Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
File: eQ3IFFdVEBrMCIiqALsouZW5xPE.mft (raw, json)
Hash identifier: EyRTmgVCz5v3lQKUU5amBVv1f8g01maqQh4tEJ0Gxeg=
Subject key identifier: 02:E3:3F:B3:C2:1D:7A:EB:BF:2F:F2:24:B2:B8:C6:EF:1A:51:86:11
Authority key identifier: 79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
Certificate issuer: /CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Certificate serial: 019D99D06B324FEC5754F1A7D4B2AA980BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:01:06 +0000
Manifest this update: Fri 17 Apr 2026 05:01:06 +0000
Manifest next update: Sat 18 Apr 2026 05:01:06 +0000
Files and hashes: 1: E_fsK2xkMQPa9f4KE0p5s-E33Rs.roa (hash: fBstBj+krtA4Tx9gbY6Hp+BWosNY6KbmZu55yGuUOb4=)
2: eQ3IFFdVEBrMCIiqALsouZW5xPE.crl (hash: +pCCPPt6HOrGmE34wy3wdPkw+namUIswMpsFNTFeOYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:6b:32:4f:ec:57:54:f1:a7:d4:b2:aa:98:0b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Validity
Not Before: Apr 17 05:01:06 2026 GMT
Not After : Apr 18 05:01:06 2026 GMT
Subject: CN=02e33fb3c21d7aebbf2ff224b2b8c6ef1a518611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:fe:da:45:67:f2:d0:02:f2:53:3b:93:4a:
ae:be:98:2c:c9:07:52:cf:3b:c2:90:a5:2c:fa:f1:
bb:29:26:4a:cc:c7:df:be:f3:5d:47:e0:12:85:ab:
38:0a:79:5d:8f:e7:00:f7:4c:38:ef:f8:c9:e7:82:
d3:13:9d:1e:68:a9:62:80:3c:5b:10:a5:68:8f:ed:
52:1b:d5:d8:71:bf:97:00:64:74:bb:dd:0a:da:54:
f1:99:28:b9:ae:42:47:dc:23:86:ac:d3:d0:7b:ce:
b2:08:d2:ee:f9:6f:bd:51:40:64:47:0b:37:25:29:
93:90:dd:72:1a:c1:ca:2b:1d:85:9d:8f:ae:11:64:
11:a9:a6:45:f0:c5:a4:31:55:73:ed:37:b8:6b:60:
94:1b:f5:78:1d:da:aa:34:1c:fc:b1:3a:51:ac:d4:
93:3c:0b:be:7d:cf:cf:c7:fb:9d:3c:f0:9f:a5:84:
19:c2:5e:fe:c9:fb:64:51:46:7f:a2:3a:ff:48:c6:
04:7d:b2:2c:20:84:2f:53:f5:3f:7f:e8:55:fa:03:
e8:5e:f4:f9:23:18:57:7b:68:07:92:5b:8b:05:23:
c3:bb:8a:56:5b:41:16:60:54:7d:c8:91:de:4c:31:
92:d5:6e:08:00:df:97:6e:94:a0:95:c1:e9:28:12:
89:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E3:3F:B3:C2:1D:7A:EB:BF:2F:F2:24:B2:B8:C6:EF:1A:51:86:11
X509v3 Authority Key Identifier:
keyid:79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ed:3b:93:05:a8:be:e8:e9:56:b8:cf:12:d7:5a:70:61:1f:
3a:99:08:b5:9d:38:5b:c9:c2:4e:36:1f:d1:64:15:7d:01:67:
df:c9:b2:68:62:f3:02:e2:19:be:45:2f:2b:00:93:52:8f:8d:
a2:66:85:68:fe:b1:1b:e3:4b:5b:57:cf:b6:48:29:e4:7f:15:
a5:81:2e:0b:5c:c8:b0:d6:51:dd:6c:b2:7d:da:88:88:9c:b5:
57:73:ee:41:c9:0a:83:9e:f4:91:c3:fd:a8:4f:7e:1e:94:9f:
ec:40:44:67:28:6f:65:98:59:90:5a:cf:b0:eb:1c:9a:c7:61:
42:d5:d7:ec:85:e0:43:b1:6d:0a:6f:29:f0:b3:db:e9:da:97:
55:1b:32:69:78:71:68:e4:f1:37:6a:1f:c8:e0:8c:37:76:c6:
c9:18:0b:35:2c:27:4b:be:df:b1:8c:6a:64:e8:4e:bf:c0:28:
58:84:e0:d7:c6:38:2e:c8:f4:07:d0:77:83:7c:69:e4:96:b8:
0a:ff:ad:b9:fe:65:96:23:cc:11:3f:2b:b2:05:48:08:49:d8:
37:df:c0:50:e7:8f:96:6e:17:52:3e:39:5a:23:96:2c:65:3d:
99:a7:b1:fc:5d:b4:e3:71:28:c3:4c:bb:6d:a8:ff:98:e4:f0:
78:7b:d0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:30:21 2026 by rpki-client