Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
File: eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft (raw, json)
Hash identifier: V5LLX3dDQgqTvOVTKqLGIFlU3UvB6kwbdFXDL9OJlCE=
Subject key identifier: 9C:DA:D7:89:83:40:4F:A8:47:6C:05:8B:CA:43:3F:0E:2A:0A:95:A7
Authority key identifier: 79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2
Certificate issuer: /CN=796d29ee381b51f645e05415668d92a9ce7a8dd2
Certificate serial: 019CAA21A56AD1F0F2872F227ED50B48B5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 16:00:57 +0000
Manifest this update: Sun 01 Mar 2026 16:00:57 +0000
Manifest next update: Mon 02 Mar 2026 16:00:57 +0000
Files and hashes: 1: eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl (hash: QcaGcihF1/z3wSdBg/fQjGnqTEJYXCfZQygboWY99UM=)
2: fVvGqH3zEVd_s4J0halsJF-eP-s.roa (hash: orRehBWRsFtnD+6UipYdY3n2n1iHa23oEjEmiLrn/lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:a5:6a:d1:f0:f2:87:2f:22:7e:d5:0b:48:b5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=796d29ee381b51f645e05415668d92a9ce7a8dd2
Validity
Not Before: Mar 1 16:00:57 2026 GMT
Not After : Mar 2 16:00:57 2026 GMT
Subject: CN=9cdad78983404fa8476c058bca433f0e2a0a95a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:24:a7:ca:79:e1:da:66:66:95:61:dd:21:80:
03:27:87:06:2a:d9:9d:ba:07:50:33:c9:45:4e:ad:
51:d4:47:74:be:db:a0:70:b2:1a:85:f1:e8:06:8f:
23:f1:12:da:ca:f3:fb:d0:0c:3f:bf:d1:6c:b0:8c:
fe:22:d9:9a:0a:68:42:96:65:3f:20:ba:c0:45:b9:
46:67:d8:4a:73:64:c5:6e:12:d9:17:d2:f1:ca:ac:
df:26:6a:48:4a:b8:3e:47:f8:16:51:16:31:72:0b:
c6:cb:d0:89:36:87:72:7b:18:d0:7d:fc:d8:6b:21:
5d:2f:58:5f:1a:3d:d1:a5:20:b9:2d:58:e4:3d:55:
0e:39:0d:3d:ce:82:d3:e9:f1:1b:50:2b:9b:5b:18:
46:58:c8:67:83:70:43:85:a8:1e:d7:27:67:de:f9:
3b:50:11:3c:91:6b:94:e3:90:b6:f5:49:1c:2f:38:
b9:77:b5:b3:09:65:95:a4:78:76:19:87:eb:51:21:
9d:ac:d9:79:d9:cb:ac:de:fe:8e:a3:f7:62:de:f9:
51:c3:ff:e5:d9:ea:bc:4d:b6:c6:1d:ee:ff:bc:3c:
02:88:ef:01:69:57:5b:ff:f8:53:a1:32:61:6d:29:
5f:e9:e3:f2:9f:b5:5b:0f:8d:ae:cf:17:d7:26:10:
3a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DA:D7:89:83:40:4F:A8:47:6C:05:8B:CA:43:3F:0E:2A:0A:95:A7
X509v3 Authority Key Identifier:
keyid:79:6D:29:EE:38:1B:51:F6:45:E0:54:15:66:8D:92:A9:CE:7A:8D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eW0p7jgbUfZF4FQVZo2Sqc56jdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/2b8b2d-c023-4dfb-a504-41f62da4edab/1/eW0p7jgbUfZF4FQVZo2Sqc56jdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b4:e3:23:17:ec:9d:15:79:da:02:35:5a:8c:50:d9:8c:48:
32:0d:c7:6f:ff:93:dd:54:bd:27:8d:f7:59:fc:8e:42:1c:55:
01:77:3a:ec:94:0b:b8:96:94:28:c1:88:32:50:c9:56:74:0c:
b4:d0:81:c7:da:51:10:fd:63:02:5a:06:b3:a2:88:96:4b:0b:
7e:79:74:1a:a5:84:a5:a4:ee:73:df:49:e3:b6:12:da:42:b4:
b3:31:2e:87:d4:ea:23:c4:9c:1c:00:eb:c9:4c:01:10:38:9c:
ec:8d:06:91:1d:57:86:a5:60:cf:ea:65:bb:34:f5:4b:da:fd:
e7:0b:d0:a9:69:93:7c:81:75:09:0a:2d:51:a2:11:20:72:12:
b2:6c:2c:8c:a1:8f:11:c7:2b:c7:d2:91:d4:97:42:f5:11:a2:
e3:55:48:eb:d1:52:ac:c5:c6:aa:be:3d:67:39:25:b2:80:24:
ff:74:30:96:52:c3:61:39:3e:bf:13:60:aa:37:f2:8c:8e:ee:
57:89:15:35:16:7c:46:1f:db:e9:02:95:4c:fe:5f:3a:45:79:
50:23:97:51:df:e8:7b:cb:e6:21:dd:42:39:17:9c:78:79:c7:
e9:2b:4e:4d:94:97:6b:7b:b6:89:79:2e:84:14:bc:3b:ba:cb:
39:7f:69:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:34:34 2026 by rpki-client