Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
File: eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft (raw, json)
Hash identifier: iTe1wtHPMHTkiR8khAs4Bc7y/oKr9613tTKeu+nQYj0=
Subject key identifier: 93:54:EE:92:76:C5:53:0F:D2:BB:6E:55:9D:AD:2D:4B:7E:3E:84:73
Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Certificate serial: 019CACB51863590D97EBD2A8FB6D920C88E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
Manifest number: 084B
Signing time: Mon 02 Mar 2026 04:01:15 +0000
Manifest this update: Mon 02 Mar 2026 04:01:15 +0000
Manifest next update: Tue 03 Mar 2026 04:01:15 +0000
Files and hashes: 1: AAxqzE_DaNwqJtSiSRt01LrD11E.roa (hash: AsdkBWjUsMF1PMPWszixSJb73omz0Nujo4Z01ynXMW8=)
2: PKXuRc_5_wM56Jttnq1znbxTNrM.roa (hash: wNBNrg7iwt49739UTs0ZF6veqyOIJdBVUfKeZkV8DDw=)
3: eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl (hash: 68kSHzqitHSZWmM1uo8LixLOLthhyhBDDVO/FpSQ7VE=)
4: haFLcC9NWw9ub46milFGifb1wm8.roa (hash: MLM9+m/KRPi8dl+vkuj88InrFcUl/TiXCjaTZOweCP8=)
5: nVrsmiE4mZkUHdQosAPmUQgfiN8.roa (hash: HnvmyHFabWozXyzydQ+3XrK2DXsd/lYo1fc4nVOwXr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:18:63:59:0d:97:eb:d2:a8:fb:6d:92:0c:88:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Validity
Not Before: Mar 2 04:01:15 2026 GMT
Not After : Mar 3 04:01:15 2026 GMT
Subject: CN=9354ee9276c5530fd2bb6e559dad2d4b7e3e8473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7e:03:f7:e3:af:11:6e:cb:2a:72:44:7e:32:
17:3f:c2:7f:66:65:88:e9:46:00:2a:df:01:79:e8:
78:cc:88:bf:5f:21:13:ef:cf:1a:08:96:c0:e7:4c:
e4:a9:83:29:f4:39:ab:c4:dd:ab:1c:e7:ca:59:39:
e1:d6:d3:d1:80:fd:fd:fb:89:fd:c3:92:dd:44:05:
c7:f9:64:15:07:93:2b:00:43:39:f7:9b:91:05:4a:
ca:6f:25:3c:d5:b6:25:3f:3b:e3:dd:94:04:d2:5b:
54:e8:53:f5:af:06:c4:05:83:c9:39:e1:e7:49:4e:
90:21:2e:03:95:b7:82:3a:0f:dd:a6:fd:7a:a4:2b:
56:ec:49:b5:85:e4:84:21:f5:a0:97:10:86:39:b8:
ca:88:69:16:2a:60:53:f8:a0:eb:bd:8f:cb:23:75:
8b:da:3f:91:8d:f2:57:f0:45:d5:49:76:ce:0d:00:
85:de:d1:fa:3f:52:02:0b:c9:38:32:56:e3:f5:91:
95:b2:b6:f6:d1:a5:61:72:f8:92:7e:d7:db:48:1c:
28:61:17:1f:0f:33:47:ef:fb:b1:f1:d9:4a:9b:82:
70:e7:54:28:78:73:a8:06:0f:66:86:28:fd:e1:42:
57:70:91:55:71:9f:e8:65:2e:0a:2a:b3:89:28:c8:
6b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:54:EE:92:76:C5:53:0F:D2:BB:6E:55:9D:AD:2D:4B:7E:3E:84:73
X509v3 Authority Key Identifier:
keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:96:a5:29:57:51:59:5c:7a:9b:08:36:db:cf:f0:b3:4c:07:
6d:95:58:5c:19:99:2b:80:83:6e:22:4f:fa:51:fb:81:31:27:
0c:58:b9:e2:be:db:6c:cd:10:e5:40:d9:90:48:36:db:6c:c5:
02:e6:dd:1c:40:03:76:05:d3:7d:a0:b9:24:d0:42:e2:f9:ac:
92:9f:e9:db:dd:44:fe:38:7f:3d:ad:55:85:9c:7f:c4:67:3b:
74:e0:8e:1f:1b:67:d3:87:a4:af:e3:54:29:ae:ed:ff:a1:a5:
af:ff:5c:15:5d:b6:25:84:50:ea:2e:db:0b:3e:61:14:d2:88:
b2:c2:6f:04:72:cc:66:eb:b6:fd:83:f5:b9:d2:94:4e:49:8c:
80:7f:39:3a:d1:61:08:db:e5:8c:c1:36:3d:a1:fb:7b:99:16:
d5:a6:a0:61:4d:6f:fa:e7:a4:42:b2:e7:d9:ff:f6:ce:84:bd:
eb:29:31:03:05:a8:00:61:da:d2:14:63:15:5e:90:80:b9:54:
67:2a:b8:7e:e6:25:69:8b:db:6a:dd:d1:1b:4e:d4:52:b2:c8:
13:57:a0:05:51:bb:cd:e2:1d:7e:76:74:13:0a:a4:87:ea:50:
df:83:7e:c3:b6:68:59:41:a8:af:c1:d7:be:8a:2b:12:d3:6e:
69:5a:e2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:36:58 2026 by rpki-client