Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
File: egbjCszbF6JVRzu2wiTx_BVFjos.mft (raw, json)
Hash identifier: 8YLA5erYyTpRvjCcugs6Xf/C9JY3m3EP2X/WZsWdKPw=
Subject key identifier: B0:AA:34:AD:9E:98:AC:4D:19:50:06:D2:E5:55:FC:58:15:73:BC:36
Authority key identifier: 7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B
Certificate issuer: /CN=7a06e30accdb17a255473bb6c224f1fc15458e8b
Certificate serial: 019CAAFD171EEDF7CCBAC84DD1B58390E347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
Manifest number: 135E
Signing time: Sun 01 Mar 2026 20:00:38 +0000
Manifest this update: Sun 01 Mar 2026 20:00:38 +0000
Manifest next update: Mon 02 Mar 2026 20:00:38 +0000
Files and hashes: 1: egbjCszbF6JVRzu2wiTx_BVFjos.crl (hash: Dhqsh1dyp2x/djr2oAB6Zz5AMGsdq+fWhab3d3dDeFc=)
2: zZWMiOPu0l0-QTvM4wjEdvA-aoo.roa (hash: Q6wVapDbvRerj+SvzLlvvzSsU2lv+SpfGrd8Ly/8NlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:17:1e:ed:f7:cc:ba:c8:4d:d1:b5:83:90:e3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a06e30accdb17a255473bb6c224f1fc15458e8b
Validity
Not Before: Mar 1 20:00:38 2026 GMT
Not After : Mar 2 20:00:38 2026 GMT
Subject: CN=b0aa34ad9e98ac4d195006d2e555fc581573bc36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fe:8e:03:b7:b0:35:65:90:82:2e:dc:98:2b:
e9:24:d7:34:2f:e5:fc:39:a4:48:ea:da:14:a0:67:
2e:8d:4a:86:7d:f3:16:6f:51:2f:c7:da:92:80:69:
08:03:29:ad:c0:c6:14:a4:14:27:db:40:a5:40:bc:
37:ae:64:e5:9e:e0:5e:70:c5:59:5a:3a:c6:80:39:
fa:c9:a2:d2:cc:8c:d4:da:0e:66:b7:25:23:a0:fe:
1d:24:38:46:6f:32:ac:fb:f4:0f:5e:bf:4c:12:5f:
72:f5:71:07:d9:f9:3b:33:bb:c9:c1:c0:b9:e9:e2:
e5:e3:a4:9f:e6:28:55:88:46:6c:56:c2:64:3d:d8:
5c:b8:01:7c:c0:fb:d3:12:68:c7:8e:55:31:4f:08:
f5:5f:02:61:82:61:1c:26:ba:bf:3c:e7:5b:b9:d1:
af:24:13:77:e9:61:97:1c:9b:da:72:45:d6:b6:4b:
35:53:96:69:02:d2:89:bf:5e:44:a3:e7:92:3b:8f:
d1:b8:24:41:26:49:c7:71:bb:2d:bd:26:7c:d7:03:
c0:2f:a8:a3:67:44:3d:5f:07:03:fd:ca:fe:8b:85:
67:b7:ff:60:2f:ed:e6:de:96:e2:04:5f:c9:64:10:
98:af:92:09:d4:bc:c1:f5:4b:75:11:29:62:33:72:
01:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AA:34:AD:9E:98:AC:4D:19:50:06:D2:E5:55:FC:58:15:73:BC:36
X509v3 Authority Key Identifier:
keyid:7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:30:0e:47:4f:77:51:6c:5b:89:14:38:c9:32:af:53:da:61:
85:6f:19:a7:83:2a:a1:6c:8f:a4:2c:74:2a:da:47:6b:40:fe:
be:84:f5:41:c3:7e:40:d9:82:68:e2:c7:00:99:5c:aa:75:5e:
c0:50:e7:43:6d:d2:10:ad:76:54:85:40:ae:c8:ca:c3:20:41:
0f:6f:05:fd:fa:b0:bd:16:5a:49:a4:17:ba:3e:ba:ed:12:12:
8b:ba:50:cc:32:f9:58:51:3e:d5:4e:4f:7d:3a:83:38:e1:fa:
51:df:82:ba:7f:63:ba:d5:49:b8:67:a7:a6:4c:02:fa:12:ee:
b8:67:f8:fc:7c:3b:44:52:74:76:a8:2e:13:a9:66:f6:e9:eb:
14:4d:6f:99:9e:55:02:41:97:15:69:f1:c2:5e:3a:af:25:5a:
0b:df:61:51:e3:36:35:cc:dd:3e:cb:57:02:60:85:fb:67:7f:
e8:96:ef:01:61:e3:31:53:2b:cf:d0:51:ea:94:35:96:1b:62:
46:50:0e:75:de:9f:a6:5d:82:47:3e:87:cd:79:c6:55:cf:85:
7b:ac:72:ef:11:04:3d:ea:e9:12:43:32:c3:0f:47:99:d2:6f:
2a:c5:40:85:16:ca:f7:b9:60:49:2a:c0:95:40:d9:f7:f1:50:
c5:a2:1f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:42 2026 by rpki-client