Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
File: eFtJDXZvSxwhHX2t1u-ncPbrniU.mft (raw, json)
Hash identifier: DWqyZu5/eF507vvRAcTWflCInXCazh+kEKanLbfz1w4=
Subject key identifier: 01:2B:61:4B:71:F6:DF:71:E4:81:27:DC:10:30:36:68:02:72:AC:AC
Authority key identifier: 78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
Certificate issuer: /CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Certificate serial: 019D9B19845EEC8AB5335D4C0AC4EBE5BC8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
Manifest number: 18D1
Signing time: Fri 17 Apr 2026 11:00:33 +0000
Manifest this update: Fri 17 Apr 2026 11:00:33 +0000
Manifest next update: Sat 18 Apr 2026 11:00:33 +0000
Files and hashes: 1: AFjgj3wO0E3u1GwdCpnSug8abRE.roa (hash: /NnUBYyLAGJ7vpempT7h0f0+FEt6PcJJLRluwujlzWI=)
2: Sn7_2gib1Z4Y7qV-x5tw5ypzrKg.roa (hash: TvWW8wiVEH/RjPvexCDnTxcGMw5rvsW5sddaZst2n7c=)
3: eFtJDXZvSxwhHX2t1u-ncPbrniU.crl (hash: +RMy95l34uEkoMydw71YNC9rPdHbJAv7rY5nVQq76Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:84:5e:ec:8a:b5:33:5d:4c:0a:c4:eb:e5:bc:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Validity
Not Before: Apr 17 11:00:33 2026 GMT
Not After : Apr 18 11:00:33 2026 GMT
Subject: CN=012b614b71f6df71e48127dc103036680272acac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:3f:da:6e:a8:59:65:c3:37:d0:99:61:bf:
44:c2:be:f4:d6:0e:f2:fc:b5:07:1e:88:b0:9c:88:
84:38:35:e8:2a:72:21:ba:de:39:4e:a5:53:0c:91:
78:1e:b5:09:15:df:97:f1:fb:3b:79:13:73:d2:22:
f6:fe:a9:f6:b6:e8:ab:42:59:af:ad:2c:c4:4b:ce:
19:49:e5:fc:20:a2:49:f6:64:ac:b1:91:7e:a3:cd:
09:dc:38:18:3d:1a:78:d9:2a:9f:6c:a3:75:97:c7:
c8:1c:12:cd:e4:f9:4a:65:65:e3:6a:b6:c6:0d:2f:
34:e7:77:9d:19:b3:7d:d4:43:27:6e:38:1f:4d:46:
23:82:11:0c:65:ec:fd:de:ff:7d:23:ab:85:65:2a:
00:1f:8c:d3:70:8c:23:14:69:23:73:c8:75:b4:19:
12:39:c1:96:bc:d2:88:6b:b2:37:43:45:46:48:1a:
28:ba:71:c8:6d:30:d5:5d:72:e7:b9:34:a4:a7:14:
ed:6b:a4:93:0d:6a:a7:45:bd:2d:d4:db:9b:ca:f3:
f6:b0:fd:56:7a:71:cf:81:92:59:73:6b:4e:b4:78:
c5:37:35:89:41:32:cc:1c:7d:aa:1e:e9:da:0c:3b:
65:bf:53:1a:1e:ea:09:59:0b:4d:51:ea:1c:14:0e:
92:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2B:61:4B:71:F6:DF:71:E4:81:27:DC:10:30:36:68:02:72:AC:AC
X509v3 Authority Key Identifier:
keyid:78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ed:02:47:4c:40:b9:0c:1a:b6:f7:a2:a5:eb:0f:fc:a2:ae:
5d:c5:78:63:63:0d:16:85:03:cf:74:8a:27:04:c6:a3:19:16:
e5:39:41:1f:5f:91:dd:af:ea:43:72:87:51:65:90:e7:f6:26:
48:82:51:b4:93:12:41:55:82:76:36:a9:b5:67:6f:93:dc:95:
57:78:73:e9:b5:aa:c6:15:90:08:37:52:48:fb:36:b1:3d:95:
96:7a:00:33:25:b4:26:45:99:1d:9f:1d:8b:20:12:68:9f:30:
60:d9:66:9d:b5:6d:33:15:17:7d:dd:fe:54:52:97:40:94:b2:
7c:9b:fd:d1:54:0a:1f:96:ae:e5:50:eb:91:82:c2:58:1c:45:
0a:b5:0f:2d:13:e8:eb:82:a9:8c:f5:c5:e0:5f:5c:a2:f0:92:
bd:f9:da:f2:4b:71:b9:9e:fe:18:e3:0e:16:44:64:2e:ac:4e:
1c:13:27:ec:74:82:be:3e:46:97:b8:47:21:3a:fd:35:0c:93:
ee:75:c9:2d:27:51:c2:f8:10:59:32:31:b3:44:fb:9f:dd:54:
36:33:e0:8b:95:2a:a2:8c:b8:87:4c:f9:40:18:d8:96:fb:e3:
e1:df:30:2f:4c:a3:ee:9e:e2:df:e9:06:76:71:ed:cf:e2:a2:
b5:60:ed:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:54:37 2026 by rpki-client