Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
File: eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft (raw, json)
Hash identifier: lXWMTpLgvuf5ysUuhMSgroF0Io2jjLNXsZGyJGPORuA=
Subject key identifier: F8:6A:87:81:E2:9B:CC:16:DF:39:78:36:11:F1:09:09:BF:D5:7E:28
Authority key identifier: 78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F
Certificate issuer: /CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
Certificate serial: 019D9B87C3B3AE27D6D63555A4C3D83D48D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
Manifest number: 089F
Signing time: Fri 17 Apr 2026 13:00:58 +0000
Manifest this update: Fri 17 Apr 2026 13:00:58 +0000
Manifest next update: Sat 18 Apr 2026 13:00:58 +0000
Files and hashes: 1: SEbMX_kWUsX_R1OTVRjFem2rhCY.roa (hash: XiNk8rorUk0GfMBPxUagzsQDmXdqYnZd77EYh58Os5s=)
2: eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl (hash: J0g5/DNjtio2b4Vogo/4wlQUltD7gh7bT+kGegAlMTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:c3:b3:ae:27:d6:d6:35:55:a4:c3:d8:3d:48:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
Validity
Not Before: Apr 17 13:00:58 2026 GMT
Not After : Apr 18 13:00:58 2026 GMT
Subject: CN=f86a8781e29bcc16df39783611f10909bfd57e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:11:52:26:e1:22:bc:ef:77:db:2f:f6:16:f0:
3d:25:d8:05:7a:e4:90:9e:bf:a6:ec:a7:82:43:9f:
92:26:ca:35:33:77:ae:73:86:b4:f3:e3:92:0b:c1:
91:77:35:2f:64:93:27:d0:f3:44:e6:5e:27:5f:6c:
49:95:b3:20:10:fa:2a:86:c1:90:01:a0:ad:6d:aa:
1b:03:e5:44:c7:c6:52:0e:1f:d0:2d:42:30:a0:ae:
b8:3d:11:23:ea:f3:7c:8d:53:88:f8:4b:51:a1:f3:
78:b4:3d:b8:f5:b3:9d:15:a3:24:f0:f9:a9:8a:c6:
49:4b:9d:d8:db:21:57:da:65:18:55:b5:c8:e7:d0:
ab:ac:81:ef:96:fc:a0:b4:11:26:1b:7d:90:e4:2a:
0a:0a:64:e8:1c:2b:21:3b:b1:26:26:a7:14:bb:f1:
3b:01:29:d9:43:7f:e4:86:ea:1f:bc:ca:dc:49:9f:
9e:7a:cf:89:54:8d:8c:2c:58:69:78:2c:db:e2:dc:
10:4c:47:c7:0f:80:b2:bc:2b:04:80:91:25:24:1c:
f2:fc:3d:6d:8d:10:64:c8:0e:64:a9:d3:5e:1b:9b:
64:03:b7:ca:7e:c5:ee:22:44:fc:f4:54:ba:61:1f:
43:f1:fc:eb:ee:61:f0:e4:b5:ae:f7:cc:18:9d:3f:
43:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6A:87:81:E2:9B:CC:16:DF:39:78:36:11:F1:09:09:BF:D5:7E:28
X509v3 Authority Key Identifier:
keyid:78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:79:f6:26:de:65:c8:c4:57:05:93:26:7b:cd:67:44:b9:22:
02:a0:28:a2:7d:9c:19:f6:08:93:d9:48:d5:17:19:3e:67:b0:
76:78:89:5e:11:23:89:76:4c:6f:bb:04:36:c8:77:94:25:28:
10:5b:96:3e:c4:82:39:00:69:21:e6:8b:cc:08:ce:28:03:5c:
9c:f0:f8:c5:37:03:1f:41:d9:d7:35:55:19:25:39:5b:22:c4:
00:b6:cd:ed:da:0e:cc:32:3c:8a:53:b5:17:48:bc:69:03:1b:
65:15:b9:dd:97:5e:fe:0e:ff:3e:19:45:5a:b6:ce:e4:87:79:
50:f5:e3:d9:c4:63:bd:5e:1a:91:69:51:f2:51:ec:2b:9b:2f:
05:b5:01:30:e4:83:34:22:07:80:f8:7f:99:12:89:4c:2a:08:
48:5d:cd:49:e5:6f:51:88:36:00:38:63:43:28:57:5c:69:a7:
4e:10:dd:fc:1c:77:b4:69:06:39:d2:fe:f0:81:c9:3d:dd:82:
3c:be:31:aa:2a:c9:87:db:5e:0e:52:cd:b7:b2:b4:5e:e5:4f:
82:0e:95:fd:fa:63:b1:5b:b5:ff:ef:85:66:83:59:ee:70:4a:
34:11:e7:89:4c:01:88:08:37:b7:47:84:d7:6a:d4:7b:a7:5f:
e3:fb:7a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:06:39 2026 by rpki-client