Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
File: eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft (raw, json)
Hash identifier: 62R1/9j88h2lGdOqgCaZxalYCxeDkZNTb4ZJ7COe7Jk=
Subject key identifier: 8A:07:A5:81:D7:03:C5:77:08:8B:A8:4A:30:7A:61:D9:A3:80:45:72
Authority key identifier: 78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6
Certificate issuer: /CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6
Certificate serial: 019CAD904466229C572B4586455D43F17DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
Manifest number: 023B
Signing time: Mon 02 Mar 2026 08:00:38 +0000
Manifest this update: Mon 02 Mar 2026 08:00:38 +0000
Manifest next update: Tue 03 Mar 2026 08:00:38 +0000
Files and hashes: 1: TQNI8cQSDUVw34W6ZTwGYZVMqXk.roa (hash: Awh5KrfX+HKhRUgeqGTHvrRVEc6ZCfXov7wUkGa6uMc=)
2: eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl (hash: RLFf+Vz2kOw4lqyQfD5I6q6QITeSsW4LJB7bT4R0Vdg=)
3: vcYfbPfGVs0aMYKOlxwdnUc65Uc.roa (hash: YMNkeJBfcEDciUVO4DqSW7poLvVvmF0rwrSlq2tpwWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:44:66:22:9c:57:2b:45:86:45:5d:43:f1:7d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78e98dee9aadc86b4dfa9e168d921bd80ba3f3a6
Validity
Not Before: Mar 2 08:00:38 2026 GMT
Not After : Mar 3 08:00:38 2026 GMT
Subject: CN=8a07a581d703c577088ba84a307a61d9a3804572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6f:3f:e2:5a:17:ca:91:c9:b2:e7:a5:33:70:
7e:2e:8b:90:95:f2:bb:46:38:5f:39:43:f4:1b:e6:
ce:ea:cf:22:48:bb:a9:44:a6:f0:77:a9:36:6f:5f:
0d:8c:8c:0b:bd:1b:7f:c8:cd:99:29:6f:66:9a:cf:
7b:59:09:14:26:96:27:90:f3:81:c0:41:c8:a4:f8:
bb:a2:03:47:c1:e0:39:45:19:2a:7f:9c:0d:72:f8:
5c:3e:69:5f:2d:37:30:75:02:ad:56:fb:d2:b3:5a:
b1:62:46:3a:c7:a8:a6:f2:be:0e:ae:48:48:e3:5a:
31:44:67:7e:5e:16:5c:5e:34:1c:25:f5:2c:0a:d6:
ab:1d:1c:66:8a:ab:e0:23:1b:70:0d:03:08:b7:86:
76:14:72:62:75:d3:b2:2e:47:b0:66:2a:fd:b1:80:
97:f2:1d:74:f3:b5:a5:dd:68:ea:e0:4d:14:b2:fe:
5b:a2:8a:78:79:06:70:f2:5e:1b:fc:10:b9:56:27:
6d:b9:18:d2:aa:16:18:38:31:9e:a6:fc:9c:da:cb:
7b:fb:f9:05:03:4b:c1:fa:c2:9f:0d:84:15:5a:79:
54:3b:1e:56:f2:74:84:32:0a:1a:17:3d:1b:17:bf:
a5:93:9d:cb:d7:e8:27:82:9c:e4:02:0d:b8:b8:50:
ba:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:07:A5:81:D7:03:C5:77:08:8B:A8:4A:30:7A:61:D9:A3:80:45:72
X509v3 Authority Key Identifier:
keyid:78:E9:8D:EE:9A:AD:C8:6B:4D:FA:9E:16:8D:92:1B:D8:0B:A3:F3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOmN7pqtyGtN-p4WjZIb2Auj86Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1cc95-7529-4270-a6ec-5c71956a5377/1/eOmN7pqtyGtN-p4WjZIb2Auj86Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5b:b8:6d:e8:8b:e9:c2:76:ef:1d:ea:fb:85:3f:e9:a8:90:
a4:63:29:23:64:f3:52:ee:ee:03:79:9b:e4:db:e5:f4:d2:cb:
22:9e:87:a7:77:7e:64:c2:d0:06:87:8a:ea:31:4e:b1:fa:88:
14:35:8f:39:15:e3:4b:91:b6:c8:be:3a:2b:11:3d:fb:af:78:
13:91:30:60:6c:ad:73:ce:68:1b:e7:1d:3c:1c:a4:79:e2:f6:
85:c2:d9:ac:1c:17:5f:88:2d:17:a2:e9:97:87:f7:96:ab:a2:
05:ef:25:73:06:6b:e7:8f:43:52:3b:d8:c0:37:8d:42:62:ac:
28:19:fc:a1:f2:9f:65:9e:b6:85:49:38:36:7f:54:35:8a:33:
c5:11:01:bc:e9:c1:22:66:59:ec:ff:07:d9:8e:61:84:2b:7c:
d0:d8:2e:dd:73:9d:19:a3:8a:48:97:fd:b6:ba:eb:72:8d:2b:
50:e8:ad:24:f3:e2:87:33:aa:0e:bb:6c:f0:e6:b1:29:e9:99:
be:af:db:7d:05:ff:e7:24:f6:6b:55:bf:56:ef:a8:e5:82:ee:
81:ca:1b:ec:fb:26:9f:0b:52:b9:3a:0e:a3:12:17:08:64:22:
3a:2b:8a:2b:0f:ec:5f:05:d6:54:7b:b0:81:c8:d1:8d:80:dd:
df:e7:f5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:28:31 2026 by rpki-client