Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft
File: eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft (raw, json)
Hash identifier: Y6XR+aicUlWAO6IiO8sh/ocAc7mbTCzBnutrP0LNyys=
Subject key identifier: D2:0C:3E:F2:E8:B3:74:29:B5:2F:82:27:02:E1:32:67:97:B0:50:49
Authority key identifier: 79:46:64:7D:9D:57:59:A0:1F:8D:18:66:8A:37:7C:06:3F:F5:91:36
Certificate issuer: /CN=7946647d9d5759a01f8d18668a377c063ff59136
Certificate serial: 019D9A749B66325A1B1C943ED95AF3108AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft
Manifest number: 0147
Signing time: Fri 17 Apr 2026 08:00:26 +0000
Manifest this update: Fri 17 Apr 2026 08:00:26 +0000
Manifest next update: Sat 18 Apr 2026 08:00:26 +0000
Files and hashes: 1: VP7p7QWMGVsrXJpO4NYHANZrxFg.roa (hash: G8VyFd0PCuQnnq9N5MqzV/bE1ybVAE0qxw/z0bEFIbE=)
2: c0rxrQoEWqWrd8tyLYNrU8iupbU.roa (hash: OO2iQo06n11TlqHfIIjfSy8I3N4op5PTjoqiameHkZA=)
3: eUZkfZ1XWaAfjRhmijd8Bj_1kTY.crl (hash: fuY0dNJ1LgfH5NIaFfl09j3pIIbnAbLisPAnRnpq7JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:9b:66:32:5a:1b:1c:94:3e:d9:5a:f3:10:8a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7946647d9d5759a01f8d18668a377c063ff59136
Validity
Not Before: Apr 17 08:00:26 2026 GMT
Not After : Apr 18 08:00:26 2026 GMT
Subject: CN=d20c3ef2e8b37429b52f822702e1326797b05049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fc:4a:b7:68:93:2a:2b:d6:ca:dd:89:94:d1:
9f:80:b0:ca:08:fb:58:d7:3a:3e:98:dc:9d:ae:2e:
92:37:11:ff:83:83:58:86:19:87:60:d8:fe:fb:6b:
36:f7:52:c0:3a:68:77:fb:1a:d3:82:09:e3:ea:40:
ec:2d:91:fe:44:7a:e2:ab:2c:ea:93:05:99:32:43:
6b:91:29:6e:d1:29:f2:ac:bc:5e:62:7f:87:fd:d2:
dc:d5:e1:8f:00:e1:29:b8:4f:61:cf:82:de:77:43:
60:14:f7:1b:69:46:d2:05:17:84:a4:4e:f1:af:d6:
a8:f7:0f:de:54:39:4e:9d:8b:cf:a0:16:01:92:c6:
b8:25:46:38:c4:e6:a5:72:bc:66:4f:12:43:15:40:
11:34:2a:c1:0a:32:20:aa:69:2e:44:48:c8:8d:42:
54:ab:ad:01:3b:de:e2:a5:a8:d4:a5:90:3a:f0:62:
f8:08:28:bf:6e:9b:c0:5d:75:8f:e0:dd:b5:dc:dc:
9f:b9:8f:6a:67:45:32:7c:17:c5:e0:c4:6e:ee:85:
7e:97:8e:91:f0:c4:b9:c7:ba:cd:79:10:3b:4c:78:
b6:d0:24:8b:76:7a:73:c3:70:eb:ed:a8:23:1e:fa:
60:c9:74:49:75:7a:2d:2f:40:ba:13:98:d9:57:aa:
76:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0C:3E:F2:E8:B3:74:29:B5:2F:82:27:02:E1:32:67:97:B0:50:49
X509v3 Authority Key Identifier:
keyid:79:46:64:7D:9D:57:59:A0:1F:8D:18:66:8A:37:7C:06:3F:F5:91:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:08:0a:04:4e:8a:f1:53:93:3a:c9:02:a3:61:ab:ab:58:f4:
9b:d5:42:69:74:19:38:76:0e:eb:fb:78:ca:73:42:6a:4f:f5:
1d:0e:31:e9:53:d4:96:13:73:0c:f4:0d:8b:87:f4:90:b1:83:
20:5a:24:28:2b:46:4d:d2:38:0e:d5:91:b3:72:0b:d6:38:1c:
b2:1e:06:6c:e3:c7:fc:7b:58:aa:8d:3d:ac:84:c8:85:fc:c7:
5f:14:a8:89:74:67:de:9e:ba:8a:29:8d:d4:e6:ab:e1:2a:61:
70:fe:de:4c:4a:f3:97:85:ee:90:b0:c7:76:2f:68:df:b1:cb:
dc:4a:01:d9:00:ea:14:90:67:84:16:a3:4b:d0:3a:9f:3d:8c:
e0:dd:6f:c2:42:5e:0a:72:ab:d6:c5:b2:1d:56:75:4d:a6:a2:
1f:17:aa:76:f4:82:81:9b:dd:25:98:55:a8:3a:81:80:4c:db:
b7:46:56:35:d5:80:d5:90:0d:e7:fd:cb:4f:3a:0a:fc:ac:9c:
38:6b:7f:42:45:0b:29:f3:fb:da:99:ab:5d:fd:c9:65:98:73:
5a:33:82:91:3a:bc:22:b2:4b:06:b3:db:13:5e:80:fa:0e:db:
21:62:ae:6d:2f:d4:3a:ef:87:a8:15:b2:ed:c2:d9:0f:c5:94:
1b:22:c3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:11:20 2026 by rpki-client