
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
File: eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft (raw, json)
Hash identifier: uoHhyjhe1xEQcfDyAErd6uiLvBY4zhS1QYECZheecs4=
Subject key identifier: 5B:E9:77:9C:C8:50:31:EB:5F:27:A5:B8:EC:27:AB:30:F3:24:43:0D
Authority key identifier: 78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED
Certificate issuer: /CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
Certificate serial: 019CAAC648C678BDA2A8ADA8C4ED91A8B5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 19:00:47 +0000
Manifest this update: Sun 01 Mar 2026 19:00:47 +0000
Manifest next update: Mon 02 Mar 2026 19:00:47 +0000
Files and hashes: 1: VzaJRpkfGV8ksiy395nPBGdmpqo.roa (hash: B/HImlbnA+P1Pd7oVL6uWttamYm0OW3WVOv4Cpsd9x4=)
2: eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl (hash: ZCmUDHHV69MSZ2XN5o68OktLrg3vjiP7BnLnVw+R53c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:48:c6:78:bd:a2:a8:ad:a8:c4:ed:91:a8:b5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
Validity
Not Before: Mar 1 19:00:47 2026 GMT
Not After : Mar 2 19:00:47 2026 GMT
Subject: CN=5be9779cc85031eb5f27a5b8ec27ab30f324430d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:35:a5:2e:46:76:2f:40:20:aa:79:ec:8d:28:
10:17:dc:83:07:1c:b8:bf:9e:23:49:30:53:d9:2f:
a3:04:a1:9b:c8:27:40:d3:85:37:3a:13:69:39:68:
40:91:7a:7a:c8:63:d4:dd:52:9d:7c:c5:c6:29:03:
32:01:2f:3e:04:05:95:f3:3a:0f:14:1f:02:b0:ef:
d8:9c:04:15:60:3e:0b:40:8e:8c:36:01:66:f9:f4:
a2:2e:45:b9:c9:dd:00:94:95:ec:13:a9:54:da:c0:
f7:d6:0a:9c:44:6c:a9:bd:d8:b6:54:e1:a0:e6:fb:
6d:79:c3:a9:dd:50:ab:db:9f:9e:96:98:c6:d2:ec:
8a:fe:a6:8a:80:f3:0d:07:40:ce:38:9e:a5:c4:2f:
89:90:bc:fc:fb:7d:94:f3:44:f4:53:f8:8a:ca:3d:
11:d7:aa:ad:12:75:68:81:26:38:29:d9:36:66:bb:
1a:72:c8:6f:9b:29:05:5d:dc:c8:98:09:e3:41:4e:
24:0d:69:1b:d2:4d:bb:54:a8:90:9a:72:7c:f5:a7:
1c:aa:ee:bb:da:46:97:98:3a:f1:3e:92:ca:a3:ec:
c2:5c:b2:03:37:6f:b5:49:46:a1:17:34:0c:8f:27:
ee:3f:fa:d3:1e:00:0a:d4:ca:6f:34:e8:4d:2d:46:
b1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E9:77:9C:C8:50:31:EB:5F:27:A5:B8:EC:27:AB:30:F3:24:43:0D
X509v3 Authority Key Identifier:
keyid:78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8d:ab:fc:de:be:5a:1e:a0:34:e1:55:9b:72:66:8b:2c:11:
c4:52:66:49:23:bd:da:9a:79:a2:72:76:16:cc:bf:3c:06:92:
bc:7c:d9:7a:e1:19:cb:3b:3c:1c:d3:ad:f0:73:42:b2:d1:16:
5a:56:7b:23:d3:ac:6c:43:2c:79:f0:3b:b3:24:85:5a:df:ea:
bc:4f:6b:d8:aa:c0:28:cd:1e:58:bb:95:18:f3:c8:bc:2d:ab:
11:79:b1:3f:f0:1d:cc:53:e3:b6:0b:d8:6b:7f:f1:e0:39:28:
3c:85:2c:cf:c2:a1:24:28:e3:f4:9d:cf:84:9f:1e:8b:3c:4d:
61:bc:b7:99:b9:c6:4a:98:73:dc:61:f6:1d:28:45:13:a8:4d:
83:a8:d6:2c:b7:11:46:04:00:0f:71:6b:fc:0b:3e:e9:99:ad:
64:d0:33:58:e3:95:89:ae:99:e1:85:72:8c:9e:16:a6:7a:99:
ca:54:db:a6:b5:da:26:68:c2:22:5b:aa:41:ad:b8:6f:49:ce:
06:5a:0a:31:83:10:6a:c3:d7:23:ee:ab:89:a9:92:60:9a:62:
56:db:fb:77:ea:bc:a4:4e:47:b2:88:fe:96:c7:b2:3a:95:36:
9d:24:47:30:e8:da:fb:05:11:49:b3:58:be:b8:08:82:92:11:
a8:6e:77:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:18 2026 by rpki-client