Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
File: egtky28YoRQXQjEFCwF5kxteSG0.mft (raw, json)
Hash identifier: qLOUmZhye2+l1+wYxuWifOXlFn0L8i8g8Ua8uPlGihc=
Subject key identifier: E8:F5:B4:68:76:3E:20:FA:62:67:6B:F4:71:0F:8C:81:C7:81:BB:B1
Authority key identifier: 7A:0B:64:CB:6F:18:A1:14:17:42:31:05:0B:01:79:93:1B:5E:48:6D
Certificate issuer: /CN=7a0b64cb6f18a114174231050b0179931b5e486d
Certificate serial: 019CACB49693876DA9C263E4ECD18F1E9041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
Manifest number: 0554
Signing time: Mon 02 Mar 2026 04:00:42 +0000
Manifest this update: Mon 02 Mar 2026 04:00:42 +0000
Manifest next update: Tue 03 Mar 2026 04:00:42 +0000
Files and hashes: 1: 1q4BtkfepJc-raZEhj-gGf2uWvE.roa (hash: 3v5nIZKVUJNwnzavqdu5v3q5UyDoCLmVDzmJ4965j9Q=)
2: egtky28YoRQXQjEFCwF5kxteSG0.crl (hash: IPDGZmKk4eq0S3dqX0KPvyWwX5IQcTYJCRTo34VG3gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:96:93:87:6d:a9:c2:63:e4:ec:d1:8f:1e:90:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0b64cb6f18a114174231050b0179931b5e486d
Validity
Not Before: Mar 2 04:00:42 2026 GMT
Not After : Mar 3 04:00:42 2026 GMT
Subject: CN=e8f5b468763e20fa62676bf4710f8c81c781bbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9e:8f:f4:69:0d:9a:63:2d:18:ba:17:88:6e:
ed:3d:40:39:fe:98:0b:8e:e8:d5:12:d5:27:66:74:
79:96:db:e1:dd:6a:86:c8:61:10:ce:1e:2e:01:9d:
2c:aa:56:43:0a:35:d8:32:e1:b7:60:00:f1:69:34:
91:e8:18:7a:f1:5a:fa:d5:38:8b:50:4d:b5:9f:40:
a6:2c:2f:6a:00:22:7f:5f:33:08:a1:71:ee:77:e6:
27:94:d8:5b:59:ab:be:bf:7f:9d:35:c0:58:70:81:
f0:ce:9e:ea:8a:93:15:c3:d8:7b:8a:0a:0c:f7:a5:
84:d0:d6:7a:fd:a4:2d:89:46:cc:e8:a2:48:1d:20:
24:15:5e:b9:77:8a:ce:12:85:06:f3:09:ed:9f:27:
ca:e0:ec:f3:20:f0:f3:5f:09:73:66:9b:d4:f6:3e:
b9:ad:17:1e:69:0e:d5:66:1b:c9:4e:ef:9c:c9:4e:
56:85:f6:c2:c6:aa:f2:39:04:fd:54:08:23:e1:12:
f3:dd:90:fa:9b:ed:4d:00:1f:a6:8e:ce:59:26:7f:
42:ce:e9:23:58:34:17:56:1c:c8:32:f8:ff:a6:81:
bc:59:43:d7:4d:a5:fa:34:02:e1:59:3d:01:ac:73:
12:24:2d:1b:81:98:75:b2:88:00:11:20:1d:66:20:
59:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F5:B4:68:76:3E:20:FA:62:67:6B:F4:71:0F:8C:81:C7:81:BB:B1
X509v3 Authority Key Identifier:
keyid:7A:0B:64:CB:6F:18:A1:14:17:42:31:05:0B:01:79:93:1B:5E:48:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a8:66:62:ac:c8:4b:80:03:13:f8:79:68:cd:b3:6a:1d:2c:
0e:ea:74:14:99:b4:38:ba:94:0a:71:7e:b6:09:59:ed:e7:ce:
92:2d:ce:04:6b:01:07:b6:bd:65:81:7c:07:38:11:da:3a:af:
a6:42:db:5b:2e:5a:77:90:f8:89:a0:11:99:b9:1f:39:d4:0e:
27:a2:66:3d:38:7a:dc:a6:ca:e3:22:c7:f1:d1:c3:fb:94:de:
19:9b:e3:f6:a2:2f:c3:fd:67:3e:f6:0e:a0:f8:2f:85:6e:c2:
d5:1b:17:d4:b2:ff:72:5d:1f:a4:7d:f1:fa:18:74:99:58:e3:
02:c3:77:61:d8:98:f9:80:74:9b:01:04:31:0f:42:d0:00:3c:
81:e8:02:12:44:3c:f0:e4:91:09:82:a3:43:b7:f9:c6:97:d2:
29:5a:fe:23:76:d8:d9:9c:d8:c5:b9:b9:63:e1:43:67:93:ba:
f5:75:0f:19:66:4f:0c:62:70:ae:dc:51:d7:48:a5:82:3f:ba:
84:bc:25:0b:1d:5c:b1:a2:b0:a5:fd:a6:f2:61:5c:71:e9:c0:
07:e8:7b:c4:bf:d8:54:16:1a:91:39:d0:c0:c7:f0:d1:8f:a2:
16:79:3c:5d:43:7d:db:28:63:4a:9d:6f:be:3a:6b:83:2b:79:
bf:36:d9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:03 2026 by rpki-client