Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
File: eQ0cp4dhMQrDmnFP9i87krLnfYo.mft (raw, json)
Hash identifier: WXq1nCS93e94iobfERPCLOHjFGebG2VKGOxWbKv0OyA=
Subject key identifier: 47:9D:C8:15:E7:A4:FE:24:0F:D1:3A:0D:F4:B2:B2:3C:CB:0D:DE:F4
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Certificate issuer: /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial: 019FA8CFF92317C1F66B3248F205E13965D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 13:00:29 +0000
Manifest this update: Tue 28 Jul 2026 13:00:29 +0000
Manifest next update: Wed 29 Jul 2026 13:00:29 +0000
Files and hashes: 1: EYMrlefUd_XSaWfylZCHkmVeXK4.roa (hash: 8jOCsUwGr5s+6E9DbnoIutjLx2+bBNXxqyvTsEuVuEY=)
2: eQ0cp4dhMQrDmnFP9i87krLnfYo.crl (hash: rLzEgmz5R9+WCZUyppLzWgFrz3C9SDrMfpQ373Ftf7Y=)
3: xeqelJo79Mi4ptPjtrax6cg2B_s.roa (hash: t6o74vCypP/JXaPY7ExWQCtzzyBRmlLod50GjeunzUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:f9:23:17:c1:f6:6b:32:48:f2:05:e1:39:65:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Validity
Not Before: Jul 28 13:00:29 2026 GMT
Not After : Jul 29 13:00:29 2026 GMT
Subject: CN=479dc815e7a4fe240fd13a0df4b2b23ccb0ddef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5f:70:96:5e:f6:e2:1a:d9:eb:12:a7:7d:d8:
05:7c:32:26:b1:9a:3f:d2:16:5b:6f:dc:6b:54:23:
e9:98:c7:8f:fa:0d:e4:25:5d:98:26:e2:bc:40:46:
11:ca:fd:9c:f9:b7:1a:7b:2c:ea:b3:25:aa:4c:de:
a7:1c:1e:e2:14:99:c4:82:08:0b:6b:0b:67:90:50:
ea:c1:bb:db:2d:4a:7e:25:9f:af:89:68:ba:2f:a0:
a2:6f:57:be:0c:8c:2d:a0:1f:fb:39:e1:82:da:95:
05:ec:59:cd:1f:3c:7b:43:9a:3b:ce:aa:b5:08:55:
49:92:a6:57:9d:96:bc:f2:ca:7f:b7:b9:0f:b8:c5:
be:79:b6:7d:92:c3:4e:ec:48:03:24:78:04:79:46:
72:20:6f:fd:cf:32:8d:e1:ac:5a:30:92:93:e0:05:
96:75:46:96:92:c6:a1:f9:0f:82:27:88:38:7e:73:
8f:6c:34:ec:ed:58:69:79:ae:09:5f:13:4e:f8:e8:
ba:ad:f6:21:3d:f4:34:6a:ca:9b:95:b7:0e:6d:c4:
c2:cd:85:0a:11:8f:ba:95:97:5f:8d:00:ce:b9:92:
22:c6:00:b4:05:c1:17:a9:d7:25:24:cb:6d:b4:e0:
e1:68:47:0d:65:b3:80:07:dc:be:d7:d2:22:3a:4a:
63:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9D:C8:15:E7:A4:FE:24:0F:D1:3A:0D:F4:B2:B2:3C:CB:0D:DE:F4
X509v3 Authority Key Identifier:
keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:8d:96:ba:95:e7:7b:8b:57:f3:10:3b:17:a3:40:b5:08:75:
44:af:fa:66:01:bb:7a:e4:50:82:77:58:37:2a:17:cb:a1:a0:
e4:8a:f2:bc:b6:49:df:09:de:42:48:f7:72:be:67:7f:fb:e6:
e7:78:18:c7:0f:e2:fe:e0:e9:c3:7b:76:45:7f:5c:0d:1e:c4:
65:ac:b4:cf:06:3c:3a:29:c6:bf:1c:0b:ac:b0:81:3d:ca:70:
7d:77:dc:6e:79:77:ff:18:6a:2c:22:73:86:8b:46:78:33:b5:
b7:dc:33:9a:15:bf:0e:df:b9:ce:44:ba:c8:18:28:68:73:c2:
91:e7:76:46:91:12:97:dd:a3:f8:24:39:16:6c:2e:af:54:a0:
5e:72:a7:65:73:fc:f1:d7:19:1a:de:71:c1:28:eb:66:3d:87:
1d:5c:06:b4:fc:87:cd:9d:73:58:0d:9d:39:fd:dc:15:fc:ef:
39:e7:21:47:27:fe:df:09:a0:50:d6:d1:6d:85:73:5d:34:a7:
8c:b4:d2:b4:91:05:4f:12:23:eb:16:98:05:8a:d6:cd:2c:e8:
47:80:e6:a6:33:ef:91:ab:31:e7:99:d4:51:74:90:3f:c0:a0:
31:f5:36:ee:b2:6f:a3:57:5e:14:03:2f:57:d0:c5:7c:e8:6d:
21:67:f4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:17 2026 by rpki-client