Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
File: eQ0cp4dhMQrDmnFP9i87krLnfYo.mft (raw, json)
Hash identifier: A7TYyJPMUbs+zjWqsp6kQM/OUB9rIPM4Lml1hHVdfUc=
Subject key identifier: AD:DE:88:F3:C9:2D:10:BE:6D:C5:E9:4C:1E:B3:61:D3:5E:54:DA:DC
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Certificate issuer: /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial: 019D999915B47F86C32FFBF57F032BC9F566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 04:00:39 +0000
Manifest this update: Fri 17 Apr 2026 04:00:39 +0000
Manifest next update: Sat 18 Apr 2026 04:00:39 +0000
Files and hashes: 1: EYMrlefUd_XSaWfylZCHkmVeXK4.roa (hash: 8jOCsUwGr5s+6E9DbnoIutjLx2+bBNXxqyvTsEuVuEY=)
2: eQ0cp4dhMQrDmnFP9i87krLnfYo.crl (hash: j5N+oeUp7niElnnuMgxCPBbGY/4ktX4Y5mDtG91vI84=)
3: xeqelJo79Mi4ptPjtrax6cg2B_s.roa (hash: t6o74vCypP/JXaPY7ExWQCtzzyBRmlLod50GjeunzUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:15:b4:7f:86:c3:2f:fb:f5:7f:03:2b:c9:f5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Validity
Not Before: Apr 17 04:00:39 2026 GMT
Not After : Apr 18 04:00:39 2026 GMT
Subject: CN=adde88f3c92d10be6dc5e94c1eb361d35e54dadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:50:63:99:fd:19:a4:a2:71:96:df:52:fa:17:
f0:4c:e6:ec:80:8c:8e:6c:af:e8:ec:a1:64:50:78:
ed:b0:b6:23:5b:a2:74:4b:02:89:a2:6b:16:16:e8:
ff:b0:04:a6:55:fa:44:84:a9:5a:df:bb:82:a2:7a:
fd:94:c7:93:23:2d:7b:95:86:81:d8:e8:af:10:bb:
69:65:bb:b8:c6:9c:33:3f:e7:93:a1:67:87:07:46:
e7:8d:ee:2b:b7:bb:74:6f:b0:7f:b1:95:6f:56:70:
8c:83:b2:da:14:59:58:33:4e:c9:b2:b1:48:19:d2:
5f:7b:8c:04:73:3d:ca:0b:e2:bb:1a:b0:86:0a:15:
3d:7d:09:7c:19:9b:ca:cd:03:65:1a:42:25:26:d4:
83:b3:e2:f9:e6:6a:93:37:d4:64:42:3a:0a:1a:e6:
76:ed:2e:0d:35:5f:d2:a1:5b:8f:14:36:d7:06:0a:
84:3e:da:da:cd:8a:8e:03:7c:74:7d:c2:c1:5e:cb:
58:83:67:88:65:c4:fe:ac:c1:88:18:43:57:70:b1:
a8:1f:42:93:d8:b9:bf:10:9e:58:a8:e8:9e:92:29:
9c:6c:77:48:81:f0:a3:39:e0:f7:ef:f7:f9:12:aa:
46:0e:b2:ce:87:54:a7:11:61:99:45:6f:13:d7:1d:
93:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DE:88:F3:C9:2D:10:BE:6D:C5:E9:4C:1E:B3:61:D3:5E:54:DA:DC
X509v3 Authority Key Identifier:
keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:17:d5:5f:63:e7:d0:34:f5:de:9b:c9:75:69:fb:bc:a2:2a:
5c:73:e2:b0:99:23:da:7c:d1:51:03:b1:16:f9:ab:f7:8a:98:
bf:de:07:9e:45:29:d4:67:b8:61:43:2c:34:f2:26:9a:63:e5:
0d:51:fc:ae:30:8b:18:94:80:11:44:88:f5:98:05:47:17:b8:
93:29:25:41:d7:ba:72:08:07:46:ca:c9:0d:94:4f:38:5a:e3:
8b:04:8b:58:f0:32:9c:dc:e0:f6:ff:08:15:9a:3d:0a:68:56:
b9:05:e7:d3:2c:79:1d:01:0a:3d:d2:e8:06:98:44:b6:3d:1c:
9a:ce:d0:a3:39:37:13:de:fd:16:ae:1c:e5:ff:bc:5d:82:79:
48:f6:19:30:39:31:29:dd:15:c5:1e:1f:b1:54:59:1d:32:6a:
18:55:93:6d:49:8b:7e:69:fe:2e:d0:ad:ce:5f:34:c4:15:8f:
8c:5a:13:46:f6:a1:cf:a7:5b:06:09:8d:2f:c3:de:14:34:50:
df:40:1e:d0:e6:8c:a4:1e:08:e8:b4:20:cc:3e:f0:e6:68:3b:
e7:a2:da:95:39:23:e8:3f:b2:9b:1f:ce:eb:bb:39:4e:ce:c2:
e1:4b:80:1d:15:e5:27:59:47:58:34:9d:cb:4a:89:8d:9c:4a:
0a:cd:32:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:57:07 2026 by rpki-client