Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
File: e0nQsDY-emQIPi5UzDAfUUrgiRA.mft (raw, json)
Hash identifier: J6okmntbgbn/H/SVvPJLvE6VPGZtiiKzkj/N6BxwJJk=
Subject key identifier: 59:26:6A:9C:19:92:D3:B3:71:56:8D:07:8B:28:37:5B:57:44:7F:4D
Authority key identifier: 7B:49:D0:B0:36:3E:7A:64:08:3E:2E:54:CC:30:1F:51:4A:E0:89:10
Certificate issuer: /CN=7b49d0b0363e7a64083e2e54cc301f514ae08910
Certificate serial: 019DA4C1ADFC1F9BA432257FCDB0BB90DB7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
Manifest number: 1A
Signing time: Sun 19 Apr 2026 08:00:49 +0000
Manifest this update: Sun 19 Apr 2026 08:00:49 +0000
Manifest next update: Mon 20 Apr 2026 08:00:49 +0000
Files and hashes: 1: I6diHiTCg9qHT58_rXDkmTY5s4M.roa (hash: y3DBQKvGuIS8X4KFKKuAO23bkqAVCUyZ36p0a5xpbis=)
2: e0nQsDY-emQIPi5UzDAfUUrgiRA.crl (hash: t65v/nbzfK2KmgFyOIKmqLxRT0cxLSknoTFx1N0Bfts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:ad:fc:1f:9b:a4:32:25:7f:cd:b0:bb:90:db:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b49d0b0363e7a64083e2e54cc301f514ae08910
Validity
Not Before: Apr 19 08:00:49 2026 GMT
Not After : Apr 20 08:00:49 2026 GMT
Subject: CN=59266a9c1992d3b371568d078b28375b57447f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:67:d4:56:7b:9d:22:76:85:19:b2:9a:3f:a1:
78:41:41:7d:61:55:6e:7f:71:8d:61:ca:1b:e8:93:
9a:54:ad:9c:23:33:92:6c:1f:67:73:82:c9:1f:6d:
18:ba:ef:0c:58:3b:b7:37:e0:a9:05:fd:52:02:ae:
65:20:fd:95:8c:df:f4:42:f5:f0:6c:ab:71:bf:1b:
6f:4b:d5:e7:06:2e:42:b4:65:6a:49:e8:76:b0:a9:
8e:64:2c:e5:e2:90:e1:45:61:cc:3f:42:44:3a:62:
af:70:78:df:b3:c3:c6:11:13:88:16:c0:2c:08:31:
b5:d7:82:1f:30:a3:0e:02:7a:9d:c8:f2:46:a9:f7:
62:b8:42:c5:0c:09:46:fc:f3:0c:87:bf:51:7d:b6:
17:37:42:e0:a0:72:c7:af:5d:0a:07:be:6b:dd:e9:
41:dc:e9:f1:51:01:fc:7c:08:18:28:29:91:01:8e:
36:cb:27:f9:3f:3a:43:5e:9f:80:25:64:c9:48:88:
7d:88:f0:89:1c:c7:a6:9c:14:78:05:f5:ad:a4:3d:
7a:bf:13:d9:53:11:93:a1:ef:fc:c9:4e:38:07:81:
e1:e1:96:d0:65:13:c8:09:a8:b8:cb:25:09:db:aa:
f6:a8:d3:2d:f9:be:39:87:57:92:31:7c:39:ee:d2:
3d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:26:6A:9C:19:92:D3:B3:71:56:8D:07:8B:28:37:5B:57:44:7F:4D
X509v3 Authority Key Identifier:
keyid:7B:49:D0:B0:36:3E:7A:64:08:3E:2E:54:CC:30:1F:51:4A:E0:89:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:57:16:31:c4:ea:aa:54:e3:67:97:e2:5a:01:35:7a:0e:05:
2d:cf:9e:5d:8e:d8:99:ad:61:73:4b:92:2d:89:7e:6d:57:88:
17:58:54:48:1d:17:b1:9d:0e:ed:7c:93:dd:c5:18:08:c6:77:
bf:e3:a2:3b:3b:bf:6c:7a:dd:a8:4d:be:db:6d:38:92:d9:cb:
b3:1f:c2:1e:5f:2a:7a:8f:c8:0a:84:66:d6:7a:c7:85:eb:e1:
a4:e7:d6:c9:74:bf:a5:82:f0:c4:fb:04:8a:2c:84:4d:83:1b:
8e:37:8a:01:cc:06:ab:49:79:f7:4c:1d:5c:46:e1:97:f3:d8:
eb:06:37:8b:2b:06:01:be:70:e3:e9:bb:48:42:8d:06:29:8e:
d3:bd:f2:8e:94:cd:1a:86:81:d1:eb:d1:23:f4:0c:fe:ee:ee:
33:3b:15:8b:d4:23:df:51:67:fa:95:2d:d4:b6:19:c8:7e:96:
f0:81:0a:a8:d1:06:b9:b9:2b:35:c9:c7:7e:a8:22:6e:ed:26:
6d:cf:52:95:86:48:97:07:cf:ef:d1:41:27:1d:8b:9a:b5:4e:
88:51:43:3c:d8:ad:72:e2:ee:b5:90:3e:23:84:48:34:33:b0:
96:b8:d7:8b:dc:56:b4:a0:53:a5:21:37:05:55:36:e8:78:31:
aa:25:a7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:39:20 2026 by rpki-client