Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
File: eYvLVDKkXyWwQQOWerQDwp0NQwo.mft (raw, json)
Hash identifier: WkDzHIJnn0CvzoZzjOaPegjcr/qMut7jdo7zCRGv2GY=
Subject key identifier: 42:E5:33:B3:A4:92:E7:12:56:82:2A:ED:E8:42:44:0F:16:FE:C5:F7
Authority key identifier: 79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A
Certificate issuer: /CN=798bcb5432a45f25b04103967ab403c29d0d430a
Certificate serial: 019CAAC66F446DFC3B37043D3A4DFE259BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
Manifest number: 0F33
Signing time: Sun 01 Mar 2026 19:00:57 +0000
Manifest this update: Sun 01 Mar 2026 19:00:57 +0000
Manifest next update: Mon 02 Mar 2026 19:00:57 +0000
Files and hashes: 1: dCyoKR5apw3K_fSnvb1rgkMrMws.roa (hash: DGTBczW2NPAlgw2GdKvgzlgm3Sxc4ppIF+D7Dpe6V40=)
2: eYvLVDKkXyWwQQOWerQDwp0NQwo.crl (hash: 6kLUrifvXfssBp9dXKU0u4kNpnWrvmwIaF3OkdJrEx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:6f:44:6d:fc:3b:37:04:3d:3a:4d:fe:25:9b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798bcb5432a45f25b04103967ab403c29d0d430a
Validity
Not Before: Mar 1 19:00:57 2026 GMT
Not After : Mar 2 19:00:57 2026 GMT
Subject: CN=42e533b3a492e71256822aede842440f16fec5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0f:ee:ee:b2:3b:a0:9d:21:bf:79:2d:e8:3d:
a1:a3:04:15:12:37:a4:10:a3:4c:e8:7a:d7:9c:d1:
98:a4:87:6d:96:24:c3:b1:6d:63:87:73:31:03:d2:
7b:c1:1d:5b:43:6b:f7:b2:c0:51:7e:5c:e1:13:a5:
a8:40:40:9c:56:2c:69:3f:14:43:5f:0b:7f:4e:38:
23:84:f5:c7:f5:77:b0:bd:51:9a:82:34:08:d1:af:
36:b3:e8:af:56:25:b0:a4:d6:ec:d8:b4:e4:44:41:
3f:b6:bf:dc:a4:47:12:23:10:95:bf:08:31:de:c2:
28:5d:27:48:09:00:98:ee:4a:7a:37:27:1b:93:eb:
2d:a4:53:e6:4a:09:f3:3b:13:08:f7:93:99:a8:c1:
ba:4b:94:94:cc:05:6f:b0:42:00:4e:59:b0:fe:ec:
22:3e:18:12:9d:c6:f8:1e:31:20:5c:19:a4:28:c2:
b2:59:f4:3d:1a:ca:0f:43:5e:42:82:14:53:d2:fe:
18:56:10:7b:5f:4a:4f:bb:49:3d:0e:84:21:86:8e:
dc:89:f2:88:06:7c:06:7a:68:8c:92:26:8a:09:6f:
77:4f:66:b1:c7:9d:be:50:4d:02:ac:2f:12:62:ea:
ea:38:40:3c:c4:bf:a0:b3:ec:4d:79:f7:d6:23:91:
25:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E5:33:B3:A4:92:E7:12:56:82:2A:ED:E8:42:44:0F:16:FE:C5:F7
X509v3 Authority Key Identifier:
keyid:79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:55:dc:06:c6:b3:79:7c:03:8c:3e:b6:76:40:c7:13:9f:a1:
d5:b9:11:e1:87:e2:ec:14:c6:41:86:33:19:3f:94:84:8a:6a:
e4:64:e4:af:cf:27:4f:80:f0:70:a8:bc:59:4c:6d:0c:32:38:
32:ab:70:a9:70:ca:e1:a2:47:cb:eb:59:10:0e:e6:e6:3b:e2:
2d:65:8f:2d:72:8e:6f:77:46:c4:f8:47:d6:f7:90:36:a8:c7:
72:4f:18:d4:4a:16:57:71:f2:08:7d:d2:c7:fb:35:e4:b8:d9:
13:ac:5b:93:c8:4b:51:21:39:fc:4f:fe:68:f0:64:0f:4e:eb:
e8:0e:ca:f4:49:3b:c6:90:bf:bd:e2:e9:f8:36:58:a8:c5:cc:
5a:59:70:09:8e:51:42:5e:d9:0a:de:c7:be:3d:b9:2b:25:9d:
4f:d7:3e:7a:82:fc:e2:5e:f3:e0:5e:a4:bd:3b:0c:da:bb:5b:
3b:1e:13:5f:ba:59:86:42:83:cc:76:96:fb:c5:d4:1a:8f:5e:
3c:fc:56:6d:d1:fe:68:5d:69:1e:fa:1c:75:a0:a0:79:b9:4e:
2e:c1:9a:73:74:8d:ae:17:43:2e:db:26:ba:c4:b6:0c:bb:54:
3c:5b:03:c1:f7:4f:61:63:f6:c5:7d:72:00:c7:aa:c1:29:3f:
b5:86:1e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:23:38 2026 by rpki-client