Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
File: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft (raw, json)
Hash identifier: OhrTAanRVx3INlqrUf+0o2Sjb7AZU8LZE9sOWsCBbCw=
Subject key identifier: CA:3A:5E:65:C2:45:B4:6D:03:99:59:A9:73:57:D4:11:50:E3:A8:D9
Authority key identifier: 78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED
Certificate issuer: /CN=78fd422a1ddee016ee5f5a23101b93043af764ed
Certificate serial: 019D9AE29373364D74F349EEAB465B151214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
Manifest number: 0724
Signing time: Fri 17 Apr 2026 10:00:33 +0000
Manifest this update: Fri 17 Apr 2026 10:00:33 +0000
Manifest next update: Sat 18 Apr 2026 10:00:33 +0000
Files and hashes: 1: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl (hash: vMcr+bOePrlv+4wEwjlJjvb5y7qSyvLoNqs5p8Jp8Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:93:73:36:4d:74:f3:49:ee:ab:46:5b:15:12:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fd422a1ddee016ee5f5a23101b93043af764ed
Validity
Not Before: Apr 17 10:00:33 2026 GMT
Not After : Apr 18 10:00:33 2026 GMT
Subject: CN=ca3a5e65c245b46d039959a97357d41150e3a8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:b3:d9:99:a8:84:89:ee:c8:92:9f:b3:cb:
1a:da:23:c8:3a:0c:37:b7:17:be:dc:f3:05:38:06:
48:0a:53:71:b0:c3:f8:a6:0f:ce:e4:16:cc:fc:d6:
ef:eb:d1:0c:78:a8:c5:c4:f3:c9:3a:35:2f:39:15:
99:ec:23:0a:2d:0d:f3:9c:fb:59:03:fc:94:b2:48:
f3:32:dc:85:2a:c3:91:dd:13:44:99:05:40:69:46:
39:7b:ab:c1:b0:32:1c:77:bd:9f:80:d8:60:2d:90:
94:e9:24:da:60:5c:19:7d:c2:24:82:49:20:5a:b1:
7c:33:79:8b:0e:55:01:4a:6d:d9:10:2e:39:d8:3c:
00:97:45:bd:54:da:5f:e4:ff:d6:f4:2a:32:6a:80:
25:f2:3e:9c:ec:97:65:f8:d6:2e:ae:8e:90:2d:84:
b8:66:df:f5:69:c8:72:2c:37:b8:e3:77:37:18:f3:
bc:b0:2b:bb:a1:55:3b:af:0b:ac:08:b1:4e:66:9f:
c3:05:3d:38:3d:8f:7a:21:a0:f5:a1:4a:8a:a5:a2:
40:63:04:ce:12:44:bd:ac:3e:da:81:61:86:25:c1:
12:b8:bb:4e:f6:bb:38:73:98:98:84:ea:dd:bd:ef:
45:db:e4:60:ec:de:ff:9d:1c:c9:72:d2:ce:7a:4c:
6e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3A:5E:65:C2:45:B4:6D:03:99:59:A9:73:57:D4:11:50:E3:A8:D9
X509v3 Authority Key Identifier:
keyid:78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:53:f2:79:b4:d1:03:86:96:32:c1:43:4c:1f:b6:b9:39:ab:
88:66:0c:32:be:b8:b4:e2:44:f9:28:6d:44:b1:a7:0e:7a:95:
2d:aa:e3:db:73:32:19:20:57:28:95:3d:50:ef:a7:43:e4:35:
18:7d:11:d4:de:01:4e:f9:41:22:c5:f4:d3:7d:26:a3:94:54:
bc:a0:58:ba:a8:89:a8:08:75:3a:58:50:d9:73:a4:98:be:4c:
3d:8f:df:a0:aa:ea:03:94:60:e4:db:a0:3d:d6:5d:d7:80:7b:
fe:d1:6c:6b:01:a9:4d:d0:b9:cd:dd:1c:63:0b:8f:4f:35:37:
8e:7a:b3:57:5c:59:37:ee:b5:e4:24:60:78:c2:45:12:30:bc:
c9:6e:08:98:81:82:26:46:75:b3:f0:e1:34:e1:39:f2:77:de:
ef:01:df:aa:00:2f:ba:92:5f:aa:6d:86:bb:ed:e6:03:f2:1d:
e5:fd:e6:cd:55:30:6b:1d:7d:b9:75:3b:de:33:e1:99:c0:10:
86:76:76:11:7f:d3:62:be:6f:14:7d:ad:55:2c:3f:68:2b:51:
9f:fa:55:ee:bb:1a:a9:89:2a:59:a7:3a:a4:0b:27:ec:23:e3:
bb:74:92:e9:02:95:6c:a1:60:84:59:d8:9b:37:cf:97:fc:6b:
c9:bd:c3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:18:57 2026 by rpki-client