Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft
File: eaKVyAtUwtvne6R959rsa5hgIbQ.mft (raw, json)
Hash identifier: PtpnUdQ/RhNeCeCQZUG70oIEUEfB5lXjQIibqo7n9M0=
Subject key identifier: 7A:10:88:C6:AB:C5:05:A7:7E:92:B2:76:8C:AA:36:DE:20:FB:E3:03
Authority key identifier: 79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4
Certificate issuer: /CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
Certificate serial: 019CAAFCF12A0C4FD42CE7F1669CBA58AFB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft
Manifest number: 123D
Signing time: Sun 01 Mar 2026 20:00:29 +0000
Manifest this update: Sun 01 Mar 2026 20:00:29 +0000
Manifest next update: Mon 02 Mar 2026 20:00:29 +0000
Files and hashes: 1: 2Uij-pxOnHVnKgbLzlaTvNJrBEg.roa (hash: QMyBOUs0JagxiFk9pymypWgFUOQWdS/GLJ95y8tQ9jY=)
2: X_J4w6_X_Fc-iGZp9qhcmov1r-k.roa (hash: wdUUJzFq+3Kuv79W4aMn2m3nNN36x62gheVm8ofkEhk=)
3: eaKVyAtUwtvne6R959rsa5hgIbQ.crl (hash: +ZGqLVy0DhLbzrOQ4CoYyQ10W3twhmwXT0Ai7j0SYqQ=)
4: hd9T290l9-jHLUiUH3HH4qi2O7I.roa (hash: rAF0LfiVukBYBVIh0Nvpjz0FYhd2D9fxtYrnzVkyP/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:f1:2a:0c:4f:d4:2c:e7:f1:66:9c:ba:58:af:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
Validity
Not Before: Mar 1 20:00:29 2026 GMT
Not After : Mar 2 20:00:29 2026 GMT
Subject: CN=7a1088c6abc505a77e92b2768caa36de20fbe303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:03:8b:46:bb:9c:5f:24:83:f1:0f:f4:1d:a6:
82:93:6e:dc:96:dd:58:45:3f:4d:39:e8:8e:d8:51:
9f:56:f1:22:0d:ff:44:9e:5e:99:4b:bf:7b:a2:a0:
27:66:bc:d2:b2:6c:f6:b2:4a:ae:a7:32:db:ad:80:
a2:73:be:f4:a3:53:57:bf:41:c8:4e:b8:d1:33:0f:
90:27:73:30:49:ca:03:80:d4:56:ad:2b:4f:8d:7f:
f1:09:f5:e1:07:01:91:40:fe:e6:c9:1f:00:89:ff:
01:0c:a4:98:a0:cb:ac:19:77:2a:d6:37:75:5e:d9:
33:03:27:1b:17:3e:11:98:d2:fb:a2:03:1b:27:e3:
60:de:65:e4:0a:07:93:c8:90:7d:a4:64:86:be:9e:
b3:eb:40:87:7f:a4:14:f6:ab:f1:aa:b8:00:3e:19:
a0:2f:8f:30:c1:3f:81:58:1c:e6:b3:63:9b:9a:e0:
9b:6b:57:d3:17:32:90:85:7e:66:e9:1b:98:f5:d0:
c4:c4:11:9d:50:f8:7f:e1:f8:6d:be:90:58:95:c1:
cc:5e:f5:3f:90:2e:36:a3:c4:12:3a:2b:3f:18:68:
2b:53:8d:0f:aa:09:9e:fc:47:c2:98:76:c5:03:fa:
38:7c:ce:41:a8:90:b0:5b:c9:ec:30:df:a6:79:3b:
30:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:10:88:C6:AB:C5:05:A7:7E:92:B2:76:8C:AA:36:DE:20:FB:E3:03
X509v3 Authority Key Identifier:
keyid:79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a8:8d:fa:ef:60:c0:11:a1:a8:9e:fc:83:5f:6d:81:55:32:
7d:4d:d2:4d:57:39:a5:47:73:01:b1:3c:76:99:22:7d:f9:26:
16:ff:1e:6b:b9:63:73:6a:f7:54:6b:e8:65:56:e2:37:07:b3:
09:5f:ec:02:af:0d:65:c3:8e:4d:44:a8:11:eb:56:4c:71:66:
8d:b8:74:2b:23:4f:ab:87:2b:26:7f:ab:91:0b:6b:c4:cd:1a:
a5:44:8f:55:41:53:5c:40:c8:79:d6:fb:99:7e:c8:e2:2e:d8:
a4:ca:f7:28:73:25:0d:6a:81:a9:5d:ac:c5:a6:9f:97:ed:f3:
d7:07:e3:86:c9:13:58:93:56:cd:b8:ab:3b:62:04:69:31:8b:
81:7d:c8:74:fd:25:e7:6c:b3:09:d0:9d:a1:0b:75:bf:92:fc:
5a:4e:00:3d:15:12:a0:48:2f:a9:81:b0:76:5c:30:ff:53:58:
b1:04:5d:b8:68:d9:22:4d:67:e4:dc:c6:60:d6:14:0c:a7:93:
9c:97:1d:74:62:4c:ae:7a:0f:b7:53:fb:c2:f6:b0:d6:59:32:
cf:95:72:8f:65:4c:7a:b5:16:3a:db:03:b9:92:83:b9:a7:2d:
c5:a5:57:87:f8:95:8b:38:b6:99:c0:bf:59:24:97:7f:10:03:
27:3b:47:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:25 2026 by rpki-client