Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
File: eY1wE6f9u1Zj_ThKT-0SMDFF484.mft (raw, json)
Hash identifier: Cs6Hw2Wma8q6j1XjZZkmUwJmlM7G36wytWNIO2x0RvQ=
Subject key identifier: DE:17:53:32:04:4E:B9:9F:61:4B:BE:6C:2F:AE:97:70:34:7F:E0:5F
Authority key identifier: 79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
Certificate issuer: /CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Certificate serial: 019CAC0FD032DD0587AB761DBE9025CAF3CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
Manifest number: 1371
Signing time: Mon 02 Mar 2026 01:00:43 +0000
Manifest this update: Mon 02 Mar 2026 01:00:43 +0000
Manifest next update: Tue 03 Mar 2026 01:00:43 +0000
Files and hashes: 1: eY1wE6f9u1Zj_ThKT-0SMDFF484.crl (hash: f3UbAsyv2mKRGzNUe2ScGSea0vXPObzKm397uPCw4/o=)
2: nm43m5JBni2gazwkwkpR5vwEWZE.roa (hash: vSYWgwULGrCYTXxb/vfIvAtMG0pvAZFSpwnb7bS2Sfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:d0:32:dd:05:87:ab:76:1d:be:90:25:ca:f3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Validity
Not Before: Mar 2 01:00:43 2026 GMT
Not After : Mar 3 01:00:43 2026 GMT
Subject: CN=de175332044eb99f614bbe6c2fae9770347fe05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:f4:2c:6d:d0:c9:37:e2:5b:09:ca:03:e3:
56:e1:05:6b:ab:90:2e:70:1b:c5:83:4b:ef:24:91:
72:d6:25:3f:65:c7:0a:84:ff:06:e7:aa:ed:5a:57:
81:5e:c3:5f:66:fe:8e:c9:20:d9:80:15:2d:3e:2a:
83:37:60:8a:cd:d8:eb:61:76:19:47:45:6e:2c:73:
60:ff:80:6f:e6:5e:c4:77:50:27:96:10:54:bc:35:
e8:80:83:f9:78:64:ee:29:e0:44:20:ad:45:53:01:
fe:b9:39:51:c5:18:7f:c5:de:1b:97:c3:76:17:d9:
1f:1c:b5:e3:b0:c4:06:70:2c:46:66:bc:79:b4:34:
37:6c:be:04:60:72:0c:eb:61:b2:4c:a9:25:6e:16:
c9:83:3c:41:05:6c:ef:ee:2a:d4:79:4a:0d:02:7f:
6e:b7:64:88:66:5c:48:7f:3c:1b:8c:b8:2d:22:17:
21:a9:ed:ff:cf:c5:57:94:39:ad:bd:fa:a8:ab:ff:
e5:5b:94:86:0f:c6:26:4f:3a:ee:1d:39:65:95:70:
a3:f5:48:b4:9a:92:eb:9f:fb:c0:f2:b9:8b:c5:f6:
a9:ff:99:ad:b2:b3:b3:1e:0f:36:09:12:f1:aa:12:
08:38:9d:55:80:62:3c:f1:99:d6:9e:12:a3:e2:6d:
11:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:17:53:32:04:4E:B9:9F:61:4B:BE:6C:2F:AE:97:70:34:7F:E0:5F
X509v3 Authority Key Identifier:
keyid:79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c7:10:1c:bf:7a:cb:4f:1a:a4:24:65:c3:ca:93:c9:fb:87:
1c:a7:e4:c0:f1:bf:d7:df:19:be:c4:90:12:7f:88:bd:66:b6:
d4:d1:30:99:3f:cb:ea:9a:48:96:bd:ef:f8:ab:c9:fe:ad:08:
b5:8b:2c:7b:78:63:58:b1:d9:f2:9e:a8:34:67:b9:6b:0e:f6:
ff:98:6d:fb:7f:70:fa:a6:b3:18:aa:1e:94:8c:8e:55:98:b7:
65:40:9b:25:a6:3d:07:3b:b0:e3:e7:4a:23:74:42:b3:2f:21:
57:40:ed:75:a2:e4:07:26:77:20:57:98:d1:ee:b1:f7:74:62:
0e:39:22:95:8b:4d:d6:79:3d:22:f1:f1:64:be:2d:cc:bd:ba:
8c:f5:cc:a5:f1:84:5e:d1:fd:77:cc:03:0f:71:fd:db:80:b3:
b9:75:96:66:09:58:92:cd:0b:fb:8a:5c:d7:09:07:24:16:01:
00:7f:38:e9:f2:93:68:1c:32:71:eb:73:72:32:44:80:06:a5:
14:2c:e2:55:54:a8:cb:00:11:a2:4f:23:c9:10:44:98:b2:bf:
df:31:31:85:b8:ea:30:61:3a:86:69:18:b0:c5:3f:ce:c0:14:
56:9d:b6:46:1e:7b:e0:d3:fc:b1:a3:ab:47:f0:24:73:c9:c3:
b5:9e:7f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:39 2026 by rpki-client