93:29:3f:bb:8d:3f:34:13:
a3:d9:ed:63:5b:52:f3:19:46:fb:e8:23:05:53:ef:
8a:56:be:34:07:97:ba:78:98:f1:29:c9:9d:4c:5a:
5b:71:e8:93:c8:d7:a7:2b:99:00:47:33:05:6f:41:
96:51:c2:a4:eb:66:d4:5b:c3:fb:c6:9e:9c:78:47:
36:a0:5e:6d:fe:c6:c1:8d:db:b6:25:b9:07:08:32:
b2:30:de:7a:13:ad:fd:47:c2:98:9f:0c:dd:92:18:
1e:a6:7b:ff:a7:40:8e:bf:89:2b:6d:40:76:42:35:
e9:4a:a3:41:01:df:7d:07:44:d9:1c:a6:0a:3f:6a:
49:1c:5e:7b:27:56:b1:42:71:ef:09:e2:9c:43:e9:
ac:a5:64:87:4c:5a:ac:23:0e:57:68:4d:b8:ef:2e:
e7:a6:c5:4b:3c:0c:53:4e:a0:b5:4e:b6:99:1a:37:
f2:0a:1f:22:f7:b6:4d:22:e8:6c:6f:4b:49:0c:c7:
1c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9B:41:34:40:ED:00:E7:81:16:90:70:D6:AC:63:3B:59:CF:E5:DB
X509v3 Authority Key Identifier:
keyid:78:02:3B:5F:44:1A:4C:58:5C:68:C9:C3:BD:88:F9:D1:9D:65:4C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:df:74:0a:59:73:c9:31:62:cf:c7:5d:c6:ce:8a:50:cf:8c:
1a:84:e0:e3:40:5f:57:8d:16:c5:5d:1e:84:c7:a3:d8:8d:fb:
cf:9d:5a:c3:a9:62:53:22:53:87:45:d0:fb:63:a3:36:d6:11:
bf:6b:55:54:fe:38:ef:02:79:ff:75:c8:11:22:c4:80:cb:3f:
93:ce:42:50:45:0b:17:49:9b:1d:0d:aa:93:fa:48:69:a5:ac:
44:30:bb:18:e6:78:6e:90:a8:b2:bc:b8:d1:f1:cb:58:e1:f5:
3d:64:b2:1b:56:1a:8d:e7:1e:a9:da:fb:50:72:11:ac:2a:cc:
8c:f9:42:a9:c5:64:b1:f0:52:50:b8:e4:51:47:2d:50:7a:4d:
76:a7:17:af:86:4e:b5:bd:55:87:43:60:66:b1:99:12:aa:4a:
ed:f8:e4:55:db:f5:af:8c:8c:1c:87:b7:f1:9f:d4:85:64:4e:
76:c2:0f:14:08:9d:01:ba:e0:d1:bb:20:73:c9:23:53:81:82:
5e:00:0f:df:bc:5b:dc:c7:46:9b:fd:46:a5:78:bc:36:a6:d6:
02:af:82:ce:96:ed:e1:1f:dc:a7:ba:4b:27:c6:2a:f9:56:77:
c1:6b:29:61:62:8c:bd:c8:27:58:41:d0:1f:52:8f:b7:59:5c:
70:71:07:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:03 2026 by rpki-client