Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
File: eD8ukq1ZxwyM3CiygCniKXBcbJE.mft (raw, json)
Hash identifier: EHvEu2uFhDuGz66Oi90roqX0h334FSF3ztcSTq973+s=
Subject key identifier: 90:0A:8C:D2:85:1B:48:15:BD:DA:E8:DE:35:6D:BB:14:3C:C9:AF:4E
Authority key identifier: 78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
Certificate issuer: /CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Certificate serial: 019CAB349EB380BC7D41A6ECC6896D69381B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
Manifest number: 0D37
Signing time: Sun 01 Mar 2026 21:01:18 +0000
Manifest this update: Sun 01 Mar 2026 21:01:18 +0000
Manifest next update: Mon 02 Mar 2026 21:01:18 +0000
Files and hashes: 1: cqkPcUlhylPWROpeUvaKpM1IHzI.roa (hash: Vj/WfOnXkP6T4SuWUuZJIwljoQd2+9R6QoAl56Tye4o=)
2: eD8ukq1ZxwyM3CiygCniKXBcbJE.crl (hash: oyXgAM8D++bs5Dd+Soae6sItVnBO8nv5klquWHkre4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:9e:b3:80:bc:7d:41:a6:ec:c6:89:6d:69:38:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Validity
Not Before: Mar 1 21:01:18 2026 GMT
Not After : Mar 2 21:01:18 2026 GMT
Subject: CN=900a8cd2851b4815bddae8de356dbb143cc9af4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:5d:2f:3f:c1:07:74:24:42:40:8e:81:ab:
d6:ba:c6:94:92:3c:bb:8d:21:b9:c9:c5:0c:1d:b0:
39:c7:49:49:6e:99:2a:f7:1c:1b:da:c3:e1:d8:88:
9a:d0:a3:c6:b5:74:de:51:5e:da:f1:31:46:d0:46:
b1:6d:89:10:f5:d5:0c:60:03:b9:9f:9f:ad:0e:1b:
36:7e:2f:a7:68:aa:c7:23:b8:5d:ed:bd:a0:0b:ee:
ce:2c:34:93:44:03:a3:65:cb:58:ca:ab:0c:e0:a6:
e1:f8:f7:6e:5e:8c:3a:1f:d0:a6:b9:36:b8:9a:f9:
26:d8:24:b4:50:c9:1a:6e:8e:86:ec:6d:e8:0d:d0:
82:a3:25:35:1c:b7:9b:e7:15:8e:9b:f1:bb:bd:b7:
24:8f:7d:ab:68:4f:18:e8:ed:3d:31:11:31:e1:0b:
15:67:b1:ba:3a:ae:00:be:51:e8:45:74:b2:28:8f:
42:34:bd:c2:fe:ef:6d:79:f8:c2:10:e2:6e:da:fe:
f3:2a:04:db:58:11:76:df:bc:85:f8:df:c5:a0:08:
be:da:62:87:14:ea:ba:ef:8a:fc:0c:eb:a5:c8:de:
41:ff:34:91:7d:dd:59:df:c2:bb:06:fa:ac:91:82:
98:cc:9b:41:70:7e:4f:06:53:95:12:cd:71:08:2b:
64:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0A:8C:D2:85:1B:48:15:BD:DA:E8:DE:35:6D:BB:14:3C:C9:AF:4E
X509v3 Authority Key Identifier:
keyid:78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:29:65:6e:49:c0:d8:06:d3:78:10:c5:66:aa:6c:d7:76:ef:
6e:a2:5b:a0:0b:2f:c2:5c:fb:b9:31:03:b2:df:c1:6e:e7:9e:
a9:5f:ae:aa:fb:20:61:bd:74:75:5f:df:61:3b:7e:17:1a:35:
ef:0d:a3:9e:9a:b6:de:2d:72:ab:e1:3e:98:d7:77:1b:02:cb:
80:d1:04:7b:54:91:bf:91:87:3a:99:6b:e6:0f:e8:2c:32:7f:
58:c8:e3:c1:67:c8:ff:02:18:46:0d:02:b4:7a:67:17:26:5e:
43:0a:f3:c2:7c:32:73:21:30:24:52:ea:b1:39:6d:4f:3e:d4:
9c:86:85:39:87:db:31:16:c6:c6:d9:bb:08:23:21:c8:92:00:
69:92:26:57:b2:bc:fa:13:be:56:b0:0f:da:80:76:7e:49:18:
88:1f:59:22:7f:3c:73:51:78:85:da:cc:75:cb:fc:a5:26:d9:
ca:82:2c:c9:13:07:05:b1:b9:2b:6e:c3:e3:78:13:b5:88:e4:
cd:86:c4:2c:b5:93:a6:03:d2:ed:53:a9:5d:e1:98:56:ba:9c:
83:ed:7c:45:e9:54:b4:f5:01:8d:04:45:a2:47:6e:10:c3:b5:
e7:7d:95:44:ae:f3:1e:29:98:bd:5a:27:ff:7c:1e:a3:84:7d:
69:34:28:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:10 2026 by rpki-client