Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
File: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft (raw, json)
Hash identifier: Qwv1eQDC5JwgGQSy9KCpd4kgEMHs6cq0sB4LOSfqzYg=
Subject key identifier: 09:B7:01:C4:25:C6:9B:86:E8:96:9C:D9:A9:D6:9B:95:C3:86:E7:F4
Authority key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
Certificate issuer: /CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Certificate serial: 019D98F5274AC12B00BD5C1A9897F293A052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 01:01:36 +0000
Manifest this update: Fri 17 Apr 2026 01:01:36 +0000
Manifest next update: Sat 18 Apr 2026 01:01:36 +0000
Files and hashes: 1: 1-871CmDX8fagFE4cCLtEOvFlaJk.roa (hash: XbD+Hd0tYqjM6KWUuuQ0xXPJOZgVOM/iQcoQQ4UP8I0=)
2: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl (hash: X4MeRG57trDanLIj4G1a1HS0KRblnBp4UcmprlDFHi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:27:4a:c1:2b:00:bd:5c:1a:98:97:f2:93:a0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Validity
Not Before: Apr 17 01:01:36 2026 GMT
Not After : Apr 18 01:01:36 2026 GMT
Subject: CN=09b701c425c69b86e8969cd9a9d69b95c386e7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:63:1d:66:fd:cb:14:8d:ef:59:f6:1d:78:af:
28:79:41:55:59:df:3e:5b:a8:b7:c0:e6:43:a5:2a:
d8:cb:53:87:e6:0e:38:f3:47:7e:2b:6e:e1:75:0b:
fe:42:be:21:96:c2:1a:68:98:5b:39:0d:2c:95:ca:
67:11:0e:e7:68:8f:a7:85:0b:57:07:4a:c6:ee:af:
e7:1f:3d:15:a0:a1:50:be:d2:69:b6:ea:49:7b:00:
a1:96:0d:e8:52:f9:32:30:c2:a7:8f:f6:12:9a:6a:
73:15:73:82:3b:05:35:22:a9:ce:1a:e8:87:19:a8:
36:eb:4a:df:86:0b:4f:c8:da:af:d0:35:bd:0c:18:
a5:19:b0:ea:55:0c:22:6e:a5:5a:5f:6f:30:7b:76:
90:86:ec:f4:86:da:db:31:bf:6a:92:31:a8:c6:88:
1b:ca:ac:87:3b:e5:49:c3:fc:36:09:a2:07:dd:9c:
da:b1:69:29:31:71:95:f8:95:07:75:f2:7b:e8:de:
8a:c8:ed:33:2a:71:5c:91:ae:34:10:70:00:6b:13:
4b:9c:8e:42:7d:6d:55:ae:dc:4e:fa:7c:d6:57:7a:
d3:f2:49:67:c4:e6:80:af:73:81:1b:e7:50:1b:8e:
98:38:04:ab:31:7d:a5:06:7b:ea:53:6b:85:0f:3a:
0f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B7:01:C4:25:C6:9B:86:E8:96:9C:D9:A9:D6:9B:95:C3:86:E7:F4
X509v3 Authority Key Identifier:
keyid:12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:92:01:f3:10:d2:09:a0:3d:18:f4:e1:b3:3d:68:2f:34:44:
97:4d:86:b1:f1:a7:69:77:37:d7:6b:8f:fa:c4:03:d3:da:2d:
d6:86:08:11:cd:8f:3b:22:8f:35:bb:f4:2e:40:64:bd:c8:74:
9c:e2:02:14:44:c7:2f:90:67:eb:8b:f8:b3:60:c8:c1:12:20:
11:8f:0e:62:f0:60:d3:30:1b:58:26:df:69:8d:f2:18:6a:68:
e4:60:31:0f:9e:03:c9:35:b1:87:23:34:25:24:cc:64:1e:da:
1a:5a:52:72:05:91:4a:66:63:59:c6:d8:a6:fe:99:9c:cd:96:
02:16:e2:b1:17:f4:3a:15:4b:8a:5d:67:7c:47:57:24:6d:b7:
de:9d:47:46:c3:3f:4e:8e:62:f8:0a:7c:47:bd:51:28:d8:40:
f0:47:09:f1:d9:72:48:74:9d:8f:9d:7a:d6:64:c5:3c:b3:90:
1c:ac:6e:81:8e:6d:8a:09:9a:29:15:72:28:98:06:3c:6e:05:
5d:86:df:39:af:83:0b:08:36:c0:fd:49:63:a9:7a:5e:1e:86:
bf:6c:f1:2c:84:b7:78:15:df:c6:67:e1:e8:3e:d1:4f:69:cf:
45:03:60:67:5f:33:19:e0:d5:f6:cb:e0:bc:92:cd:5b:dc:91:
d9:e0:30:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:36:24 2026 by rpki-client