Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
File: eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft (raw, json)
Hash identifier: cQXTfrs/hSZGHzYAybWHKIX439K5ytBrs7AJAwyqj14=
Subject key identifier: FD:87:DE:5B:DB:13:68:52:F6:FF:37:76:CF:5A:75:EB:F8:3C:B4:C5
Authority key identifier: 7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
Certificate issuer: /CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Certificate serial: 019D9A3E8B0FFDCAADF69C87ADD297C222C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 07:01:23 +0000
Manifest this update: Fri 17 Apr 2026 07:01:23 +0000
Manifest next update: Sat 18 Apr 2026 07:01:23 +0000
Files and hashes: 1: JMihaMAdn0ZWhahng99-PNdrUaY.roa (hash: csBLW4NyC54K0QK0MKH2YJqzIewsSYbBszldoM71OBA=)
2: eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl (hash: ubeL9hrmm1GoSVhwJdvkKj5jVhS54JiA8CYZMuXR5as=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:8b:0f:fd:ca:ad:f6:9c:87:ad:d2:97:c2:22:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Validity
Not Before: Apr 17 07:01:23 2026 GMT
Not After : Apr 18 07:01:23 2026 GMT
Subject: CN=fd87de5bdb136852f6ff3776cf5a75ebf83cb4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ae:25:16:5b:84:da:c2:14:88:4e:bd:25:15:
31:5d:8f:b8:7d:86:fa:19:4c:27:89:4b:fd:fa:bf:
60:5f:18:23:4c:6c:12:07:a2:41:9f:b9:a1:21:87:
eb:26:48:7d:0d:88:09:c8:fe:7c:5b:e6:22:40:49:
72:c5:16:e3:4e:6c:c0:a2:2e:35:08:44:4c:87:fe:
f6:c7:dc:e7:66:f4:b5:06:79:e2:d6:1f:50:50:50:
48:69:fc:d1:f6:07:28:d0:32:79:dc:d7:39:72:59:
16:5c:7b:da:81:f8:7a:5a:9c:93:70:70:2d:f1:a3:
e7:ee:9a:fe:9e:cd:f7:e9:cb:0e:48:c2:00:b4:28:
19:55:1c:87:5d:e3:89:49:3a:3d:32:5c:35:9d:b5:
51:7a:de:c6:6a:d0:46:b3:97:66:51:ee:bd:8d:3f:
84:e4:8e:30:b1:7d:af:81:67:14:34:ca:66:37:47:
86:7e:c1:dc:26:cc:d7:0b:3d:2a:6c:5c:cc:a3:e8:
39:9b:f9:71:56:84:b4:5c:79:6b:b7:06:c6:23:1d:
ed:ab:b6:b7:79:04:98:d8:3b:f0:ff:71:5d:ff:bb:
d3:4b:64:54:bc:bd:f9:7b:00:83:79:60:c4:56:90:
b3:a5:bf:b5:74:32:c6:dd:6f:a5:b0:a9:d8:f9:4d:
c4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:87:DE:5B:DB:13:68:52:F6:FF:37:76:CF:5A:75:EB:F8:3C:B4:C5
X509v3 Authority Key Identifier:
keyid:7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:05:c0:c7:ab:cb:d6:dc:53:6b:fb:39:fd:2b:59:a0:8c:02:
53:b1:8a:d7:a5:66:3d:b6:99:0b:4f:6b:c3:94:f5:6e:46:3a:
2c:aa:4d:9e:58:60:df:2e:72:fa:d9:a1:ec:b8:87:10:fb:76:
2b:47:a8:9d:61:40:70:eb:f9:17:15:91:0d:f7:bc:7e:59:ec:
70:44:72:72:a3:eb:ea:b3:43:b3:7f:45:08:23:55:b6:d8:ef:
4e:92:a7:ff:66:76:6b:b3:fa:56:e0:70:62:6c:0e:07:b2:6b:
1e:99:52:bd:0f:8e:6c:fb:55:f9:48:01:a0:10:7e:dc:f4:ed:
02:67:46:02:4a:9a:a9:a8:b6:dd:ee:1a:ea:d6:0d:a6:4a:83:
a6:82:26:64:8d:86:ae:02:f2:08:00:70:86:d2:b7:80:4e:1a:
68:01:c4:0d:36:1c:40:e1:6c:52:56:dd:b0:29:ab:69:70:68:
da:5e:87:f5:b3:61:c9:c1:bf:b4:5a:9a:72:60:01:24:34:1b:
8a:c7:42:ee:1f:b1:81:f3:18:c7:35:f4:6f:e0:8b:32:5b:30:
e3:58:dd:79:03:e5:66:e3:57:f7:ce:77:35:14:c6:ae:9f:e8:
68:da:0d:f3:a3:84:f5:f4:17:bd:79:59:3f:1e:28:b8:41:d8:
a8:c2:bd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:52:53 2026 by rpki-client