Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
File: eKwxY10JG-YVV0MxH-HbfHrzR3s.mft (raw, json)
Hash identifier: WKHay0SEfBpjaliGQKlkjNPBri/PCLVmRSHlr2HcMRM=
Subject key identifier: 31:96:88:F2:56:94:AD:A7:01:67:FA:B9:EB:48:17:6B:A0:EA:7B:C5
Authority key identifier: 78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
Certificate issuer: /CN=78ac31635d091be6155743311fe1db7c7af3477b
Certificate serial: 019CADC7BA613A744379A3460FF7B4900DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
Manifest number: 0CA1
Signing time: Mon 02 Mar 2026 09:01:13 +0000
Manifest this update: Mon 02 Mar 2026 09:01:13 +0000
Manifest next update: Tue 03 Mar 2026 09:01:13 +0000
Files and hashes: 1: VTBtuhupQkN3XNWCGG-SctrmNSc.roa (hash: MVRP12soTEVvkQMP4sWQe+ZD2ED7nGpPqffJ2oNbKlE=)
2: Yx6WCtdaJX-lZhNYpyoP3qTRTWA.roa (hash: SA4NVslryO/GKYfRH6uU7OXQ/zmv533QvWL9j3NGE/I=)
3: eKwxY10JG-YVV0MxH-HbfHrzR3s.crl (hash: SFdKOEY/Rha472ZduPN9J+QuhVzChpCAv2iVXjz6T4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:ba:61:3a:74:43:79:a3:46:0f:f7:b4:90:0d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ac31635d091be6155743311fe1db7c7af3477b
Validity
Not Before: Mar 2 09:01:13 2026 GMT
Not After : Mar 3 09:01:13 2026 GMT
Subject: CN=319688f25694ada70167fab9eb48176ba0ea7bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d7:cb:b6:8d:93:05:cc:fb:91:f7:b7:33:b7:
cb:28:f5:d1:59:e5:8e:60:06:00:f3:c3:f0:f4:07:
08:21:94:9c:03:dd:47:c6:0f:2b:c5:76:79:f3:85:
ee:66:82:50:da:19:dc:a8:5f:5c:15:0a:9e:3e:7f:
3e:a6:56:79:36:ca:59:4f:b3:cd:00:df:ca:3c:01:
f7:d8:36:31:5d:a5:2b:8c:50:f5:38:e4:de:6b:6c:
47:e6:02:7f:1e:d5:50:f9:15:03:0e:de:13:fb:17:
df:06:75:97:e7:3f:bb:93:8b:47:d7:c6:0f:83:cc:
dc:82:ba:16:26:9b:d3:66:6f:0c:b4:bd:60:2c:f9:
01:40:2f:90:bd:2b:4e:bd:07:42:c2:b1:52:c2:31:
39:9f:24:2c:03:cf:26:46:08:72:5d:43:26:a4:21:
46:8f:ee:ad:88:a0:0d:e3:d0:85:b6:49:69:09:df:
91:99:34:94:58:90:f3:5f:1e:ce:a9:3c:ec:da:18:
4b:fc:d9:1a:b1:71:ac:7c:b1:5e:c2:d7:50:fa:fc:
b7:af:8f:25:9e:35:2b:9b:97:68:7f:ae:27:9f:64:
ca:6e:8b:81:ff:3f:97:b2:3b:1a:b3:93:8b:c1:64:
5e:ce:67:d4:35:55:04:da:b0:0e:0f:fa:d6:91:09:
12:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:96:88:F2:56:94:AD:A7:01:67:FA:B9:EB:48:17:6B:A0:EA:7B:C5
X509v3 Authority Key Identifier:
keyid:78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9c:e5:9a:5c:fb:ea:9c:bc:7b:fa:68:63:cb:d6:67:d0:bf:
c5:ee:5e:db:30:45:10:1a:54:15:d3:f3:66:53:f8:02:55:04:
ac:04:1a:17:b6:e0:74:9f:63:9d:3c:fd:b8:5e:61:31:50:7d:
52:3e:ef:dd:1e:48:47:dc:14:c8:e3:fe:22:cd:08:91:09:ab:
30:30:53:9a:3b:74:5d:ce:d2:8e:fc:9b:f1:16:88:a5:12:78:
54:84:03:ae:6b:d4:db:d2:0b:87:2e:61:b0:65:f8:a4:61:fe:
c1:27:05:29:c4:5f:cd:81:25:9b:86:bd:50:49:fc:a8:00:84:
c0:65:b6:47:05:d3:e3:74:4e:10:fc:c3:86:00:63:ea:77:be:
29:c8:bc:25:bd:ba:9f:6e:9a:29:e9:91:51:26:89:18:e5:7f:
f1:9e:d8:0f:e3:d8:28:e9:4d:f5:8f:42:76:0e:66:6a:27:6d:
a0:90:73:35:65:93:cd:f6:9a:d3:8f:a8:1f:c6:9a:cb:64:12:
28:44:92:5a:af:ea:e3:91:45:7d:92:b5:1f:15:5d:cd:70:d8:
49:ad:e7:4e:b5:79:aa:13:d2:2d:3d:37:91:09:25:9a:30:dc:
0a:c3:4f:53:e1:b3:e8:77:fd:92:8a:84:90:55:fe:8a:c2:4c:
84:67:59:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:48 2026 by rpki-client