Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
File: eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft (raw, json)
Hash identifier: ZmBGsoyXOY1HR7rzn1jS/LrAoFv1zYHWWbpSZJp5syQ=
Subject key identifier: 69:AF:74:84:D0:06:C3:B1:1F:0D:02:B7:DC:CE:67:61:A7:63:4C:AC
Authority key identifier: 79:A4:B1:FB:BA:D1:CB:6A:8B:1C:7D:33:73:7A:D7:2B:CD:9B:8D:9D
Certificate issuer: /CN=79a4b1fbbad1cb6a8b1c7d33737ad72bcd9b8d9d
Certificate serial: 019D9A06DE03C13026266A53BA016A895EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
Manifest number: F5
Signing time: Fri 17 Apr 2026 06:00:34 +0000
Manifest this update: Fri 17 Apr 2026 06:00:34 +0000
Manifest next update: Sat 18 Apr 2026 06:00:34 +0000
Files and hashes: 1: MHfXLodJ1lTLubHBUzEu-y-nQd8.roa (hash: v+heG+utge9KSHpg0rUF2i0HpIa/3KcrihN3fHNBOZo=)
2: ad2pJPLMCY9-MtsOQUWfkJzvGjk.asa (hash: znBGDedW1a6RheuPxFAgpjdNY4UU36DMoXaL/AWeESU=)
3: eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl (hash: 9VfGZBtOtemBl8XclN3c/79h6vVT5V28U1n79rF7sWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:de:03:c1:30:26:26:6a:53:ba:01:6a:89:5e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a4b1fbbad1cb6a8b1c7d33737ad72bcd9b8d9d
Validity
Not Before: Apr 17 06:00:34 2026 GMT
Not After : Apr 18 06:00:34 2026 GMT
Subject: CN=69af7484d006c3b11f0d02b7dcce6761a7634cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:52:1b:a1:c9:07:31:63:f7:9c:52:ba:0c:3d:
dd:67:ce:5b:13:4e:2d:0f:bd:36:de:3e:35:60:a7:
99:22:4d:b6:17:03:13:27:71:d1:0a:e9:0b:86:06:
85:f5:0e:1d:2e:16:b0:0f:53:18:b2:87:9c:c1:d3:
65:2d:7a:ef:34:12:45:cf:82:91:a3:af:bb:8b:db:
6e:a5:03:69:fc:f3:fb:34:18:4c:39:8f:5e:f5:1c:
93:8b:b1:92:19:ab:f9:a0:de:f6:e6:96:d9:32:12:
20:4f:b2:33:b0:52:0f:bc:fc:56:ba:f9:96:58:0f:
f2:bb:e8:79:f4:b7:dd:57:2b:97:dd:fa:a5:bc:c8:
f2:f3:c2:3a:77:71:5b:a0:9c:b0:26:c9:01:bd:98:
26:a4:c8:a6:cc:98:c9:16:bc:04:f4:3d:67:d7:f7:
f4:3c:5b:f5:98:46:73:ae:6f:e3:94:20:27:e2:03:
06:25:39:72:1f:b3:99:8a:e6:f7:68:d3:ea:43:92:
5c:cb:d1:df:4d:08:8b:ec:40:0a:74:f5:e3:8f:9b:
11:40:96:09:d4:34:66:e2:8f:dd:e9:8f:49:87:76:
4f:97:55:a6:2b:49:e1:ce:42:a7:b5:eb:8a:16:72:
89:70:b6:3e:69:1b:1a:31:56:9e:cb:a4:e2:a0:7f:
0c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AF:74:84:D0:06:C3:B1:1F:0D:02:B7:DC:CE:67:61:A7:63:4C:AC
X509v3 Authority Key Identifier:
keyid:79:A4:B1:FB:BA:D1:CB:6A:8B:1C:7D:33:73:7A:D7:2B:CD:9B:8D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cb:41:b9:c0:f6:41:f3:3e:b3:3f:1e:c5:13:3c:72:b4:5b:
31:15:ff:f2:74:24:a9:69:05:42:33:97:91:e4:55:40:2c:b9:
7a:5c:67:2b:18:f1:51:a2:0e:8f:b1:25:9e:d8:1a:e2:c2:e2:
e4:b9:85:5c:ea:ec:9e:39:10:8a:13:82:1e:8d:79:77:5b:65:
6e:ac:39:72:d9:04:ce:78:af:46:1a:de:7e:1f:fb:ef:4f:28:
18:77:da:97:e6:5d:e4:1d:4a:cd:95:ba:3f:34:4a:1f:96:52:
50:66:e2:80:76:35:49:e5:bd:ed:91:78:37:a3:b1:2c:74:de:
8c:1c:5b:bc:63:aa:ee:a5:82:87:b5:57:85:3f:6a:c9:59:35:
47:f1:cc:f1:bf:7d:75:63:35:a0:df:a0:48:02:4a:58:49:e8:
da:ee:9a:e6:57:08:16:d3:64:72:43:41:6b:1e:ff:77:85:a6:
63:b2:e9:8c:0a:8f:a9:ad:16:e8:94:28:c2:ab:10:07:52:96:
52:2f:b4:66:89:d3:e9:e5:69:ff:38:4c:f2:f2:18:34:8d:ba:
22:c7:0b:8d:cb:ea:8d:e7:58:6a:d7:b3:e3:ce:5f:ca:5c:82:
38:61:f1:88:78:69:e5:c2:33:ae:87:f1:e5:ab:54:90:bc:99:
d4:b9:a9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:50:43 2026 by rpki-client