Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
File: eWnEvYdneAvsFhoq1hKic128q_0.mft (raw, json)
Hash identifier: X+yUGYjbphMAseVB9ibYqLZq/eB4ESlJ8XgDIYN4N00=
Subject key identifier: 09:15:D5:AB:3F:A8:E8:74:E1:F0:75:2B:1F:49:58:2C:88:B2:8C:60
Authority key identifier: 79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
Certificate issuer: /CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Certificate serial: 019CAA587A8CA487017BB366682DE9F08CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
Manifest number: 1321
Signing time: Sun 01 Mar 2026 17:00:50 +0000
Manifest this update: Sun 01 Mar 2026 17:00:50 +0000
Manifest next update: Mon 02 Mar 2026 17:00:50 +0000
Files and hashes: 1: 3L8-SFiTWU4fVJqNJH9oAV2l1y4.roa (hash: xttM0UfqMX6deZWNGbRNOdSazxn0Mbttw4sD7m2GsmU=)
2: eWnEvYdneAvsFhoq1hKic128q_0.crl (hash: 5y3ypm1HfYdQA47GsreDpzaTGayzr1bRD3X17oKP7MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:7a:8c:a4:87:01:7b:b3:66:68:2d:e9:f0:8c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Validity
Not Before: Mar 1 17:00:50 2026 GMT
Not After : Mar 2 17:00:50 2026 GMT
Subject: CN=0915d5ab3fa8e874e1f0752b1f49582c88b28c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9c:bb:47:89:c1:6d:be:64:be:8a:4d:84:b9:
2a:e6:c2:13:b1:19:57:d4:8d:14:2b:ad:bd:b1:ab:
68:3c:de:dd:db:63:c9:d5:85:94:26:21:b7:db:5b:
fa:72:9c:05:01:35:17:57:ee:42:24:f7:53:d6:b3:
8b:cb:09:b1:9e:27:71:c0:9e:f0:f9:c6:6c:85:94:
41:67:f6:29:7d:ba:80:2b:b8:66:ea:c9:fb:49:e9:
00:0d:c7:56:c2:9d:fb:29:64:02:9c:e8:b8:19:42:
8c:7b:38:4e:44:36:6f:28:ce:ce:d2:7d:3b:35:32:
a9:53:6f:68:3b:a6:66:ab:8d:b7:20:27:c0:ea:d1:
fc:22:83:ee:c3:e8:4b:79:25:19:15:0a:57:db:25:
e5:d9:4e:31:03:e8:bf:d4:f2:77:e6:b1:b3:5c:0c:
85:71:f0:2e:63:e4:d3:44:07:ba:12:bc:ae:bd:6f:
6e:10:cc:4a:92:35:32:95:21:0e:ce:3a:b6:72:f2:
e4:0f:cf:b2:9d:42:1d:ff:d1:d1:54:5e:60:a6:49:
94:3e:08:10:ed:e3:72:14:8a:4b:e4:35:e0:e3:d7:
c3:29:41:36:18:96:f9:20:c9:21:39:45:cb:08:09:
be:5b:6f:24:34:30:b6:20:63:b7:d6:25:3b:3c:cd:
94:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:15:D5:AB:3F:A8:E8:74:E1:F0:75:2B:1F:49:58:2C:88:B2:8C:60
X509v3 Authority Key Identifier:
keyid:79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:4e:f1:81:27:3a:04:8d:4d:0a:c4:2e:b4:2c:d1:28:09:96:
6b:28:4e:07:b5:01:ce:a1:fe:f6:24:ba:ba:ee:89:65:92:f1:
97:69:86:dd:3d:bf:b2:cb:cf:bd:2f:23:70:0a:3b:6b:62:b0:
2e:1c:fe:9f:ad:2d:fc:43:67:c2:fb:01:ae:31:0c:aa:fd:dc:
4d:58:9e:bf:54:3d:26:74:de:d7:9d:09:d6:98:ab:ad:b5:15:
4b:30:b2:52:4b:a8:71:ad:35:ed:66:7d:b0:ba:ea:8d:56:02:
20:3c:3f:ff:14:fe:fd:40:66:b5:cb:98:36:5a:47:8b:8b:b8:
77:0d:a8:f9:ce:4e:09:e1:64:8b:d6:2d:06:d6:79:3a:6d:60:
84:d0:ac:52:0c:0a:5a:6e:8c:7b:b4:cf:b1:c6:fb:6f:bc:2e:
b4:0c:55:de:64:73:8a:9a:5f:79:66:f6:3c:8a:75:55:63:74:
e3:c8:cf:30:77:48:91:ef:c3:bc:cd:67:2a:34:5e:e1:79:ec:
ea:8d:72:e3:2d:df:ea:29:6e:bc:4e:bb:8f:f0:ac:c7:f2:1d:
04:ee:bd:04:c5:24:c8:12:e8:dc:b7:de:b0:78:39:66:1c:e9:
b6:49:53:56:9a:73:e6:1b:77:c9:33:c3:d8:d8:85:3d:da:dd:
dd:e8:ee:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:47 2026 by rpki-client