Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
File: eyqKwwKLcJEcthEf_aOi7-VYhi0.mft (raw, json)
Hash identifier: gmtT0krk9/peVAHS+Ifdlk3To5JQwbEHyGy0T0nbs48=
Subject key identifier: 29:15:17:D1:0A:75:06:7A:B7:A9:5A:B7:87:06:E4:35:73:61:01:EA
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 019CABD9925D70D4994768D3CF1C3D307DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:28 +0000
Manifest this update: Mon 02 Mar 2026 00:01:28 +0000
Manifest next update: Tue 03 Mar 2026 00:01:28 +0000
Files and hashes: 1: QKSBmP3gzvhQzJUUPBNcCLWHKHM.roa (hash: KF0eVyAAEY8VGFQ1+W9WFibrhH45a/vXshpeDiUAhF0=)
2: eyqKwwKLcJEcthEf_aOi7-VYhi0.crl (hash: XUe4d/fhBlg5I71lqJTFd7D2Tls9mhqsj53nrZ+Oqyc=)
3: ycdkqwKUZrrAqLHqkXN7UpQhhcY.roa (hash: eyPv8WnShqVImAMmncYrIFp/3E9eBCBd7q2DigUVUPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:92:5d:70:d4:99:47:68:d3:cf:1c:3d:30:7d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Mar 2 00:01:28 2026 GMT
Not After : Mar 3 00:01:28 2026 GMT
Subject: CN=291517d10a75067ab7a95ab78706e435736101ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:71:97:bf:ff:51:8b:a4:9b:b0:59:22:c0:38:
13:52:20:86:3a:13:ca:6e:0a:c8:77:ac:01:d1:60:
7a:f2:54:58:80:e8:26:e0:d1:34:e5:de:8b:a1:34:
65:56:02:fb:0d:ca:08:bc:11:2c:60:7f:ee:54:4f:
0a:ee:a1:3b:93:8d:ec:b4:c1:6e:54:42:76:42:40:
3b:3e:72:7f:53:06:55:1f:19:8d:c2:4a:6e:8f:48:
41:f4:4b:72:9e:d6:8a:dd:7d:e2:d8:b8:11:67:a1:
78:35:8d:3e:0e:4e:23:03:5a:0b:25:9c:5f:a6:01:
17:08:68:53:9d:62:75:e7:87:6e:6f:00:66:ea:54:
4b:e1:e3:c8:cd:db:95:14:09:ad:e4:56:a6:33:b7:
6a:49:f7:da:56:ab:ce:87:c8:1a:25:c4:e4:4f:ce:
30:08:89:7f:a1:c9:8e:1c:8c:4a:2e:47:6a:3f:11:
6a:3b:0f:63:be:40:94:cc:e2:1d:c7:af:62:fe:53:
39:7b:18:c8:79:66:fe:cb:e7:a5:07:cf:a8:65:76:
1d:67:a5:34:7d:57:34:e5:3b:28:4b:5d:8f:4a:f0:
54:ab:c0:30:2c:c7:5b:b0:ee:9a:8b:1a:ab:bd:5e:
82:50:08:21:74:a6:fa:76:e8:eb:0c:0a:ca:e6:22:
08:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:15:17:D1:0A:75:06:7A:B7:A9:5A:B7:87:06:E4:35:73:61:01:EA
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:40:ce:80:e3:43:02:70:f9:74:53:ba:a2:be:07:c6:4c:56:
74:17:2d:bc:44:50:96:89:dd:78:9d:a6:4d:2b:60:0d:ed:3a:
ef:39:f4:ec:b6:58:84:75:2f:eb:f6:a2:c6:a1:e8:22:2e:3b:
81:35:83:26:dc:76:f2:d0:80:2d:6f:05:28:6c:22:f7:bc:29:
93:d9:d5:14:d4:7d:b8:0e:18:5a:17:d3:0e:80:bb:89:ce:46:
c7:39:7d:21:13:54:15:9d:84:5b:5d:e1:19:99:d3:60:be:5f:
08:6f:0d:fe:23:58:7d:57:41:6f:d2:8a:54:13:36:a6:44:93:
aa:a2:68:5a:54:ac:47:c0:42:c8:a8:da:64:9b:77:c2:c3:06:
04:20:79:6f:ae:cf:16:3d:d4:84:07:7c:a1:bd:16:ab:f8:26:
bb:b6:ae:d4:ed:72:d9:84:3b:df:ac:6f:46:fb:79:e3:d4:69:
0b:93:7c:01:25:bc:71:8f:74:c2:7a:98:8a:81:13:c8:bc:f5:
0f:2e:b4:36:55:a9:3a:d9:a7:87:54:5b:54:c8:1a:b3:52:02:
74:f5:9e:02:49:26:a7:67:39:39:4b:a7:fd:45:00:c1:04:56:
be:9d:20:54:01:0a:f0:d0:40:40:13:88:6b:26:bc:69:48:48:
e8:8c:fd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:05:38 2026 by rpki-client