Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
File: eD8ukq1ZxwyM3CiygCniKXBcbJE.mft (raw, json)
Hash identifier: WjcPNIsQeZKLIAFntYmJNHdM2tG/cTeJJinSFUDSorU=
Subject key identifier: 16:26:70:F2:BF:33:F0:78:81:07:8E:D6:0A:1D:02:48:84:4E:38:1B
Authority key identifier: 78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
Certificate issuer: /CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Certificate serial: 019D98BD87AE11241228D36D83CD0947BB99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
Manifest number: 0DB2
Signing time: Fri 17 Apr 2026 00:00:50 +0000
Manifest this update: Fri 17 Apr 2026 00:00:50 +0000
Manifest next update: Sat 18 Apr 2026 00:00:50 +0000
Files and hashes: 1: cqkPcUlhylPWROpeUvaKpM1IHzI.roa (hash: Vj/WfOnXkP6T4SuWUuZJIwljoQd2+9R6QoAl56Tye4o=)
2: eD8ukq1ZxwyM3CiygCniKXBcbJE.crl (hash: AOKWQyKaegDnj6pF/ZvXg8n7X4qNZ3SBeVzm6T1RzmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:87:ae:11:24:12:28:d3:6d:83:cd:09:47:bb:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Validity
Not Before: Apr 17 00:00:50 2026 GMT
Not After : Apr 18 00:00:50 2026 GMT
Subject: CN=162670f2bf33f07881078ed60a1d0248844e381b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cb:84:ca:f6:af:81:21:8a:6a:84:94:f4:a9:
eb:51:13:98:f0:53:c9:87:8f:a7:ec:82:c0:dd:d8:
5e:37:8a:45:f1:61:d4:8f:de:4a:b6:f8:61:40:36:
de:81:d5:bb:d9:92:95:66:88:8b:1c:76:ea:7d:80:
8a:fa:84:a4:9a:b3:e2:46:35:9d:9f:52:e5:5b:a1:
4d:38:fd:cf:a6:a7:77:36:df:0d:df:79:2f:ec:4b:
28:27:46:78:eb:ad:4c:99:ba:50:c0:6a:08:3e:2b:
8c:cc:64:1c:1d:19:57:dc:52:0f:c9:88:25:5e:1a:
bf:0f:de:57:a2:2f:32:db:45:fd:ce:f2:ec:6b:c9:
f3:6c:fb:9e:88:f1:96:22:45:41:28:57:10:07:ee:
de:cb:6f:56:bd:3c:1e:31:8f:86:59:3e:a4:7a:fc:
47:e7:fc:21:5d:eb:e3:45:81:ee:41:7e:9f:18:f6:
cd:b3:58:34:5c:cc:50:e2:35:3a:69:ba:ef:18:15:
6a:f9:de:72:b3:14:a7:10:bf:4c:39:41:50:e0:ce:
c4:b7:c5:87:08:16:5c:41:d9:37:49:c6:2c:d8:2d:
0a:9a:aa:98:f6:f9:9b:33:d7:c0:f8:55:27:4a:bf:
eb:e6:29:07:1c:c7:ad:cf:f1:8b:79:c6:91:c9:6f:
d1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:26:70:F2:BF:33:F0:78:81:07:8E:D6:0A:1D:02:48:84:4E:38:1B
X509v3 Authority Key Identifier:
keyid:78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:77:b5:c5:f2:16:a2:8e:37:44:dc:27:c7:2a:2e:69:66:68:
12:78:4d:f5:d8:53:ef:2d:20:1c:8f:ca:ee:dd:1f:9a:f1:6d:
d8:18:f7:51:8e:c1:17:81:b1:58:8a:0b:fe:cf:e7:0c:be:96:
d9:7c:5c:8d:1c:13:14:15:17:96:7b:8a:84:c3:6b:13:74:ba:
aa:c0:df:45:32:34:d0:7e:0a:25:17:50:2a:d6:41:45:2a:82:
6e:10:70:90:9f:bb:7f:3a:93:d0:7b:ed:ad:58:85:46:a1:dd:
3f:21:bc:b6:dd:9d:d8:90:f4:be:67:8c:c5:e7:07:2d:de:18:
30:67:2e:b1:23:d8:11:20:e7:35:e8:f2:d1:e3:d7:a4:34:87:
f9:6e:db:0a:6d:54:bd:49:f6:3b:03:d0:78:55:ce:24:54:4d:
d5:b9:d0:36:96:fa:76:20:34:22:7b:52:09:6d:48:6a:da:d5:
4a:40:a6:4a:b0:7d:eb:c1:aa:f2:6e:e4:36:6e:f7:e2:1f:eb:
5c:3e:b4:87:1e:cd:c8:c8:e1:1f:56:27:b3:e0:39:34:86:92:
bc:17:5c:6d:1d:a9:ab:9b:a2:b8:78:27:04:4e:0d:08:b8:27:
0d:ed:e2:50:cf:08:0e:7c:10:a8:ba:ce:17:8a:18:f0:39:7a:
26:f8:f0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:22 2026 by rpki-client