Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
File: eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft (raw, json)
Hash identifier: PhbwT3MYBSsV9hY2jgyx1FMMaNZyHXmyJTmdijrpA2E=
Subject key identifier: 63:41:42:E6:4C:2F:48:A2:35:E6:AF:EB:1D:BB:74:CA:DB:F9:69:FD
Authority key identifier: 79:A4:B1:FB:BA:D1:CB:6A:8B:1C:7D:33:73:7A:D7:2B:CD:9B:8D:9D
Certificate issuer: /CN=79a4b1fbbad1cb6a8b1c7d33737ad72bcd9b8d9d
Certificate serial: 019EBF918D7C889D8081045FE26EB6DC7CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
Manifest number: 018D
Signing time: Sat 13 Jun 2026 06:00:47 +0000
Manifest this update: Sat 13 Jun 2026 06:00:47 +0000
Manifest next update: Sun 14 Jun 2026 06:00:47 +0000
Files and hashes: 1: MHfXLodJ1lTLubHBUzEu-y-nQd8.roa (hash: v+heG+utge9KSHpg0rUF2i0HpIa/3KcrihN3fHNBOZo=)
2: ad2pJPLMCY9-MtsOQUWfkJzvGjk.asa (hash: znBGDedW1a6RheuPxFAgpjdNY4UU36DMoXaL/AWeESU=)
3: eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl (hash: zXi+luelm3WikpiPCwzJYGpKPPNWRTo4ZdCiYWtqV0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:8d:7c:88:9d:80:81:04:5f:e2:6e:b6:dc:7c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a4b1fbbad1cb6a8b1c7d33737ad72bcd9b8d9d
Validity
Not Before: Jun 13 06:00:47 2026 GMT
Not After : Jun 14 06:00:47 2026 GMT
Subject: CN=634142e64c2f48a235e6afeb1dbb74cadbf969fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:7f:0f:64:21:a1:c7:50:a3:b0:e9:30:1a:
c9:52:c7:92:d1:24:6e:45:d7:ba:9f:7e:70:c1:9f:
1c:06:56:83:43:ea:68:0a:b8:bd:45:10:7c:53:f7:
d0:29:7b:b1:d5:ae:85:39:6a:49:36:36:51:d6:05:
08:60:38:4e:53:83:d6:0b:8f:06:7d:b4:f3:f3:be:
4b:24:36:a4:43:cd:6e:18:48:17:ee:f4:cf:66:a0:
25:61:4f:33:8f:9c:1b:34:b6:47:13:08:cc:62:d5:
8a:ed:74:81:45:21:f7:bb:42:4d:df:7d:9a:f0:83:
58:bc:b6:8b:22:52:22:01:b5:5f:df:db:cb:1d:c3:
79:58:6a:47:f4:44:3e:44:94:11:d2:4d:03:b7:87:
8d:95:07:ca:a5:35:2a:e2:67:ad:04:aa:86:e8:a6:
b9:92:91:90:36:a8:73:d7:21:78:c5:cd:15:41:64:
2c:1f:1d:07:bd:d8:12:35:65:fd:47:4f:79:96:31:
e4:f5:94:95:12:45:c4:09:f6:3c:17:b0:89:bb:67:
7f:d6:51:94:0e:14:98:12:1d:0a:03:39:80:2c:2a:
b3:4e:b3:64:c7:67:cd:75:08:03:44:34:ae:52:8f:
e4:91:f5:bb:d7:80:3a:a8:d9:88:0a:e0:80:90:64:
61:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:41:42:E6:4C:2F:48:A2:35:E6:AF:EB:1D:BB:74:CA:DB:F9:69:FD
X509v3 Authority Key Identifier:
keyid:79:A4:B1:FB:BA:D1:CB:6A:8B:1C:7D:33:73:7A:D7:2B:CD:9B:8D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:7e:24:c3:52:53:86:3c:cd:2c:8b:97:42:da:3c:b6:9b:2c:
c2:3f:6b:29:e2:21:44:9f:56:3e:6e:ff:b2:fa:b0:c0:28:2f:
ef:40:cd:63:33:6f:8c:ac:5c:81:f7:24:1b:85:ee:48:a2:d1:
9e:a7:8c:71:cd:a0:77:ee:bc:a6:e2:a8:a5:0c:50:4e:1e:b5:
c8:ab:93:df:7e:4d:1d:7f:8e:22:7c:c0:40:0f:55:ad:02:59:
ee:d2:2f:e2:96:8d:8c:81:e6:7d:de:4a:3c:42:fe:35:47:e2:
a4:8f:18:66:e6:8f:d2:13:12:e2:98:26:4f:9f:83:38:b4:b1:
47:72:17:dc:79:96:80:1d:54:16:a2:38:c1:86:05:ab:13:78:
db:1d:c4:10:ee:ed:6d:ad:77:90:d5:93:5e:d7:ea:61:7a:92:
39:7b:b3:2e:8f:e2:d9:cf:85:ad:6f:94:d9:16:62:f1:cb:04:
35:3a:c6:b9:32:eb:21:24:bf:03:16:24:6a:17:a6:9e:5a:72:
d1:77:9d:6f:00:09:d0:51:32:7d:b6:2e:07:94:f8:6b:e5:3e:
fc:8a:1d:7e:4a:02:2e:c8:d2:a0:cc:fd:d4:77:f9:23:c7:58:
81:36:22:fe:8b:a9:35:47:6f:ea:88:49:e5:58:2a:a5:79:70:
9e:6f:b3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:14:47 2026 by rpki-client