Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
File: egtky28YoRQXQjEFCwF5kxteSG0.mft (raw, json)
Hash identifier: mBt1nrtSOckQEquR5QHuPeh2rIT68XqBPT2SdgQKSeE=
Subject key identifier: 12:7A:83:C7:F4:1D:6E:EC:B2:0A:A7:7F:D5:CA:58:15:C4:EE:F1:55
Authority key identifier: 7A:0B:64:CB:6F:18:A1:14:17:42:31:05:0B:01:79:93:1B:5E:48:6D
Certificate issuer: /CN=7a0b64cb6f18a114174231050b0179931b5e486d
Certificate serial: 019D98504D92A8C00E8E06E0E24B205BA20F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
Manifest number: 05CE
Signing time: Thu 16 Apr 2026 22:01:32 +0000
Manifest this update: Thu 16 Apr 2026 22:01:32 +0000
Manifest next update: Fri 17 Apr 2026 22:01:32 +0000
Files and hashes: 1: 1q4BtkfepJc-raZEhj-gGf2uWvE.roa (hash: 3v5nIZKVUJNwnzavqdu5v3q5UyDoCLmVDzmJ4965j9Q=)
2: egtky28YoRQXQjEFCwF5kxteSG0.crl (hash: iQHB0P0xSy0/yLmEUHrrWyZlaBlBxWs5XZZ4J2D0k5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:4d:92:a8:c0:0e:8e:06:e0:e2:4b:20:5b:a2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0b64cb6f18a114174231050b0179931b5e486d
Validity
Not Before: Apr 16 22:01:32 2026 GMT
Not After : Apr 17 22:01:32 2026 GMT
Subject: CN=127a83c7f41d6eecb20aa77fd5ca5815c4eef155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:3b:33:37:bb:28:50:6d:0f:36:09:15:09:
49:b5:c9:1a:09:d2:f5:07:83:49:b2:8d:01:35:7e:
36:2c:82:16:8b:00:a0:4b:90:ec:7d:d4:23:04:2d:
73:49:64:12:87:ea:99:f9:44:2f:a6:22:2d:a9:b5:
b1:76:89:d3:cd:f4:85:d9:b9:95:44:e5:5e:be:af:
24:e4:cd:11:b0:81:77:14:b7:8d:43:98:4c:d9:d1:
a4:d7:79:e8:0c:98:e5:86:41:b0:7d:0e:3e:33:14:
f1:e2:0d:57:a1:d6:c5:3c:b0:4a:a0:16:b6:d0:f9:
e9:1b:db:ac:3c:92:5d:07:0f:32:89:a8:49:66:97:
0a:33:2b:34:cf:aa:98:50:a9:be:33:ef:70:df:e6:
7c:32:e2:1f:c1:ed:f2:17:c3:f4:c6:4d:ad:32:02:
12:3b:c0:d7:5a:ec:91:40:0a:7f:00:c5:af:a2:e9:
8d:02:96:4a:bb:81:91:23:fa:fd:89:f0:23:b6:c2:
55:42:ba:a3:c4:57:8e:ca:22:f5:17:17:a2:fb:08:
e7:aa:e0:af:c1:c7:2a:b9:8d:35:3e:86:ac:5e:8d:
ec:4d:23:33:6c:5c:44:47:42:a5:b6:2c:dc:24:7c:
0a:e2:ff:04:87:e5:23:fd:03:ad:76:4f:ab:a5:38:
9f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7A:83:C7:F4:1D:6E:EC:B2:0A:A7:7F:D5:CA:58:15:C4:EE:F1:55
X509v3 Authority Key Identifier:
keyid:7A:0B:64:CB:6F:18:A1:14:17:42:31:05:0B:01:79:93:1B:5E:48:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:53:f0:ab:72:49:b5:fd:b4:c5:cb:18:60:9f:b2:17:2f:2d:
32:66:00:67:3a:4e:02:cc:57:54:99:0c:19:66:a7:27:9a:8d:
97:16:03:29:51:f9:86:99:9c:5c:10:84:98:ec:0a:20:1d:18:
d2:5a:d4:7a:c1:c6:e7:48:73:d1:9c:67:95:bb:55:57:b8:61:
3a:5c:4e:9e:c7:9a:aa:59:f6:d1:69:65:c9:bb:53:a0:80:65:
e2:06:60:8f:39:66:c7:33:95:3d:34:22:0d:d2:d1:6f:3a:65:
db:55:ff:3d:4a:cb:ab:1c:e1:e0:d9:3c:12:fb:5b:7f:65:dd:
6c:79:60:38:28:16:0d:f7:04:37:a8:0c:6a:da:cb:8e:92:32:
00:c5:96:48:5e:d2:eb:eb:f6:37:ba:50:1f:af:77:d4:a5:d4:
dd:ce:ab:a0:b1:df:e4:45:c8:75:9c:6a:88:53:19:66:50:72:
dd:60:42:06:a8:7a:11:68:ec:80:46:1d:ce:bc:0b:3f:13:d4:
07:f4:75:1f:d5:a1:c6:3f:d2:ac:d9:30:0f:7c:b7:fa:39:39:
3d:b8:41:7a:13:93:a8:4b:fe:21:23:4c:c5:ad:17:8a:3f:af:
c9:4c:c4:0b:91:97:53:9f:d7:01:b5:49:29:b0:f3:5a:5b:19:
25:71:4e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:16 2026 by rpki-client