Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
File: eyqKwwKLcJEcthEf_aOi7-VYhi0.mft (raw, json)
Hash identifier: RZ/80GemeQ37q8NJi09ziy8Sw8EadA6PNux9IGRuLlU=
Subject key identifier: 1F:E8:C2:B2:BF:AB:A0:8F:58:1E:C9:90:9C:EB:27:5C:3C:CD:6A:1F
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 019D99627DD4787D7A8871CE6427CAF0B5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:01:01 +0000
Manifest this update: Fri 17 Apr 2026 03:01:01 +0000
Manifest next update: Sat 18 Apr 2026 03:01:01 +0000
Files and hashes: 1: QKSBmP3gzvhQzJUUPBNcCLWHKHM.roa (hash: KF0eVyAAEY8VGFQ1+W9WFibrhH45a/vXshpeDiUAhF0=)
2: eyqKwwKLcJEcthEf_aOi7-VYhi0.crl (hash: 2LfUeQHHMwmkhKwbO6YCwQJFp0YtDzwBCNxGl9n7lzc=)
3: ycdkqwKUZrrAqLHqkXN7UpQhhcY.roa (hash: eyPv8WnShqVImAMmncYrIFp/3E9eBCBd7q2DigUVUPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:7d:d4:78:7d:7a:88:71:ce:64:27:ca:f0:b5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Apr 17 03:01:01 2026 GMT
Not After : Apr 18 03:01:01 2026 GMT
Subject: CN=1fe8c2b2bfaba08f581ec9909ceb275c3ccd6a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:ae:97:31:77:a3:da:3a:e9:76:7c:25:47:
5c:ce:73:e8:14:ed:f8:72:4f:0f:b6:83:94:b9:df:
0c:11:ad:28:57:38:02:da:bc:bb:d0:12:c0:77:ed:
61:74:dd:4a:2e:b1:e5:1e:2f:6f:da:67:e0:f3:fa:
cd:fc:31:59:69:7b:ab:33:20:8d:dc:e3:2c:87:7a:
4c:99:d1:22:2c:85:6d:0c:b9:38:f8:68:60:79:e6:
d4:88:c0:2a:37:12:2f:c8:5f:fd:f8:db:87:88:39:
02:55:c1:9f:f9:7d:e1:d3:68:bd:7d:9b:29:41:aa:
3f:98:a0:66:ea:f3:6e:d8:e0:1c:56:b9:ed:54:c4:
9d:03:87:6c:48:39:14:e6:f6:72:90:20:4a:16:7a:
10:7f:d9:44:30:fc:74:d3:3d:5b:7a:11:bb:a9:18:
ce:b5:17:f8:fc:d5:1f:7f:e5:ff:de:5e:08:f6:6e:
d8:28:4d:19:22:9f:d2:67:e6:77:48:10:82:99:64:
eb:ba:d8:37:20:02:ac:e9:d9:c5:34:09:8a:67:f9:
1d:3d:42:7c:d5:61:e7:7d:2b:a4:2a:9a:81:bb:89:
ba:bc:9f:72:79:01:36:00:34:32:05:74:5a:6e:82:
d7:d2:d1:86:24:8e:e2:c1:2c:99:d0:10:d5:31:4d:
1b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E8:C2:B2:BF:AB:A0:8F:58:1E:C9:90:9C:EB:27:5C:3C:CD:6A:1F
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:aa:05:30:ff:12:2b:21:54:c8:cd:7f:7c:3d:2d:17:ad:3e:
17:35:12:c0:45:53:c0:0c:4f:7f:be:39:14:51:5e:83:fb:1d:
f1:cc:ad:8f:9e:48:84:09:15:b7:26:e9:9f:1a:1a:e0:3e:35:
02:3d:61:8b:5f:fa:a6:3c:27:66:52:48:84:8e:14:96:26:db:
e5:a3:01:ea:bd:be:81:c0:3e:b3:70:28:f0:0b:28:e2:7b:30:
d7:d1:08:a6:e7:87:ae:a0:da:5e:b4:19:63:4c:25:a9:ca:f6:
e2:e7:66:ae:a4:49:5e:87:2c:d6:83:6d:8d:08:e8:63:2a:f3:
88:8d:fa:b4:75:5a:c7:c3:d2:b1:aa:c3:b2:95:da:57:e7:47:
68:86:b3:26:b1:f4:08:65:03:90:4a:c2:03:4e:9a:4d:7e:5a:
b4:86:59:d3:fa:6a:e2:8b:b3:79:10:44:8e:a1:10:a0:fe:45:
cd:e3:df:fd:4d:71:d9:21:39:54:89:0f:bb:98:39:59:74:9d:
54:1a:70:73:c8:d9:d8:51:1b:69:2c:eb:44:98:a0:e9:02:01:
d2:85:49:ab:df:05:6d:dd:96:b5:15:c3:21:5d:4b:2c:d3:fb:
2d:e6:63:5f:c2:7a:82:d3:b0:18:bf:d7:19:71:a8:4c:9e:2a:
5d:ef:f9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:23:51 2026 by rpki-client