Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
File: cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft (raw, json)
Hash identifier: k1oa9tM6ZwqZWdhWygjjDjzYNGLJOdIuyGyW+9rhZSM=
Subject key identifier: 85:EE:F1:42:0D:1E:18:87:AA:D9:3E:0D:F6:7C:57:51:35:C5:4F:32
Authority key identifier: 70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D
Certificate issuer: /CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
Certificate serial: 019D32D0C072776965910A98806E24E1D558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
Manifest number: 0661
Signing time: Sat 28 Mar 2026 05:00:34 +0000
Manifest this update: Sat 28 Mar 2026 05:00:34 +0000
Manifest next update: Sun 29 Mar 2026 05:00:34 +0000
Files and hashes: 1: G6cwUHqt5rs7RBIFalSUJyMf9D0.roa (hash: fmLCgkdrA2EMgV+Qbi1vfUfbXeKr1iQ/NLq5KKaaLfQ=)
2: cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl (hash: Llfry7byr+UB+CkJGoEVYdn+dgZvcYsiHphJ+6pbBbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:c0:72:77:69:65:91:0a:98:80:6e:24:e1:d5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
Validity
Not Before: Mar 28 05:00:34 2026 GMT
Not After : Mar 29 05:00:34 2026 GMT
Subject: CN=85eef1420d1e1887aad93e0df67c575135c54f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ce:0d:98:9e:05:75:9a:08:20:99:01:04:dd:
b7:d3:45:0e:50:96:f2:28:cb:dc:3c:99:2b:c0:26:
2a:cb:a5:35:7c:3a:f8:6c:b4:e0:77:b6:88:d6:e6:
34:8e:56:23:80:d0:bc:fc:79:0a:4a:b8:f8:40:77:
3d:72:c5:92:1a:c0:1a:75:dd:d8:1f:61:52:b9:e7:
15:e2:4a:35:8a:37:0b:60:98:53:c3:4a:3e:e3:38:
fb:ce:fb:78:28:bd:f6:61:1c:ac:6b:00:74:a2:c4:
62:6c:45:19:86:3c:dc:fd:15:b1:0f:23:f1:a3:66:
b9:74:1f:f9:01:23:29:2a:c8:32:ab:b9:fd:88:82:
64:cc:c8:25:84:63:c2:d6:2c:2d:94:3e:22:59:b5:
15:44:0a:8c:55:af:ae:fc:0f:8a:a3:4a:b6:7d:b0:
32:e9:a7:2f:ab:02:bb:af:88:3f:7e:f5:75:f8:72:
7a:d7:97:c5:a5:07:a9:50:c5:b1:cc:6f:1c:25:f7:
58:6f:7b:b0:93:bd:b3:39:d8:7e:8a:fc:f2:06:c2:
53:46:81:b1:12:cf:86:54:b1:28:79:2f:e6:15:0a:
33:d2:50:b3:ae:f1:65:7a:b2:fa:de:ca:e9:c2:bd:
d7:83:ed:dc:60:1f:04:1d:d8:9f:3d:c4:78:59:99:
f3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EE:F1:42:0D:1E:18:87:AA:D9:3E:0D:F6:7C:57:51:35:C5:4F:32
X509v3 Authority Key Identifier:
keyid:70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:44:1d:e6:f3:f8:cc:a0:93:f8:c5:18:de:9b:3f:fa:e8:6e:
16:c5:03:8d:f0:db:f6:dd:5f:50:39:df:01:32:28:14:16:8c:
7a:90:05:1e:62:f0:22:17:30:40:08:16:27:94:c5:43:05:c7:
1e:48:93:b2:61:8e:65:0d:7e:d9:2c:ec:cb:ad:c9:d7:92:77:
a9:38:54:2c:52:98:fd:60:8d:96:ec:9b:3a:fe:a6:2c:5c:73:
81:da:f0:c1:60:50:9a:c0:c0:a7:d4:35:49:f1:bd:d2:80:0a:
c6:6f:3e:04:10:71:cc:7b:88:3c:b4:ab:7e:33:82:1a:0a:ce:
45:b7:f1:1c:bb:ef:a2:dd:0f:cf:4d:be:61:05:f7:7c:75:f9:
9a:09:67:63:f6:c9:c8:69:19:59:54:b3:20:00:9f:dc:73:22:
66:d8:5d:d0:61:70:9b:71:f1:7c:e1:6b:bf:72:61:ae:e5:d2:
a0:ae:c6:f6:57:c8:e0:84:80:e8:1f:24:58:83:0d:6c:cd:33:
09:e2:32:a5:b5:94:ba:e4:28:b6:f2:94:1d:53:d5:b5:e0:81:
0e:d3:8f:60:0e:31:c4:2c:65:06:16:62:58:1c:d3:43:26:d1:
53:79:40:96:43:19:4c:d5:41:cc:18:1a:fc:ff:f9:55:39:54:
26:a8:04:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:16:31 2026 by rpki-client