Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
File: ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft (raw, json)
Hash identifier: dvkkEEvu/0YKyG9UZZYHoXcRs946jKky+X/Ymk0xCPw=
Subject key identifier: 70:62:1F:91:7E:78:77:A9:85:35:6F:69:86:EA:78:A1:C9:D7:E8:98
Authority key identifier: 79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
Certificate issuer: /CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Certificate serial: 019CAAFD0B47994365C7B08900AF406A55C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
Manifest number: 1834
Signing time: Sun 01 Mar 2026 20:00:36 +0000
Manifest this update: Sun 01 Mar 2026 20:00:36 +0000
Manifest next update: Mon 02 Mar 2026 20:00:36 +0000
Files and hashes: 1: DHHjGMt7-3BtKh8jbUtHgjtd7Zk.roa (hash: AGrA4B/DyddJdpJQ+MaOxYEeNzNiJWqbWYvLiR+2oDU=)
2: ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl (hash: UD0bkqH1G3ZK4rd8TLsdHLST7I/zdaQub9lDIGspyCM=)
3: ynu8tUDUEPguQB0iGrynuoA2iPw.roa (hash: johc23xrqxWrSzPXwvlfoLCZ1FTv0QQ+G+sZUcEYX8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:0b:47:99:43:65:c7:b0:89:00:af:40:6a:55:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Validity
Not Before: Mar 1 20:00:36 2026 GMT
Not After : Mar 2 20:00:36 2026 GMT
Subject: CN=70621f917e7877a985356f6986ea78a1c9d7e898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:ac:90:b1:e8:6d:2f:40:1d:97:a2:cc:b3:
74:bb:7b:75:1d:9a:e5:77:36:a4:cf:ba:7a:19:e2:
c4:a8:81:f6:06:d3:de:64:b7:fa:d4:3c:80:a7:bf:
3d:31:94:55:8b:90:c9:60:35:1f:f7:c2:0d:a9:a5:
57:a0:8e:04:d0:3b:0a:af:a9:01:4d:25:cc:60:a6:
70:a0:d2:f8:c9:13:be:c1:b7:08:b2:0b:b9:23:3e:
a3:20:05:b9:45:96:b6:0b:e1:4b:6a:03:6a:83:33:
7d:6f:ad:b2:0e:57:4e:1a:da:e8:05:60:13:0f:e6:
4d:6c:d9:07:17:ed:13:4e:92:eb:e7:92:94:1c:cf:
af:b8:91:2c:c1:cd:11:f5:71:0d:5b:0c:26:81:d4:
a0:0c:9e:97:6d:c6:d8:65:b7:67:fd:89:c6:20:ff:
84:cb:23:81:1f:29:aa:4b:12:02:79:6c:4e:2e:23:
7b:bc:1f:80:3b:b4:9a:48:a4:28:5f:67:8d:dd:15:
25:21:a0:b7:db:78:0a:d5:32:9b:c0:08:a4:ed:71:
e7:f5:14:d0:a1:06:fb:40:1b:10:15:55:de:f1:d5:
7b:f9:16:9c:00:d3:f5:dc:67:eb:94:36:91:55:7a:
3b:e8:d7:4f:a4:b1:f2:37:db:33:7b:8a:af:60:42:
cb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:62:1F:91:7E:78:77:A9:85:35:6F:69:86:EA:78:A1:C9:D7:E8:98
X509v3 Authority Key Identifier:
keyid:79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8b:69:f7:6a:96:2e:9d:e8:bd:e2:16:45:d9:f9:9e:13:1b:
e4:c8:aa:7e:30:54:95:96:e6:48:87:3f:66:45:9c:22:36:3b:
ce:b6:41:59:51:89:db:a3:f0:f9:54:79:7b:71:29:46:43:c0:
59:ef:b8:9d:5a:d9:fa:61:fe:6f:aa:6b:62:7b:33:d0:45:c8:
65:53:49:85:2d:c8:6c:d8:7d:5c:2e:7b:33:70:03:87:14:3e:
1a:ff:fa:71:1b:ff:12:38:34:a3:a2:f6:53:33:29:1a:fd:40:
d0:99:8f:ff:9b:79:59:49:c5:6a:cd:c9:85:bb:1f:ac:7f:b5:
f1:75:9e:b9:c0:64:88:31:03:34:a2:3b:7e:52:38:79:31:d5:
b1:d2:58:25:e5:b9:fd:41:19:5a:16:65:1c:11:76:d3:79:7c:
6a:78:c5:e4:dc:b6:65:a8:3d:fa:00:cd:b9:f7:eb:0d:f3:b6:
77:a8:65:ec:02:a0:c8:af:6d:7d:e0:92:49:b1:65:89:e0:18:
cf:e5:da:b0:9a:d3:dd:97:a2:58:c4:af:87:59:ff:a1:a3:cd:
f3:0a:06:fe:8e:7d:30:36:f1:de:be:86:6b:b2:04:08:a3:53:
a3:6c:3a:f6:02:9d:60:f0:f4:fa:30:44:97:bf:a4:b0:dc:34:
c1:03:32:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:43 2026 by rpki-client