Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft
File: euxtTzVbc4ad_qGnkYDIoheN8f0.mft (raw, json)
Hash identifier: oewnUAqyZXC4S6zHO+4tyC84Tpm3OsBjV9tSggPHEOM=
Subject key identifier: CA:25:6E:AE:53:8A:D7:E9:EF:B1:F5:A1:9A:5D:EA:75:B3:DC:CB:83
Authority key identifier: 7A:EC:6D:4F:35:5B:73:86:9D:FE:A1:A7:91:80:C8:A2:17:8D:F1:FD
Certificate issuer: /CN=7aec6d4f355b73869dfea1a79180c8a2178df1fd
Certificate serial: 019CAFB5AD956100A22FE9EDFA8726A2980A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/euxtTzVbc4ad_qGnkYDIoheN8f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft
Manifest number: 03F0
Signing time: Mon 02 Mar 2026 18:00:45 +0000
Manifest this update: Mon 02 Mar 2026 18:00:45 +0000
Manifest next update: Tue 03 Mar 2026 18:00:45 +0000
Files and hashes: 1: B1wrCLFvDtkXz7uzUA6Rjnhgs8Q.roa (hash: YIecpR2AzT5IE9MSa8CIu3UuOymap4GrOtDjDoFFQT0=)
2: euxtTzVbc4ad_qGnkYDIoheN8f0.crl (hash: h8JGXfKd/wGlReNeFIExje4n1OJ/ACS3YY+0LgE0jUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/euxtTzVbc4ad_qGnkYDIoheN8f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b5:ad:95:61:00:a2:2f:e9:ed:fa:87:26:a2:98:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aec6d4f355b73869dfea1a79180c8a2178df1fd
Validity
Not Before: Mar 2 18:00:45 2026 GMT
Not After : Mar 3 18:00:45 2026 GMT
Subject: CN=ca256eae538ad7e9efb1f5a19a5dea75b3dccb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4c:f2:a1:55:7f:d8:2c:c6:d0:1b:40:2e:35:
6d:75:b5:26:a6:ca:3e:cf:02:25:e6:74:e1:0e:d1:
cd:e5:04:c4:dd:0b:4e:ed:1c:65:17:d7:fd:8c:ae:
cd:dc:2a:f3:68:8d:74:e1:38:c2:64:72:d8:43:05:
f2:e4:db:25:5a:14:d4:87:d0:b9:21:5b:a9:2a:c5:
1d:c2:96:b2:88:e8:3f:d8:3e:4f:c6:82:b1:24:d5:
40:af:08:49:07:97:40:e1:60:ec:92:ba:fe:18:21:
57:86:6f:17:eb:aa:32:ec:91:06:32:23:ba:5d:40:
88:40:e4:c7:64:cf:a3:48:d1:ca:8b:61:6f:70:fb:
4d:85:b0:0b:db:21:f4:35:b8:91:c6:04:d9:39:72:
46:fa:20:8f:be:ba:e6:1f:75:7f:ff:1e:8f:3b:8c:
5c:0b:a0:98:e2:8c:47:16:8a:d3:e3:5c:36:7b:14:
a5:14:6c:11:e3:7a:93:37:1e:f5:90:02:42:5c:8b:
a7:ec:97:a0:fa:3a:cf:db:8a:6d:6b:84:96:3e:90:
e2:92:ed:40:13:ef:6d:ee:5f:64:6a:68:87:5f:71:
00:37:08:df:67:a4:91:00:ea:97:a5:4a:f4:ab:59:
5d:a7:6d:e3:b7:a4:03:b0:bd:2e:1e:09:22:c1:09:
27:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:25:6E:AE:53:8A:D7:E9:EF:B1:F5:A1:9A:5D:EA:75:B3:DC:CB:83
X509v3 Authority Key Identifier:
keyid:7A:EC:6D:4F:35:5B:73:86:9D:FE:A1:A7:91:80:C8:A2:17:8D:F1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/euxtTzVbc4ad_qGnkYDIoheN8f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ab:04:e5:04:e3:11:33:bc:4b:48:8e:0f:2c:ab:23:f5:ef:
67:bc:53:30:55:53:52:2f:e9:b0:5c:2d:6a:11:89:fb:7a:10:
94:af:35:fe:dc:1a:78:b9:6f:b4:44:1b:07:32:1f:1f:36:4f:
81:dd:93:2b:91:8b:82:a7:3c:f9:96:be:88:b4:5c:75:10:94:
ca:55:8d:e5:f1:23:01:eb:82:b6:c3:41:af:f4:8b:92:f5:6f:
28:ca:39:bf:6a:61:55:a1:a7:aa:48:60:00:4b:87:75:9a:38:
68:70:53:09:a2:66:77:6d:4b:52:8e:91:12:c2:76:a1:12:2d:
48:f2:32:df:c3:89:fb:5a:3e:12:f7:23:ff:72:93:41:59:ae:
c4:b4:8c:7e:86:6c:cb:35:6e:58:f6:96:8f:65:b9:24:1c:71:
e0:50:96:6b:77:61:d9:fe:b3:e5:a0:ec:1e:84:94:aa:8a:98:
84:50:e0:6b:97:fe:9d:4b:29:97:f1:4e:d6:c9:cc:47:9b:a8:
12:e9:c9:e1:de:42:47:b7:32:cc:d1:c8:53:16:2d:d5:19:01:
a6:7f:82:45:c2:b0:ae:90:e0:c9:76:45:7a:f7:29:07:b4:b2:
38:a9:94:37:e7:9f:c8:59:f4:38:0d:39:66:d0:4b:b9:02:12:
77:78:b4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:23:44 2026 by rpki-client