Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
File: eD8ukq1ZxwyM3CiygCniKXBcbJE.mft (raw, json)
Hash identifier: 2SyjU71hG71ypDWPCtVQViC1knYY76HloSjQA729Cd0=
Subject key identifier: 2F:AB:C5:6F:06:FB:0A:D1:20:51:C3:9A:70:22:3A:A8:B7:17:9C:42
Authority key identifier: 78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
Certificate issuer: /CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Certificate serial: 019D9AABAED9C77FB9115C6E641DBA446777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
Manifest number: 0DB3
Signing time: Fri 17 Apr 2026 09:00:35 +0000
Manifest this update: Fri 17 Apr 2026 09:00:35 +0000
Manifest next update: Sat 18 Apr 2026 09:00:35 +0000
Files and hashes: 1: cqkPcUlhylPWROpeUvaKpM1IHzI.roa (hash: Vj/WfOnXkP6T4SuWUuZJIwljoQd2+9R6QoAl56Tye4o=)
2: eD8ukq1ZxwyM3CiygCniKXBcbJE.crl (hash: LBQrNrmJM4upo6lQ+9TB8hrtOp1R1GvVT7N+JlfVt+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:ae:d9:c7:7f:b9:11:5c:6e:64:1d:ba:44:67:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Validity
Not Before: Apr 17 09:00:35 2026 GMT
Not After : Apr 18 09:00:35 2026 GMT
Subject: CN=2fabc56f06fb0ad12051c39a70223aa8b7179c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:92:b6:8c:c8:18:88:0d:ea:d4:e0:ff:40:
e2:35:c0:a8:c9:68:1f:39:fd:2a:19:75:24:82:cc:
a8:e9:d3:a3:ad:07:5b:71:44:59:42:f4:54:89:bd:
89:26:f9:7b:e0:69:f3:c5:52:69:aa:16:f3:ad:af:
63:62:2d:ea:5d:4c:42:f9:1a:b8:7b:80:28:3c:e9:
57:cf:fa:43:e2:17:01:dc:1b:d0:f5:dc:8d:ff:45:
8f:38:9f:54:ad:ab:75:93:b1:d5:85:e6:ff:db:1e:
15:05:9e:01:2b:23:d0:08:fc:77:cd:af:86:e1:33:
20:2b:5b:39:71:20:35:4f:47:33:83:be:6d:c2:f2:
75:84:73:52:6c:f0:7d:53:59:8e:d2:07:0e:0c:a2:
bc:49:c0:fe:58:03:13:cc:0c:ea:a4:d6:aa:80:b1:
d1:36:7e:65:8f:70:ef:4b:d1:55:35:e5:5b:d7:b1:
c6:d0:03:e6:4d:79:f6:5d:14:ae:d4:a2:41:d1:52:
d5:e8:ce:28:ea:23:e8:26:f9:6d:be:6f:0a:c4:d0:
42:88:97:65:78:88:10:8e:24:48:07:69:56:74:d4:
db:b5:ec:e8:90:67:d4:f1:fd:a7:9e:ee:04:ea:95:
51:c4:ac:45:23:f4:ae:a8:07:0a:4c:91:7e:06:7f:
24:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AB:C5:6F:06:FB:0A:D1:20:51:C3:9A:70:22:3A:A8:B7:17:9C:42
X509v3 Authority Key Identifier:
keyid:78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5b:7e:3f:bc:83:64:17:c9:23:68:cc:e7:80:98:56:9e:58:
60:f2:2e:71:d4:bf:1b:77:0f:6e:47:d9:7b:52:07:52:45:e6:
ed:bd:b6:a3:29:3b:c6:31:4a:b8:46:59:eb:a7:90:2c:4a:31:
57:cb:0d:46:cd:47:96:53:6e:fc:ec:13:e0:95:02:d0:b5:cd:
db:f3:a7:8f:8d:aa:03:58:a8:ed:a4:58:50:92:c5:98:03:5d:
0b:4e:f0:cd:97:2f:a7:e6:9e:32:08:53:ab:a8:6b:b3:52:83:
df:e4:cc:41:36:df:b0:93:20:27:78:65:28:75:e2:ab:06:c7:
31:ad:bc:19:bb:70:3c:fe:b3:68:c0:bd:12:75:0f:57:38:fa:
9b:0d:96:9f:89:c8:49:67:b8:4f:83:34:ed:03:b0:e8:7e:76:
48:db:e8:4c:02:f7:5b:be:9f:3f:0a:49:4b:cd:1b:95:9d:97:
c9:83:e1:23:db:de:d6:92:a7:fe:d7:f0:0a:d2:1b:72:24:c9:
21:15:3f:40:ae:6c:83:7f:73:ed:a4:80:16:0d:c4:e4:e4:b3:
c8:af:74:c4:16:2d:99:e7:d3:de:70:f8:19:06:88:d7:c6:a2:
41:77:12:9f:c6:6a:5f:8c:75:13:3d:0d:db:fa:32:85:77:48:
bf:c5:63:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:40:07 2026 by rpki-client