Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
File: e20oQEBEI571gkLyEOCxZmfrQNA.mft (raw, json)
Hash identifier: Tr6SAL7/aueWvtGVethpuGhX9jXeT9V2ZiFoF0me06M=
Subject key identifier: 88:19:FB:01:B9:66:A5:50:E0:63:44:58:BB:8E:59:F0:A3:38:67:22
Authority key identifier: 7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
Certificate issuer: /CN=7b6d28404044239ef58242f210e0b16667eb40d0
Certificate serial: 019CABA1EFA59D0D53E7F1D330C41474E612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
Manifest number: 17D6
Signing time: Sun 01 Mar 2026 23:00:42 +0000
Manifest this update: Sun 01 Mar 2026 23:00:42 +0000
Manifest next update: Mon 02 Mar 2026 23:00:42 +0000
Files and hashes: 1: AWdnvO_fGYURQMiK3WsDBvu78og.roa (hash: xYb7mnfBNaWhh8LFpOFQkvNwUNvj1x9GSJ76i4T9ScE=)
2: e20oQEBEI571gkLyEOCxZmfrQNA.crl (hash: div6PUG4sOdI28wBbkqGb14DoQ+5c5yvXLCF4p2it74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:ef:a5:9d:0d:53:e7:f1:d3:30:c4:14:74:e6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b6d28404044239ef58242f210e0b16667eb40d0
Validity
Not Before: Mar 1 23:00:42 2026 GMT
Not After : Mar 2 23:00:42 2026 GMT
Subject: CN=8819fb01b966a550e0634458bb8e59f0a3386722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:10:54:f6:a9:45:a0:a3:90:18:6e:b1:5c:4b:
ab:05:8d:2e:9e:d1:fc:c1:3d:53:9f:12:92:a4:ff:
53:df:2f:12:0a:bf:6b:a8:54:2f:74:23:3b:95:ac:
c1:28:76:34:94:60:e9:84:22:e2:35:4f:42:99:32:
5a:e2:ed:c4:be:16:f3:2c:26:38:aa:3c:79:bc:c8:
2b:9d:13:99:b7:bc:ac:ef:75:9c:8a:a1:10:48:ab:
f0:1c:66:90:25:90:9b:2a:ce:d4:73:75:e3:07:53:
cc:d3:f0:c2:c4:76:0a:d1:94:28:62:16:ef:3e:a4:
ed:de:e3:ec:12:7b:45:2d:94:c8:db:f9:08:ba:26:
41:23:b6:c3:10:f1:a2:b2:32:58:8b:0a:f8:0e:64:
bb:0d:c4:4a:f3:9c:c6:f5:54:3e:e2:9e:a4:d5:08:
1e:05:1a:7f:60:93:df:3d:d5:91:42:80:5a:52:f5:
3c:df:4f:3a:83:ac:ae:72:c6:44:76:b9:44:85:29:
14:11:17:c8:b7:90:77:57:91:0f:3d:61:7e:71:3c:
b9:c5:f2:7a:f2:43:9e:51:ce:fc:5b:20:2d:53:ee:
aa:03:9c:86:05:c9:40:0a:d3:f8:94:65:1d:23:13:
b7:08:b9:1b:e0:18:59:60:fb:94:d6:fa:0d:dd:a5:
7d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:19:FB:01:B9:66:A5:50:E0:63:44:58:BB:8E:59:F0:A3:38:67:22
X509v3 Authority Key Identifier:
keyid:7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c9:e4:84:52:69:86:a9:7b:34:3e:6d:32:a7:68:01:82:81:
5f:dc:af:65:f8:6f:27:4d:a9:87:53:4e:1e:3c:e6:41:6f:03:
55:67:5a:46:dd:89:54:9f:e7:9e:be:71:c4:c8:1e:d0:e8:c7:
0d:4b:09:45:14:b8:1f:c0:b2:81:60:0c:4b:8c:78:78:5e:cc:
4a:c2:dc:4b:c2:73:a6:a1:32:d1:a1:cf:1d:13:e2:6a:d2:e5:
1c:ef:97:60:b9:b5:53:e1:c9:3d:be:ac:01:b2:96:6b:6c:ef:
46:ae:2a:89:62:5a:f7:2f:27:5d:06:01:01:a1:45:10:cc:9d:
85:0d:d7:71:6b:bf:34:9e:12:6f:ce:f1:b3:e3:44:a2:01:4e:
db:00:0a:3d:cf:f0:44:ce:d1:79:dc:15:8d:f0:e5:a7:f3:04:
fc:84:6d:41:75:c5:cb:90:dc:c3:5d:5c:3b:23:3f:57:5f:34:
a1:eb:16:ff:d6:d0:68:95:02:6c:06:64:f7:fb:14:8c:e6:1d:
a4:01:d9:7e:30:1f:a3:04:a5:b0:fc:1e:83:5f:db:4b:c8:85:
3f:b4:bf:3d:ac:8c:ea:86:76:b2:e1:40:45:95:92:bf:c7:67:
4e:f8:4b:73:36:ca:cb:51:7f:09:04:64:9d:04:b6:d2:e7:bc:
57:be:90:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:12 2026 by rpki-client