Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
File: 9EufgJPdiJ5HfO-np1VjkqZrOHA.mft (raw, json)
Hash identifier: B7UgG+cdM6N88h92mkDZPU3FhFJ7GGkZEyYHRYGRk2s=
Subject key identifier: 3C:68:FF:94:EE:6A:F6:03:BA:CE:74:14:64:06:89:02:9D:F2:40:19
Authority key identifier: F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
Certificate issuer: /CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Certificate serial: 019CAC477C19EEFD5E262D0CAAE80C9796AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
Manifest number: 0D66
Signing time: Mon 02 Mar 2026 02:01:31 +0000
Manifest this update: Mon 02 Mar 2026 02:01:31 +0000
Manifest next update: Tue 03 Mar 2026 02:01:31 +0000
Files and hashes: 1: 9EufgJPdiJ5HfO-np1VjkqZrOHA.crl (hash: W421ZpYXqpqMYSYvhStj+IAYoD5RHFHEZR7qol6A2rk=)
2: SwOCpl1kg6g2zUiZWN5A0MmSX5s.roa (hash: QKVD0HzLsQvlnPuI8LqZ6Irb+MhBQbX7xWp6qMbEmic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:7c:19:ee:fd:5e:26:2d:0c:aa:e8:0c:97:96:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Validity
Not Before: Mar 2 02:01:31 2026 GMT
Not After : Mar 3 02:01:31 2026 GMT
Subject: CN=3c68ff94ee6af603bace7414640689029df24019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:ff:24:9e:46:b3:b8:b8:0d:51:d1:1d:68:
5f:8a:f0:54:a2:d9:70:92:ec:65:8f:cc:dc:40:24:
3e:66:8b:0d:06:d9:c3:e5:eb:01:3c:47:9c:aa:36:
b0:67:3b:30:8c:90:62:e0:20:90:57:f8:bc:cd:ac:
51:cb:74:c5:4e:fe:e5:82:f0:40:e2:79:6a:e4:7b:
65:5e:78:be:3e:5a:4d:cc:58:f1:37:21:ce:fb:bb:
c4:c4:86:ad:a4:1e:19:b8:e8:33:10:ab:2e:14:3a:
b7:30:57:3d:36:ca:a0:a0:33:c9:b0:e3:06:f8:52:
9c:75:5b:0d:8d:3b:94:c6:0b:a9:97:3e:72:65:cf:
19:07:70:d1:ed:45:ce:35:31:af:17:a6:40:0f:33:
4b:c3:d8:81:2e:66:4c:b9:38:32:4a:55:52:1c:38:
03:93:cd:d7:8a:c2:77:03:e7:9a:1f:cd:26:ef:93:
be:ec:41:d1:00:d3:ec:3e:20:95:d2:0a:af:4b:fa:
af:ac:a4:7b:77:29:14:ae:87:b5:87:1b:23:11:91:
b5:ef:46:60:2a:54:a8:14:97:40:e6:94:45:f0:2b:
fa:6d:31:05:1a:da:a7:70:8e:61:15:57:5b:98:6f:
69:4f:8a:96:99:f1:26:b5:54:74:00:a7:e8:ca:cd:
79:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:68:FF:94:EE:6A:F6:03:BA:CE:74:14:64:06:89:02:9D:F2:40:19
X509v3 Authority Key Identifier:
keyid:F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:31:25:f8:72:cd:a7:90:21:0b:80:fd:07:f6:67:a6:10:80:
4f:34:83:ea:03:e1:f1:50:7e:7f:41:15:55:71:04:3f:d3:db:
3a:72:7f:39:2e:34:0f:d3:55:15:92:46:54:84:dc:de:25:dd:
4c:bb:9f:07:c1:76:2e:a3:3b:21:7f:1f:91:32:6b:d3:82:d9:
24:6e:45:68:33:be:09:ea:6c:f4:ba:6a:39:21:3e:64:c2:7e:
66:f8:16:da:5a:6f:13:0f:a7:bf:62:4c:87:50:79:5e:a8:08:
3c:8a:d2:fe:58:4a:f8:0e:e9:a5:07:ea:25:a1:4e:41:90:f3:
bb:e0:4d:70:fa:ac:4e:32:28:1c:10:c6:9e:2c:01:ee:46:18:
47:20:af:b5:c2:c7:19:f5:0d:3e:81:ed:7f:8b:c7:0b:4c:b7:
c7:6c:a8:c1:c8:b4:65:c3:58:53:d8:f3:e4:98:a3:a8:59:c8:
cd:3b:0a:dd:24:d4:4f:55:2a:53:fc:ba:b1:b2:63:2c:97:58:
2a:dc:9e:cc:e8:7d:ae:da:0b:6e:85:a0:25:45:fd:ed:c5:a9:
5e:a6:27:13:4c:7f:09:ad:cd:8a:6e:52:d9:01:06:77:aa:ff:
75:27:ec:cf:3f:4e:d5:68:5a:7e:82:57:f7:82:42:7d:82:78:
52:73:cb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:37:09 2026 by rpki-client