Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
File: eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft (raw, json)
Hash identifier: k8/qF8GarNMbfG5bLycqwZu0j6/DlJerQdXXenV0A78=
Subject key identifier: 84:39:E4:9A:41:96:D5:72:2F:9B:8D:8D:DD:A8:D0:68:C4:B4:D0:CD
Authority key identifier: 78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
Certificate issuer: /CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Certificate serial: 019CAA587700573B3917AD64FE9793C247FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
Manifest number: 08B8
Signing time: Sun 01 Mar 2026 17:00:50 +0000
Manifest this update: Sun 01 Mar 2026 17:00:50 +0000
Manifest next update: Mon 02 Mar 2026 17:00:50 +0000
Files and hashes: 1: 5VmOpi03r_fL6ZM9_FCqD-4ELvY.roa (hash: 4huAnYa6nby7innz6R7TqYphvP6rJYEBi+2SzImbtCI=)
2: 770u0l1B70bIL0OjL2bsRR1d2sY.roa (hash: uO5mw4nMU516BWnsv4GqL4pOVudc9WSSFB2GhY5zuAU=)
3: eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl (hash: 2mvjOrodslN8JERHK+qXvDdtfSFjY/RozM/Wo0PYMZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:77:00:57:3b:39:17:ad:64:fe:97:93:c2:47:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Validity
Not Before: Mar 1 17:00:50 2026 GMT
Not After : Mar 2 17:00:50 2026 GMT
Subject: CN=8439e49a4196d5722f9b8d8ddda8d068c4b4d0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:c2:6f:35:18:0c:c7:02:19:0a:bf:75:03:
e1:97:26:95:30:53:83:ab:0a:ca:96:5b:3f:08:a4:
ca:21:36:63:b2:60:5b:20:f7:f3:40:69:21:1c:1b:
68:1a:90:26:5f:4f:f1:06:53:88:65:87:87:72:9d:
27:00:2e:c7:bb:b9:0f:4d:6e:0e:af:94:1c:2a:75:
74:8e:02:6e:4c:dd:70:ce:7e:09:0a:8c:a4:c1:cd:
0a:6f:00:64:5a:cb:fb:2f:bf:ef:72:35:ab:a8:3d:
f4:e2:35:ee:96:78:85:57:3a:f0:5b:51:ea:43:96:
04:d7:88:20:b7:29:43:f0:a0:6c:37:33:cc:24:08:
d4:bd:de:bb:f1:c5:39:74:c6:03:fb:57:c6:98:34:
75:37:4e:04:ef:c3:9e:52:63:52:01:66:c7:ae:9d:
cf:5d:2a:92:f4:f0:f6:91:93:0b:e3:d0:6b:e0:49:
3a:25:10:c9:39:51:f2:53:3e:dd:76:a1:72:5d:b0:
ee:39:ac:85:be:38:24:e2:be:4d:a1:9b:c9:61:68:
cd:5b:dc:d3:a7:95:dc:09:5f:f6:f4:85:c2:be:4e:
53:ba:9c:ad:3d:55:27:cb:09:c3:5c:b5:17:36:1f:
69:44:b4:33:d1:68:d9:c7:7d:1f:52:6f:49:52:05:
47:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:39:E4:9A:41:96:D5:72:2F:9B:8D:8D:DD:A8:D0:68:C4:B4:D0:CD
X509v3 Authority Key Identifier:
keyid:78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:69:73:e6:ea:f6:fc:d1:a7:9d:58:b8:ce:75:c6:42:3d:95:
44:43:de:7c:b8:af:42:67:d7:98:54:ca:9f:1e:dd:c3:70:a0:
92:19:94:5a:c6:e5:b5:57:23:77:19:2b:16:14:4e:bb:cd:fd:
d6:56:bf:a3:4f:ae:6a:a7:9c:fb:11:02:ae:ec:e4:b5:8e:dc:
06:4d:b3:05:2f:ed:49:7c:ca:5c:f0:5a:54:e6:3b:9a:c1:ee:
a3:a3:12:5e:a8:10:77:8c:02:b5:81:b6:3e:4c:27:89:69:93:
47:79:38:13:fe:3a:31:1e:bb:4d:f5:d5:02:3f:08:56:d7:97:
05:21:9a:a8:f5:bd:24:e0:eb:63:2f:1e:0e:e7:0d:98:0b:5a:
9b:7c:1d:cb:f7:06:52:12:ec:7c:22:70:10:73:4a:78:dd:d1:
a6:a1:7c:01:ff:5d:e7:a4:32:01:16:9e:78:04:ca:23:d6:4f:
cb:f1:23:f2:ab:ba:ae:d0:f4:48:80:bb:5e:8e:29:5b:83:fe:
05:a1:5a:53:b3:88:80:7b:6a:88:db:76:d9:11:00:66:7a:b3:
c4:35:dd:fc:6a:e1:b1:70:9c:4e:05:1e:0f:c9:aa:f4:9c:cb:
2b:b6:18:83:0a:66:5b:c8:f1:75:83:a8:d2:fc:03:80:0d:22:
7a:de:91:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:55 2026 by rpki-client