Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
File: eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft (raw, json)
Hash identifier: NY9Ka7sSEpOsER0JJHuJQgOn6D+CNzdHJeV53sPIhkg=
Subject key identifier: A2:4D:70:6A:61:B4:7A:8F:B7:51:BD:9F:1E:1F:DC:96:D2:DE:05:AB
Authority key identifier: 78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8
Certificate issuer: /CN=78024d480b37705fa0091b5774174e80fdd8add8
Certificate serial: 019CAB344842E29C02118D903ECACDA3316F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
Manifest number: 1133
Signing time: Sun 01 Mar 2026 21:00:56 +0000
Manifest this update: Sun 01 Mar 2026 21:00:56 +0000
Manifest next update: Mon 02 Mar 2026 21:00:56 +0000
Files and hashes: 1: LT7GFR0jf0xcBNNPyycF_GViPzE.roa (hash: oFSEPnzKQMXkquMCR19L9olzLlP6zAcGwbhD6Y2o3Lc=)
2: eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl (hash: YZ73LiHthVYbxiaWuLiApGazuUnAb9cpmG/cggN5r8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:48:42:e2:9c:02:11:8d:90:3e:ca:cd:a3:31:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78024d480b37705fa0091b5774174e80fdd8add8
Validity
Not Before: Mar 1 21:00:56 2026 GMT
Not After : Mar 2 21:00:56 2026 GMT
Subject: CN=a24d706a61b47a8fb751bd9f1e1fdc96d2de05ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:47:9a:3d:5a:62:47:23:12:69:ba:27:d0:69:
c4:9d:7e:f1:3f:68:29:fb:e6:e4:1a:9e:92:92:3f:
8b:fc:14:78:f1:16:29:7d:fa:2c:eb:c3:a3:48:03:
43:98:08:10:d1:49:bf:42:08:3b:92:68:3b:ca:3d:
c7:d6:c0:c8:96:c5:1b:1a:aa:ad:82:a2:e5:89:ec:
b3:7a:bf:3f:18:a4:09:d2:70:10:04:6f:c2:15:54:
04:23:a1:ad:91:12:5c:84:d0:12:a7:a5:f9:63:da:
9a:49:5b:ff:aa:f3:34:90:e7:72:8f:7f:59:aa:64:
b1:03:25:6f:e5:02:97:81:1a:80:07:77:5a:16:e3:
c0:e6:b7:d9:86:ab:11:5e:ad:d7:90:86:1a:20:ca:
30:38:3c:b5:2a:c5:ad:9a:fe:73:d6:44:94:57:81:
5e:54:78:46:af:17:d4:cc:af:d3:23:9a:40:28:c8:
c5:81:2e:f9:42:95:16:c4:7d:c5:66:60:74:58:2c:
42:9c:e2:30:d1:bc:55:44:be:21:e9:c4:4b:dc:48:
34:0e:81:74:33:ff:99:ff:4e:ba:d8:2f:9a:a6:55:
e6:d7:1c:42:04:9c:c0:11:6f:69:58:c7:1c:b7:c4:
10:18:3d:3f:af:3c:af:0c:b6:68:35:c3:ac:e3:ce:
27:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4D:70:6A:61:B4:7A:8F:B7:51:BD:9F:1E:1F:DC:96:D2:DE:05:AB
X509v3 Authority Key Identifier:
keyid:78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c0:65:f0:71:3e:b6:0e:a0:8a:56:f4:8b:a3:b7:36:98:fc:
90:43:1e:69:04:a9:b5:9b:a6:bf:48:0b:4b:a4:14:94:9f:f2:
6a:60:f5:97:c7:10:a1:8c:4f:79:42:7f:be:d3:c8:c1:af:84:
f8:2d:cd:57:65:1a:d7:05:c9:d6:ce:a8:70:05:c8:ae:1a:c2:
87:67:c0:e8:eb:69:fc:f4:1a:8c:ec:db:6c:69:ca:0c:45:fd:
1f:fb:cb:e2:a3:5c:39:a3:5d:6f:6c:55:68:70:6a:5a:0f:52:
d1:6b:da:c3:51:87:ec:ee:ba:b2:53:22:49:56:63:c9:8b:50:
9c:f3:6b:f0:b4:3a:29:9a:5e:9c:ce:4e:56:7f:c8:c3:99:8d:
fb:f4:ee:58:8c:cb:df:1f:50:57:41:f9:e3:74:60:9c:5d:d1:
3a:b2:ab:99:e2:02:1f:85:ae:a7:29:c5:d6:ad:46:50:f5:cc:
c2:13:fb:fb:fa:8a:37:ee:66:8c:61:78:10:a2:19:2e:6d:0a:
d9:c2:00:0f:74:73:67:8e:0d:9a:68:48:7c:42:94:ea:6a:52:
6b:46:c0:3b:66:66:ad:11:52:7a:16:ab:82:76:23:a4:26:69:
b6:dd:d6:3a:1f:79:e2:ae:8b:b3:ca:71:ff:48:92:5c:98:51:
09:11:f5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:06 2026 by rpki-client