Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
File: eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft (raw, json)
Hash identifier: fn2euyFKz5vARIVahjpzB2NVRhxISCSCkyZzH8UJA+s=
Subject key identifier: 4E:87:67:51:33:05:E9:C7:3C:61:97:95:AF:1E:2B:82:DE:55:31:10
Authority key identifier: 78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
Certificate issuer: /CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Certificate serial: 019DA3AF0606B552F5B5A59BDE61C0CA10E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
Manifest number: 1609
Signing time: Sun 19 Apr 2026 03:00:49 +0000
Manifest this update: Sun 19 Apr 2026 03:00:49 +0000
Manifest next update: Mon 20 Apr 2026 03:00:49 +0000
Files and hashes: 1: 3edVNIQ8giF1qXuIKY5zvC52QPU.roa (hash: xFzOrGAmYF8WxAniQT/SClssrLBypXfT4TnwjdoYxO8=)
2: eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl (hash: LU7uleLzScTzY8m7+ntU8ClEMsSyOZ0KpYZSqwP4d7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:06:06:b5:52:f5:b5:a5:9b:de:61:c0:ca:10:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Validity
Not Before: Apr 19 03:00:49 2026 GMT
Not After : Apr 20 03:00:49 2026 GMT
Subject: CN=4e8767513305e9c73c619795af1e2b82de553110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f1:ea:f5:05:80:4b:46:04:4f:b4:92:4a:2d:
e7:62:9c:0c:df:7a:56:cd:21:0c:fa:5e:5b:1f:42:
83:09:4e:82:fd:9e:be:55:17:8c:ff:82:92:49:a9:
78:e0:6d:68:2c:08:89:9b:3f:17:e1:f4:ba:2e:dd:
10:b1:74:0c:47:63:ba:5c:d8:6c:2c:3b:e3:a6:42:
39:91:a6:8b:60:8f:40:fc:c2:11:3a:fe:07:71:57:
54:08:ca:16:9f:95:da:82:e3:c6:11:aa:e2:ed:80:
7c:3c:9d:49:fc:74:25:60:74:e1:f2:24:0e:1c:d0:
b9:43:ab:4a:3a:6c:be:ca:01:f0:d3:bc:7d:27:af:
04:1f:dd:8d:ba:57:71:cf:b9:0c:5c:d6:42:f5:c6:
95:66:4a:3c:53:11:2b:b1:0e:2d:0f:3f:82:0c:8e:
36:d2:9e:52:87:02:36:2f:21:8a:50:1e:63:d9:a3:
1d:17:18:f6:58:d8:1d:47:d4:c9:0e:ab:b9:71:5a:
ad:25:f1:cb:b2:10:67:cc:93:47:e9:5b:6c:0c:bf:
2d:ba:b4:01:d2:16:67:8f:c5:f9:f5:f5:38:98:0f:
bc:c3:1c:31:55:74:f1:16:b9:a2:68:ec:f6:85:63:
1b:ba:f7:3f:04:c6:c0:af:e9:8a:4f:2d:57:b9:67:
15:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:87:67:51:33:05:E9:C7:3C:61:97:95:AF:1E:2B:82:DE:55:31:10
X509v3 Authority Key Identifier:
keyid:78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:c8:8c:cd:e4:59:e8:59:bc:70:71:60:bd:46:c5:92:e7:3e:
8d:f5:08:48:39:ff:d0:84:ee:08:1b:6c:75:94:64:a5:e4:d7:
6e:0f:14:2a:cc:40:1d:d2:82:04:9c:a6:6e:1e:d5:71:38:0a:
01:9e:ce:7b:cf:b1:bc:26:ca:58:5b:92:f5:a1:37:db:ff:e4:
1c:9e:f2:75:cb:bf:e4:47:08:3c:7b:57:31:84:16:be:e4:81:
0c:33:e8:7f:c7:e4:fa:a7:29:21:13:81:30:38:a2:46:fb:e5:
9e:99:e6:96:6e:e3:c6:b0:97:51:d7:9d:19:41:b6:f9:fb:2e:
a6:7a:fb:64:16:eb:b2:a2:3e:20:82:6b:f1:52:f8:e3:be:09:
5a:39:f6:32:49:c7:21:14:38:da:6a:19:c7:c5:39:3a:f9:45:
ff:e2:cd:9c:78:01:b2:48:41:b3:61:f0:ed:3b:1e:0d:8a:50:
6b:d0:cf:a4:59:41:2e:9c:81:71:fc:37:4f:67:1e:a9:01:a0:
e2:1e:18:4a:8b:18:2c:aa:55:25:c4:39:9a:b5:51:10:04:16:
98:17:22:f7:38:07:0f:3c:2d:cf:f7:a6:d6:a3:63:ea:cb:40:
a8:86:8f:03:0c:91:2d:91:e0:a9:05:0d:32:3e:b3:1a:8e:79:
35:a5:a5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:49:44 2026 by rpki-client