Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
File: eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft (raw, json)
Hash identifier: tVCC8f9MKmYN1WllbYHnCdxEf8ZyRBbmsVArFiLI0xo=
Subject key identifier: 15:34:BB:E0:62:42:CA:8E:A8:7F:C3:56:29:83:48:0F:4E:52:6A:16
Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Certificate serial: 019D985056879B3AA7D3AF4285569C2DED3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
Manifest number: 08C6
Signing time: Thu 16 Apr 2026 22:01:34 +0000
Manifest this update: Thu 16 Apr 2026 22:01:34 +0000
Manifest next update: Fri 17 Apr 2026 22:01:34 +0000
Files and hashes: 1: AmpembMZnQ3F11s0E_0dYki25Mc.roa (hash: WDbKJoErc1LVQLx62LO/KjvhetUehDjF17FpYSbvL/4=)
2: PKXuRc_5_wM56Jttnq1znbxTNrM.roa (hash: wNBNrg7iwt49739UTs0ZF6veqyOIJdBVUfKeZkV8DDw=)
3: eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl (hash: +Io61C5zCnmxDZLTonR2INfQjWrboSP5c57wbPQ+exI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:56:87:9b:3a:a7:d3:af:42:85:56:9c:2d:ed:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Validity
Not Before: Apr 16 22:01:34 2026 GMT
Not After : Apr 17 22:01:34 2026 GMT
Subject: CN=1534bbe06242ca8ea87fc3562983480f4e526a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:09:55:35:a2:df:f1:18:a3:14:73:81:61:
77:51:f0:f1:6a:95:e2:fc:4b:86:29:ca:44:bc:14:
08:fd:f4:b2:87:1d:62:a9:77:49:40:a9:4f:ef:a8:
d5:be:5c:1b:72:0a:7b:c0:44:15:91:25:7a:42:40:
d0:24:f0:28:69:76:46:e6:5a:b9:50:a7:68:63:1d:
a7:60:19:8a:e1:3c:80:b9:5e:d0:f2:b7:49:9c:1c:
0a:b8:8e:be:08:15:c6:61:47:86:b9:77:6a:cc:bc:
a0:83:97:b9:c1:c8:da:15:2c:d2:46:fb:46:00:87:
8b:26:31:26:d8:c4:b2:d7:75:59:24:62:38:96:4d:
2f:2e:20:9b:30:a5:13:61:4f:1f:9b:52:fe:19:c5:
aa:7d:74:a5:fb:f6:3b:34:2d:7a:0e:40:3c:8d:ab:
3e:e7:0d:59:fb:6a:0d:89:ef:95:8e:e7:5d:d1:90:
03:b3:61:e6:d1:91:79:99:b3:e5:de:59:d3:cd:52:
dc:f4:85:96:81:83:be:04:b6:8f:e7:96:9f:3a:6c:
48:69:8d:1e:46:18:57:53:3c:62:03:74:69:44:96:
d9:5d:08:ef:da:ae:52:ad:59:dc:cd:33:6a:da:25:
cf:96:25:d2:36:91:41:a1:5d:b1:88:ae:1b:7a:aa:
db:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:34:BB:E0:62:42:CA:8E:A8:7F:C3:56:29:83:48:0F:4E:52:6A:16
X509v3 Authority Key Identifier:
keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1b:9a:9d:a8:1d:c3:77:1c:36:8c:54:94:4d:4b:ba:a8:4b:
4a:0b:34:ea:be:8e:de:aa:68:c2:5f:97:91:c2:da:e7:1f:03:
e0:a5:b3:6d:0d:9e:05:0c:8c:70:ed:a3:aa:c6:67:3b:08:72:
a8:55:54:5e:09:69:04:34:fd:20:98:ef:14:8e:6b:a6:85:a3:
f4:31:e7:b9:00:56:6f:58:83:a9:06:1d:e0:b8:64:7f:43:35:
66:2b:9f:6f:7b:ad:6c:7c:1f:6d:d1:c9:9c:5b:82:04:78:81:
ee:1a:f8:a3:90:d7:68:32:46:7b:e2:62:d1:03:9b:08:9b:12:
ac:5e:bb:b0:6e:b8:d5:e6:de:b5:8b:58:63:fa:a2:f5:7c:9e:
bd:6b:82:f4:8c:d6:55:ee:1e:40:54:55:2e:62:a3:96:41:d0:
c1:83:e7:77:a0:8c:75:80:01:7d:c2:48:c8:5a:fa:7e:82:29:
32:64:b4:43:36:51:67:8f:36:e7:58:ec:71:3f:a9:ef:56:d4:
9e:9b:cd:23:1f:7e:d1:34:28:b7:a0:ce:41:b0:72:94:85:0d:
ab:50:5d:c7:05:b0:6e:b1:22:b9:d7:c2:96:d7:3b:77:61:12:
40:9f:2b:66:f5:ea:1b:d9:05:69:cb:34:1e:42:61:0d:d7:b5:
28:00:d6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:31 2026 by rpki-client