Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
File: eFtJDXZvSxwhHX2t1u-ncPbrniU.mft (raw, json)
Hash identifier: lS8v14alOX+u7n58/fob8HqQHIcHRDUuILZYLSfNoAU=
Subject key identifier: 67:F9:60:69:3C:B6:3A:3D:11:D2:5D:DB:E6:51:2C:A1:23:51:78:C3
Authority key identifier: 78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
Certificate issuer: /CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Certificate serial: 019CABA22449DBD20FEEF03353215F69DBBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
Manifest number: 1855
Signing time: Sun 01 Mar 2026 23:00:55 +0000
Manifest this update: Sun 01 Mar 2026 23:00:55 +0000
Manifest next update: Mon 02 Mar 2026 23:00:55 +0000
Files and hashes: 1: AFjgj3wO0E3u1GwdCpnSug8abRE.roa (hash: /NnUBYyLAGJ7vpempT7h0f0+FEt6PcJJLRluwujlzWI=)
2: Sn7_2gib1Z4Y7qV-x5tw5ypzrKg.roa (hash: TvWW8wiVEH/RjPvexCDnTxcGMw5rvsW5sddaZst2n7c=)
3: eFtJDXZvSxwhHX2t1u-ncPbrniU.crl (hash: ohnGs5OKCo5QgXB2wyVJv/OMw9TREgXF76uWgsSBeHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:24:49:db:d2:0f:ee:f0:33:53:21:5f:69:db:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Validity
Not Before: Mar 1 23:00:55 2026 GMT
Not After : Mar 2 23:00:55 2026 GMT
Subject: CN=67f960693cb63a3d11d25ddbe6512ca1235178c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1d:e9:cc:8f:58:f9:e9:a0:e3:d5:c8:40:51:
68:b3:e2:e5:74:a9:5a:2d:dc:3d:ac:2f:59:4b:ef:
65:2c:85:75:3b:99:46:51:7d:7b:31:ff:7f:d5:ab:
ae:96:71:a0:ba:b9:a3:0b:7d:79:00:4b:72:90:b6:
f0:e8:22:9d:c0:0d:b8:19:91:f7:bb:cd:52:b0:0c:
01:95:35:f1:9b:96:83:bd:b8:eb:d8:ca:e7:29:dd:
50:3e:a9:6d:16:4b:06:2a:f5:c9:fc:7f:fc:f3:f8:
5b:a5:49:3b:64:a6:95:dc:10:21:f8:93:a9:68:0d:
cc:01:13:97:33:b0:cb:c7:ff:24:48:60:de:4d:d6:
05:66:a5:3e:cb:dc:72:53:c5:fb:be:1a:0d:1c:6a:
70:ab:8a:cb:19:7a:86:db:7a:58:f4:ab:9d:d8:49:
38:68:94:47:68:74:8d:d1:6e:9b:70:54:69:9e:81:
f8:71:5c:0b:4e:a4:15:d6:a8:4c:33:70:75:27:ce:
37:ef:3c:39:30:b8:fa:3e:62:17:49:52:0e:96:1d:
66:c7:bc:64:86:45:40:1e:b3:6f:6d:09:04:6d:b2:
e5:72:fa:16:c2:be:e6:13:04:ca:48:33:d0:8f:2d:
94:eb:37:3f:28:10:ee:33:b5:00:9f:01:35:ac:60:
68:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F9:60:69:3C:B6:3A:3D:11:D2:5D:DB:E6:51:2C:A1:23:51:78:C3
X509v3 Authority Key Identifier:
keyid:78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f2:5b:84:a1:63:b3:a9:11:ba:24:17:e6:fd:5a:07:9d:c1:
bd:f4:fe:92:74:44:7d:80:f4:d3:ba:da:db:b2:98:3f:c9:c9:
2e:df:77:c1:08:d7:05:0c:8f:71:94:3d:6f:80:d3:1f:dc:f8:
a1:4f:6d:3f:9e:d9:15:92:e7:83:d0:65:57:ea:01:bf:dc:46:
df:98:b7:a7:55:83:d1:69:9b:df:c9:8d:c1:19:ee:5c:fc:be:
3d:fc:18:fc:a5:08:32:d4:c0:bf:be:38:27:32:4a:72:b0:de:
a6:61:bd:7a:40:68:0e:87:47:c0:2b:45:bb:45:7a:a3:38:83:
45:50:0c:90:b5:b3:f3:b9:60:05:eb:82:2a:65:44:c4:14:39:
e4:77:89:63:a0:35:70:e4:07:18:3f:03:7c:8a:dd:02:79:a5:
15:b8:49:2d:9a:77:d8:84:ad:83:d0:40:8b:c5:d6:06:a7:64:
af:45:44:7e:4c:49:ba:91:15:b2:fc:9d:49:fe:ef:bb:9d:38:
7a:d9:af:bb:7e:a9:8b:49:21:3b:c4:61:76:01:ce:3e:66:be:
b0:8a:3a:a5:10:a9:d1:c6:d2:2f:9c:07:4e:8d:cd:08:cf:40:
50:b2:78:be:ac:ce:73:10:00:1f:2c:a3:3d:03:77:b3:3e:5f:
7a:18:e0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:44 2026 by rpki-client