Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
File: eQ0cp4dhMQrDmnFP9i87krLnfYo.mft (raw, json)
Hash identifier: 3gzBhd+HLKIm3UAkVXzW6ua+yHR7aGLQnSlrnpA5t70=
Subject key identifier: BC:4D:EB:9F:8D:10:35:F1:CC:7A:18:F0:14:67:AF:A3:76:8B:03:AE
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Certificate issuer: /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial: 019D97AAB261948EB2862F8CB0F986CE4A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 19:00:39 +0000
Manifest this update: Thu 16 Apr 2026 19:00:39 +0000
Manifest next update: Fri 17 Apr 2026 19:00:39 +0000
Files and hashes: 1: EYMrlefUd_XSaWfylZCHkmVeXK4.roa (hash: 8jOCsUwGr5s+6E9DbnoIutjLx2+bBNXxqyvTsEuVuEY=)
2: eQ0cp4dhMQrDmnFP9i87krLnfYo.crl (hash: 55E1ChD8Coq+5HDa90dK+xgWtj+ChQKTbncnsinf8Ws=)
3: xeqelJo79Mi4ptPjtrax6cg2B_s.roa (hash: t6o74vCypP/JXaPY7ExWQCtzzyBRmlLod50GjeunzUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:b2:61:94:8e:b2:86:2f:8c:b0:f9:86:ce:4a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Validity
Not Before: Apr 16 19:00:39 2026 GMT
Not After : Apr 17 19:00:39 2026 GMT
Subject: CN=bc4deb9f8d1035f1cc7a18f01467afa3768b03ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:97:01:25:fa:a3:93:f0:4d:38:b2:28:ba:d0:
e3:12:01:35:98:d4:b3:80:02:8f:dd:b6:e8:b2:55:
ba:eb:32:c7:a5:49:04:d0:5e:0e:98:11:4a:7e:21:
f5:cc:f8:30:a6:45:82:a1:ed:2c:86:fe:dc:d8:43:
e5:f0:e2:97:c5:6a:fe:66:5b:52:ed:26:8d:33:3f:
2f:60:1d:50:5d:98:1c:b7:73:06:3b:8d:7b:48:bc:
46:69:0b:cb:00:73:9a:78:2f:24:ba:d5:a9:09:67:
2c:dc:88:83:37:00:87:96:74:c2:fb:a5:a9:e0:c3:
68:37:25:af:82:84:a4:21:1b:50:f2:3f:f4:e2:44:
12:26:73:02:1a:d0:50:9a:57:1d:a5:8e:2d:c1:f4:
e7:02:bd:c5:ef:53:9e:ba:1c:b1:c3:69:08:58:93:
b3:3a:7b:1f:44:42:a6:b9:69:6d:0a:9b:1b:44:d4:
a4:b7:e4:7f:9f:66:2c:07:30:36:68:d3:41:83:a3:
06:c8:21:d2:74:2d:a8:3d:6d:52:85:65:ae:ef:22:
43:a2:d6:91:2c:f0:86:ac:d8:3a:a4:f7:36:2f:fa:
30:60:c5:2d:a4:8e:8f:48:70:6d:81:09:6f:5d:90:
57:88:7c:0c:70:40:9f:93:ea:f1:dd:88:2a:22:26:
1c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4D:EB:9F:8D:10:35:F1:CC:7A:18:F0:14:67:AF:A3:76:8B:03:AE
X509v3 Authority Key Identifier:
keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:94:48:bd:0b:29:4d:3a:18:20:09:88:40:01:c3:ef:b6:96:
7d:20:a1:60:1a:4b:e2:e8:9c:34:30:07:66:6a:ab:fa:d0:e1:
0f:d6:36:bc:43:4f:47:c3:71:04:55:cc:d5:3e:51:a4:81:bb:
69:47:a1:04:f2:b4:fa:83:fb:5a:22:c2:e8:47:53:b1:be:07:
8e:0f:e1:73:7c:a6:d7:19:5f:57:32:96:9c:e2:83:28:f4:1b:
93:6f:11:d9:f2:d6:bd:ef:e3:ae:03:11:f0:49:7f:ee:e5:20:
c0:bd:4b:71:37:a6:17:ac:23:04:0f:eb:a3:96:bf:ab:1a:6d:
04:0e:74:f4:78:6d:86:82:4f:1b:9b:bb:91:f0:27:8c:c0:38:
a8:b2:ee:26:21:15:6d:bb:81:b8:dc:75:f5:3c:93:44:06:1e:
ea:41:dc:1e:f7:a9:35:cd:07:21:9a:05:ec:73:f2:a3:5e:2d:
49:b4:2f:92:83:41:c6:d8:3f:dc:db:13:18:97:54:69:7b:bc:
e9:97:33:4d:f4:36:51:71:fc:63:cd:80:7f:e7:17:34:27:91:
9d:a4:b5:3d:35:39:51:8f:b6:12:d9:f4:9a:55:97:d9:6b:ab:
9c:b8:e3:c4:d9:4d:21:0c:4c:34:be:2a:f5:32:03:8e:bd:ea:
08:56:78:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:55:44 2026 by rpki-client