Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
File: EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft (raw, json)
Hash identifier: /OLEO0PzAIksfRV2Gwx3vpUChH5XuYXLBA3XCA+xcec=
Subject key identifier: 8B:56:DA:DE:6B:AA:4B:9A:27:FB:D0:C8:85:C6:C1:A7:99:20:EF:8D
Authority key identifier: 13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9
Certificate issuer: /CN=1323be6d548145867863b7b2fa464bdf8518a0c9
Certificate serial: 019D99D0D1BB93E0E4728DD9BD010CD5A62F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 05:01:32 +0000
Manifest this update: Fri 17 Apr 2026 05:01:32 +0000
Manifest next update: Sat 18 Apr 2026 05:01:32 +0000
Files and hashes: 1: 5O82bj0RVPYC9fHeytygnYo76U8.roa (hash: P+7qJZ65HnaqEFW0awG0yJ2/55GEb9yw1uv5c7sRaVA=)
2: 8ZMhpHWpSjesuQ3JK0HQjCVMxBg.roa (hash: M4Nr0Wi/SzNVzQvcJX08oqzRs/vvxC+K5A74A/Zcd8o=)
3: EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl (hash: RcruNtd2nqEKCJFPOBc/DYpcZzY7+zVfTJ3jZLq0ptk=)
4: JMBywUmb80eS8GOrITuaVx8nCRg.roa (hash: /324/IAHNCGdBytZWzsoLGKPRqjPYfQZAIUmmm6zgwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:d1:bb:93:e0:e4:72:8d:d9:bd:01:0c:d5:a6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1323be6d548145867863b7b2fa464bdf8518a0c9
Validity
Not Before: Apr 17 05:01:32 2026 GMT
Not After : Apr 18 05:01:32 2026 GMT
Subject: CN=8b56dade6baa4b9a27fbd0c885c6c1a79920ef8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:8b:e9:65:8b:38:d5:14:c8:88:cc:09:23:1b:
b7:da:a9:76:fb:56:56:90:1d:b5:aa:ff:ca:c4:35:
6c:9c:a6:6d:cb:cc:6a:ba:8d:7b:25:96:26:55:61:
6b:c8:89:13:4c:00:83:a8:4e:14:cb:13:56:9b:31:
87:69:0e:2a:24:cb:c4:e0:99:67:a4:d5:5f:0d:09:
2b:7d:d5:68:b5:9d:86:ac:34:00:6a:70:e6:a0:f8:
db:f5:7f:c3:9d:f6:a6:ea:a8:8d:21:7e:54:71:9a:
fc:b8:9e:81:50:15:77:9a:27:e2:3b:a0:21:8b:e3:
0e:02:01:f3:23:d5:49:3b:a8:a0:47:a3:38:7b:c4:
f9:c6:52:83:77:a1:05:5d:ab:14:b5:11:51:73:37:
ff:81:af:98:68:c4:38:5c:54:12:ce:7d:92:a8:79:
fa:3f:74:5e:34:b9:00:cc:18:66:d0:6d:55:70:9e:
74:d1:6d:db:7e:8c:94:cc:c9:87:67:bf:57:8d:11:
24:a2:38:01:c9:bb:7c:7a:67:36:65:f3:83:a6:b7:
5c:fd:41:3e:29:b9:69:95:1d:ef:ed:df:29:3f:0d:
35:ae:fc:18:44:7b:bd:d0:fc:c5:a4:0b:db:cf:8f:
7d:5e:75:2d:c4:95:1e:01:e9:de:9b:c8:29:87:f6:
fb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:56:DA:DE:6B:AA:4B:9A:27:FB:D0:C8:85:C6:C1:A7:99:20:EF:8D
X509v3 Authority Key Identifier:
keyid:13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e3:bd:22:d5:54:3f:d1:48:8d:64:39:a9:85:ee:4f:25:f5:
5c:6d:b9:6d:b2:c8:32:bc:6d:58:42:6d:78:6c:42:34:30:85:
f1:30:41:eb:94:2c:7b:22:18:7f:09:df:25:1c:c1:e3:c6:ec:
6e:13:a6:ff:5a:fa:c3:dc:af:a2:01:21:77:f1:e8:a4:67:7d:
06:2f:a8:85:5a:61:8b:3b:bb:80:5c:57:21:aa:e4:55:da:b3:
90:dd:3f:b0:9f:1f:a1:6a:e4:5f:26:80:90:b5:98:f3:af:3c:
65:09:67:e7:75:44:e8:d3:f6:62:5e:6f:a9:26:1f:71:4d:57:
41:62:4e:eb:f1:aa:64:19:d5:16:e1:7d:72:e0:b2:cc:5c:8b:
83:79:11:ba:50:b3:5d:65:21:30:c0:f8:b4:0a:bd:5c:30:54:
bb:f8:e5:41:36:41:1e:22:4e:02:54:64:9a:33:e9:f2:d1:9d:
61:62:67:4b:bc:df:5e:66:a0:98:58:cf:27:15:a1:b8:e7:cf:
8c:b0:d6:6b:93:e9:72:02:20:85:58:11:16:b3:4f:93:88:b9:
69:74:bc:9e:e2:dd:99:45:13:aa:f1:b4:08:1b:64:75:f0:2b:
84:52:bc:b6:b2:34:f5:ca:e3:fe:65:2a:c5:78:f2:7a:d4:56:
2a:2d:88:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:31 2026 by rpki-client