Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
File: eyqKwwKLcJEcthEf_aOi7-VYhi0.mft (raw, json)
Hash identifier: MDru56jPPuylW/dBF5BWpwi+BjDZVMERVmuJMDCAHow=
Subject key identifier: 32:8A:B2:D9:47:6A:BB:D6:B4:8C:03:2F:9F:60:D1:D0:7D:46:00:21
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 019FAC76AF7558B4875B96238F5CC27C237C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 06:01:26 +0000
Manifest this update: Wed 29 Jul 2026 06:01:26 +0000
Manifest next update: Thu 30 Jul 2026 06:01:26 +0000
Files and hashes: 1: QKSBmP3gzvhQzJUUPBNcCLWHKHM.roa (hash: KF0eVyAAEY8VGFQ1+W9WFibrhH45a/vXshpeDiUAhF0=)
2: eyqKwwKLcJEcthEf_aOi7-VYhi0.crl (hash: ZYk76Yq9gjrn7WB+uqdT0mMHWIw9qW0EkRAT/1VGhZA=)
3: ycdkqwKUZrrAqLHqkXN7UpQhhcY.roa (hash: eyPv8WnShqVImAMmncYrIFp/3E9eBCBd7q2DigUVUPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:af:75:58:b4:87:5b:96:23:8f:5c:c2:7c:23:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Jul 29 06:01:26 2026 GMT
Not After : Jul 30 06:01:26 2026 GMT
Subject: CN=328ab2d9476abbd6b48c032f9f60d1d07d460021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:78:f5:81:f9:02:c7:ed:c0:8c:20:02:a7:a2:
59:07:94:eb:9b:e1:d7:cc:8f:63:3d:1e:03:a4:81:
d9:f2:80:cb:15:d4:30:f1:b5:99:21:90:9c:0c:0b:
c9:c8:6c:f2:2a:47:36:86:1d:ef:b0:f6:bd:ac:43:
97:9d:8a:d4:ff:fa:4c:8b:09:92:da:10:e5:0e:ac:
a0:c2:a7:1b:c2:7b:40:fb:22:31:2d:fd:0f:54:9e:
1b:ea:72:fc:1e:a4:cc:5a:10:14:2d:50:1d:dd:bc:
11:58:57:45:14:55:8b:a8:78:9d:f9:68:e4:5f:53:
4f:04:78:4e:27:f0:1c:2f:42:4e:f2:23:75:a9:d2:
32:26:bd:67:09:94:90:47:1c:16:89:aa:aa:d9:c7:
f0:f2:ee:19:32:2c:2a:94:98:1b:93:e3:a7:d8:22:
4e:85:2d:89:fc:d8:2f:4e:40:7d:b6:52:0f:2e:a1:
83:d3:9f:b4:7c:b8:b9:01:c3:95:94:c5:d4:61:bd:
2e:32:ca:46:5f:06:68:1f:98:b2:73:35:f4:d0:85:
25:43:5a:99:6a:69:18:fc:75:12:b7:d0:1f:24:fd:
25:10:ad:ab:87:bc:be:ba:f4:4f:70:bb:24:c5:f7:
eb:72:5c:f0:fb:bd:11:f7:4a:21:0e:f2:ab:78:37:
25:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8A:B2:D9:47:6A:BB:D6:B4:8C:03:2F:9F:60:D1:D0:7D:46:00:21
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:73:1e:29:7f:f9:a0:82:f0:fc:c2:c0:3e:12:17:08:94:f0:
e3:fc:35:c2:29:79:03:83:c4:5a:d5:10:00:db:cc:42:e2:9e:
b9:7e:49:20:0f:d5:a6:95:17:af:6c:e4:3c:11:a6:c3:89:2c:
04:d4:87:42:d7:22:f8:dd:e1:d9:61:e0:06:44:51:f9:63:ec:
10:9b:21:f3:bd:10:e4:41:4e:83:d3:ed:b6:01:38:b1:b0:6c:
b1:13:5b:3c:81:df:b3:be:fa:26:1b:4e:3b:04:1e:53:c0:eb:
9f:fd:9e:4d:3e:b9:61:28:32:49:6d:7e:93:2b:a2:ad:7b:a6:
36:ee:ad:c6:a4:52:85:73:3f:af:b4:3a:7e:b3:a9:6e:ce:c7:
bb:4b:63:16:aa:45:14:dd:46:e0:d8:8d:d1:ff:11:0c:5f:dc:
55:05:fe:03:fe:cc:3b:b1:e9:ac:58:44:c9:cb:e4:b9:5e:a9:
0e:8c:48:b0:39:89:f5:a8:e5:0e:cf:34:96:d2:49:67:d0:0b:
54:aa:1e:ed:06:15:57:ec:74:6e:ae:8d:7c:57:f9:07:21:5e:
93:80:f8:19:ec:93:ef:97:b7:66:4c:ea:5f:f5:ec:7b:83:ce:
97:97:54:c2:4a:0d:c5:dd:a5:0c:58:32:41:74:0d:27:45:3d:
44:00:9a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:51:38 2026 by rpki-client