Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
File: eQ0cp4dhMQrDmnFP9i87krLnfYo.mft (raw, json)
Hash identifier: wUfORs1h4sJ5K2lekLJJY/R56o9/IGBaUPD02j62riY=
Subject key identifier: BE:B7:4F:C1:5E:55:D3:EC:BD:91:6E:FD:C4:1A:48:54:8D:0D:B1:11
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Certificate issuer: /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial: 019CADFE3BCC76AF0F442631D51E411EF569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 10:00:45 +0000
Manifest this update: Mon 02 Mar 2026 10:00:45 +0000
Manifest next update: Tue 03 Mar 2026 10:00:45 +0000
Files and hashes: 1: EYMrlefUd_XSaWfylZCHkmVeXK4.roa (hash: 8jOCsUwGr5s+6E9DbnoIutjLx2+bBNXxqyvTsEuVuEY=)
2: eQ0cp4dhMQrDmnFP9i87krLnfYo.crl (hash: Lq4ZvEBy8boLspRnCDE9OCWc3XoxzolRrW7k1ZUjygg=)
3: xeqelJo79Mi4ptPjtrax6cg2B_s.roa (hash: t6o74vCypP/JXaPY7ExWQCtzzyBRmlLod50GjeunzUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:3b:cc:76:af:0f:44:26:31:d5:1e:41:1e:f5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Validity
Not Before: Mar 2 10:00:45 2026 GMT
Not After : Mar 3 10:00:45 2026 GMT
Subject: CN=beb74fc15e55d3ecbd916efdc41a48548d0db111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:38:0b:83:7b:d4:62:94:23:36:93:23:91:76:
0a:34:58:44:98:e8:6c:ac:21:8a:44:6e:a1:2c:23:
b8:dc:d2:61:cd:9b:e8:6c:cc:79:db:6a:1b:de:99:
bd:f3:86:da:d7:20:c6:96:4b:74:87:c3:cb:d5:31:
56:ec:d4:2c:8b:8d:40:93:d0:b8:43:20:27:98:36:
eb:7e:7e:a7:c8:53:98:ff:6c:e4:4d:99:26:3b:c4:
9f:69:3a:bb:6c:b7:85:34:9f:c4:94:dc:07:93:51:
78:cc:38:69:15:5e:62:08:ab:6a:03:2f:b5:2c:b6:
3d:b4:79:9e:cc:a2:5a:df:fe:4b:3b:e9:9f:1e:44:
81:5e:37:9c:03:8a:f0:18:b0:7c:fb:c1:ee:61:34:
b4:a4:a9:44:cc:43:3c:7c:b8:9a:24:5c:c5:e2:fc:
64:88:84:06:3d:d2:eb:1d:ed:11:89:23:3a:70:f2:
aa:e5:5e:c0:c9:3d:b8:e3:3e:c4:04:05:ee:57:fa:
1e:81:d3:79:70:c0:bc:5d:04:ee:2a:14:a6:fe:12:
c9:8d:f1:4c:6a:3f:4a:f0:23:73:14:df:4b:ae:08:
64:26:69:05:97:8e:d2:57:8d:ad:da:19:3c:38:1a:
9b:e0:83:07:1d:fb:b5:b3:41:bc:f3:39:25:6d:00:
02:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B7:4F:C1:5E:55:D3:EC:BD:91:6E:FD:C4:1A:48:54:8D:0D:B1:11
X509v3 Authority Key Identifier:
keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2a:bc:93:e5:7d:05:c6:1a:0f:43:15:77:4f:c7:1b:8a:f4:
e2:42:b1:6e:f0:99:52:ee:02:06:21:c0:0d:5a:77:0f:1b:69:
cb:53:98:8f:7c:a9:4a:18:ec:ef:15:cd:d8:76:5c:7e:fc:5e:
a4:80:e4:c8:d0:92:32:25:48:dd:5e:d2:46:b7:38:e1:0c:dd:
66:af:7b:72:a0:0d:08:b6:40:ac:a3:7f:61:87:71:15:4c:a0:
18:b1:09:58:d3:3f:db:ae:8c:ed:0b:3b:e1:14:82:75:ca:00:
e4:9d:d6:65:89:dd:71:b3:b9:f8:4b:bc:70:f1:23:30:ec:4c:
9e:9a:f7:0b:93:64:dd:fc:d1:38:0a:28:b1:b2:bf:90:c8:ff:
a8:ac:91:92:f4:c8:40:38:73:a5:2e:91:9d:62:b2:40:f3:26:
3b:9f:5b:55:92:9f:03:c9:7a:df:8b:81:6c:df:5d:d6:ff:d4:
0b:a9:fc:44:4a:40:7f:1f:81:f1:82:04:c9:da:9e:6d:f7:06:
e9:52:ee:b6:a9:d9:7d:a9:93:ce:1a:c9:84:41:75:78:f8:cf:
84:b3:c0:ab:be:4f:09:8a:92:88:3b:61:82:2f:93:53:2e:2c:
b5:55:0d:5d:55:11:38:eb:2a:be:c9:de:ec:99:01:fe:8d:09:
39:be:be:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:54 2026 by rpki-client