Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft
File: eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft (raw, json)
Hash identifier: ojcy63BLV+ciuhMIoBmzYRio6BE9Jhf1XCZE8ZkkOhI=
Subject key identifier: B0:EF:9D:43:B8:10:7D:B6:0D:0D:C2:D8:2D:9F:3B:A4:00:56:08:56
Authority key identifier: 79:46:64:7D:9D:57:59:A0:1F:8D:18:66:8A:37:7C:06:3F:F5:91:36
Certificate issuer: /CN=7946647d9d5759a01f8d18668a377c063ff59136
Certificate serial: 019CAED9C71DD4B97FF7C8133D68BBF3F48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft
Manifest number: CD
Signing time: Mon 02 Mar 2026 14:00:33 +0000
Manifest this update: Mon 02 Mar 2026 14:00:33 +0000
Manifest next update: Tue 03 Mar 2026 14:00:33 +0000
Files and hashes: 1: VP7p7QWMGVsrXJpO4NYHANZrxFg.roa (hash: G8VyFd0PCuQnnq9N5MqzV/bE1ybVAE0qxw/z0bEFIbE=)
2: c0rxrQoEWqWrd8tyLYNrU8iupbU.roa (hash: OO2iQo06n11TlqHfIIjfSy8I3N4op5PTjoqiameHkZA=)
3: eUZkfZ1XWaAfjRhmijd8Bj_1kTY.crl (hash: A03p9RNPVtjF83LJbezFYipZkBY4JGhAWMN1dRDwCUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:c7:1d:d4:b9:7f:f7:c8:13:3d:68:bb:f3:f4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7946647d9d5759a01f8d18668a377c063ff59136
Validity
Not Before: Mar 2 14:00:33 2026 GMT
Not After : Mar 3 14:00:33 2026 GMT
Subject: CN=b0ef9d43b8107db60d0dc2d82d9f3ba400560856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:83:43:3e:4f:63:30:aa:45:27:a0:74:3d:2c:
86:cb:b6:de:bc:7a:b0:9c:ee:5b:3b:9f:02:b7:52:
d7:1e:d9:2d:56:11:bc:37:c3:d1:bc:87:ab:7d:54:
75:e8:f1:39:f1:2d:97:92:c4:32:7b:8f:2d:58:91:
45:f4:ed:78:32:14:e5:35:65:96:e1:7d:22:e4:05:
83:91:98:a0:d7:c4:5b:13:b5:5c:0f:13:6f:2f:89:
62:d9:25:bd:4d:ab:6b:17:f5:24:7d:4b:6a:d0:d9:
9f:44:61:05:c4:a0:59:66:55:c1:ca:50:c9:4f:b3:
52:22:cb:c8:ae:ba:e1:21:19:52:16:66:e0:c8:1c:
29:55:a5:48:03:3e:a7:1e:b0:07:af:b5:6a:05:b6:
83:58:88:20:26:30:9a:77:4f:2a:03:e4:0d:e3:f9:
30:88:52:aa:34:97:72:0f:ef:04:7a:60:e1:84:9c:
63:9c:80:b8:8d:82:c8:f2:28:af:7c:38:c8:88:a7:
54:2f:56:6a:b8:7c:40:4c:80:a5:2f:64:39:9a:a1:
c4:3c:1c:b7:91:bf:c7:e0:f1:83:6c:58:30:88:30:
e1:6a:ca:77:0f:8c:a3:d5:d0:28:bc:1c:36:d0:ba:
c5:0a:b4:bc:b2:7c:ed:5f:f2:34:9b:a3:98:c0:53:
0e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EF:9D:43:B8:10:7D:B6:0D:0D:C2:D8:2D:9F:3B:A4:00:56:08:56
X509v3 Authority Key Identifier:
keyid:79:46:64:7D:9D:57:59:A0:1F:8D:18:66:8A:37:7C:06:3F:F5:91:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a7:23:37:7a:d6:fd:c1:51:2e:86:66:f9:b0:f4:2b:e6:39:
09:69:69:81:b8:a7:c2:fd:ca:2b:db:75:0c:42:8c:6d:eb:e0:
dd:09:ac:be:70:dc:d3:db:e5:8a:2d:1d:f5:f3:c7:ee:33:34:
20:91:bf:7e:2a:a1:f7:ef:9e:6a:13:aa:92:d9:9b:50:45:53:
fe:0b:85:69:b3:ff:99:11:95:85:ee:44:96:99:49:78:ad:25:
46:bf:80:46:8a:4d:21:f2:63:24:be:2a:64:4a:1b:f1:62:cf:
b9:0c:49:14:d7:35:34:b9:78:d2:a3:7a:ef:2f:1b:a2:82:f3:
0d:13:71:a0:e4:c9:33:0e:39:3a:77:e4:9e:04:b5:8e:f6:30:
57:67:2c:0f:60:bd:23:37:4e:14:f7:b8:b1:0f:01:d6:5d:ad:
5a:e3:b4:5d:c4:0c:1c:0c:c9:98:eb:cd:4e:eb:80:b2:42:92:
54:51:f5:d7:de:01:86:bd:44:3e:be:02:64:0e:3f:fd:ed:81:
81:6c:2f:7a:54:3f:c4:6a:60:80:9b:45:5d:5f:d7:24:d1:2d:
c4:22:3b:6e:a4:9e:08:78:02:7c:f3:96:a6:65:e0:d0:7f:10:
f2:0c:21:cc:d1:b3:f7:8c:85:fd:83:7a:24:71:d7:cb:2e:d7:
0f:00:af:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:36:06 2026 by rpki-client