Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
File: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft (raw, json)
Hash identifier: 1n0hLUszx7wuvF1bLXOjsMKHCQFTGEbLninecOmZ3NI=
Subject key identifier: 96:6A:F0:4F:DC:BC:90:7C:73:B7:04:3D:7C:09:B9:64:71:2D:E3:44
Authority key identifier: D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68
Certificate issuer: /CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
Certificate serial: 019D9B87A8BC1A4EF158B8AD11161EB632BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
Manifest number: 0F84
Signing time: Fri 17 Apr 2026 13:00:52 +0000
Manifest this update: Fri 17 Apr 2026 13:00:52 +0000
Manifest next update: Sat 18 Apr 2026 13:00:52 +0000
Files and hashes: 1: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl (hash: h4kBhk3x2GzAMLAmxT6hzDOb/IjDb5jd3V3cIn5iXds=)
2: MipuBL2VGxmcxz7-wPC6PIvzlC0.roa (hash: pbdG1q6RrelOu8y48wOuYlZBSQEt24vc2iBxdFAT4TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:a8:bc:1a:4e:f1:58:b8:ad:11:16:1e:b6:32:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
Validity
Not Before: Apr 17 13:00:52 2026 GMT
Not After : Apr 18 13:00:52 2026 GMT
Subject: CN=966af04fdcbc907c73b7043d7c09b964712de344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:b0:52:0a:09:cf:9c:7a:c7:30:90:6a:30:
18:6f:d0:54:cc:bb:a4:c6:80:f7:4d:44:62:72:fd:
ab:d3:40:2f:51:ca:2c:71:a0:b8:17:9c:f5:31:cb:
61:f5:de:5d:bc:2d:f8:29:be:d1:b3:17:63:97:79:
52:d3:ca:8c:76:71:c0:35:85:83:ef:b7:1b:a6:2c:
29:38:9d:39:60:8f:0b:f0:6a:97:fe:31:d6:c3:e3:
e0:41:d0:21:8a:f9:2e:68:d9:54:a1:22:05:87:37:
af:74:8d:d0:4a:3e:12:23:88:21:44:73:2f:b7:0b:
71:91:fb:17:a6:2e:89:a9:82:b0:72:c0:40:08:49:
ab:1c:70:5f:03:0d:cc:2e:12:cf:47:ca:0f:1c:4a:
a4:34:45:9f:f0:d7:bf:db:18:32:8f:99:1c:9b:e8:
39:66:d9:15:77:a7:d8:98:0b:19:6b:fa:85:b2:36:
6d:57:0c:26:87:87:63:85:42:f4:68:35:1c:17:c3:
23:7d:06:a6:52:da:16:d6:03:39:e1:db:dc:42:62:
d1:3c:e8:a6:73:97:5b:50:bd:a1:48:33:b3:66:22:
b4:0a:9b:33:d9:09:15:58:97:da:c9:58:35:e3:d5:
b7:61:9e:45:72:aa:ad:5f:79:a2:34:af:cc:66:a5:
c7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6A:F0:4F:DC:BC:90:7C:73:B7:04:3D:7C:09:B9:64:71:2D:E3:44
X509v3 Authority Key Identifier:
keyid:D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d0:67:fb:b4:16:94:ae:a0:b8:ca:7a:0a:5d:e0:77:1a:26:
59:15:18:7c:44:92:b5:e6:b5:e3:6c:91:25:90:a3:8d:a5:90:
7c:76:90:e5:86:d8:cd:4d:0d:30:f2:da:ec:ad:ca:3e:96:f8:
16:4e:55:a9:a4:b1:fb:13:63:80:1c:86:19:ea:0e:d2:f8:b0:
1f:fe:80:49:92:48:fe:07:b3:af:82:5c:ec:c5:fb:fe:55:c2:
8f:d5:69:ec:d8:49:cd:42:02:99:ba:39:ad:11:98:85:f7:53:
be:9a:90:8e:f5:8f:de:63:93:21:e0:26:99:2a:cb:f0:60:e5:
8f:d7:16:8f:84:04:97:02:b1:62:1a:25:b0:7b:95:c8:8f:2a:
01:8c:cb:c1:a5:b4:33:42:a7:c7:f9:bc:3a:da:e8:4d:21:ea:
69:5a:ec:24:39:13:8a:84:1e:27:05:f3:23:2f:c0:66:14:db:
96:11:27:85:fd:4f:60:f3:cb:d1:88:82:dc:1d:4e:87:d6:e2:
cf:48:5b:0b:5f:87:79:73:9a:cb:9a:7b:49:c0:a0:c4:a0:ef:
d6:5d:5e:0e:94:4c:c0:5c:68:34:76:9f:25:95:de:20:e9:a1:
6e:5a:b5:20:71:b9:8a:cb:b6:30:54:af:2f:fb:d9:2d:fb:be:
eb:6e:58:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:09:41 2026 by rpki-client