Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
File: e00xqxjkH42VmgnVVmDdMqqcRfc.mft (raw, json)
Hash identifier: heJ7p8eZoGGS3rx1mdNG3bc76VbaaDA45b9iohvbSiU=
Subject key identifier: 6E:8A:21:B7:E1:05:76:6E:2E:FF:A6:B1:98:C3:90:BD:AE:D4:4D:F7
Authority key identifier: 7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
Certificate issuer: /CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Certificate serial: 019D9AE2A992A791D7D52A140BEFB6BAE128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
Manifest number: 061C
Signing time: Fri 17 Apr 2026 10:00:38 +0000
Manifest this update: Fri 17 Apr 2026 10:00:38 +0000
Manifest next update: Sat 18 Apr 2026 10:00:38 +0000
Files and hashes: 1: 9eLIJ6RTK5BSD3tLbgAyaNclDYI.roa (hash: XSIKM2J7ehZpb0tQX1yj15wm/mofvKw8ffgNRz1IrEo=)
2: bMw_tMgEF3JjkWdlI_kbyhmiZB8.roa (hash: 9tpXPxjrcGnuiYj+mPBltbwiQGnnVBk/rVL0p+GtkMk=)
3: e00xqxjkH42VmgnVVmDdMqqcRfc.crl (hash: 5vlJBtTSViI9+w2ydu1FpHNDLbF86YTQlZHQRLgynLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:a9:92:a7:91:d7:d5:2a:14:0b:ef:b6:ba:e1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Validity
Not Before: Apr 17 10:00:38 2026 GMT
Not After : Apr 18 10:00:38 2026 GMT
Subject: CN=6e8a21b7e105766e2effa6b198c390bdaed44df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ca:8e:b5:87:ca:f1:dd:99:1b:bf:30:87:84:
74:9d:5b:ba:4b:c7:59:18:13:39:d9:f3:a3:7e:52:
45:13:42:97:9d:e7:d8:bd:79:c1:cf:3e:63:95:54:
bd:f6:3e:12:85:ec:eb:3b:41:8c:48:2a:e1:f7:0c:
d0:da:34:80:3d:d4:a7:10:69:6b:16:af:01:fe:4a:
f1:fa:77:1e:4b:92:6b:c5:d0:7e:81:ab:04:84:cd:
db:40:a7:7c:80:05:a7:a4:12:d5:22:7b:dc:12:e7:
5a:47:ef:5e:50:a3:c2:7a:5e:40:e2:30:a0:4e:ed:
72:16:28:14:6c:34:ed:93:75:99:08:2f:1e:41:cc:
33:d1:cc:39:3b:99:be:3a:4e:b9:3f:2a:48:80:a1:
b0:14:bb:bd:d1:fe:ea:a7:95:22:2c:ce:8f:95:f3:
25:b3:95:2c:2a:6f:01:18:6d:f1:7c:5f:68:83:95:
17:2f:37:92:a3:41:24:8b:af:a9:00:b0:8d:21:7e:
e2:70:04:3d:3c:94:de:32:40:50:21:bd:2a:2d:8d:
88:55:9b:87:06:da:ce:0a:47:3d:f9:85:24:3e:c7:
5a:1f:1f:c0:1e:69:d5:76:01:92:09:a3:52:64:ca:
d5:95:4f:70:de:dc:19:ec:d2:d7:77:2f:ea:de:1c:
31:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8A:21:B7:E1:05:76:6E:2E:FF:A6:B1:98:C3:90:BD:AE:D4:4D:F7
X509v3 Authority Key Identifier:
keyid:7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:b9:6b:4d:62:a2:3c:5f:c9:4a:6d:28:7b:ab:38:0a:a1:cc:
4c:86:52:f6:8e:27:77:a6:a9:db:68:da:16:17:d8:41:0c:f9:
5c:f3:66:1c:eb:b2:5c:d1:f8:bf:11:56:52:31:4a:f0:dd:32:
25:43:fb:26:ec:05:1a:8d:ce:55:68:ce:b8:96:97:f0:cd:aa:
33:16:0c:64:bc:fd:b8:1f:0c:b8:9f:ce:5d:94:06:2f:45:51:
a6:68:4e:a1:4e:5c:49:1c:12:72:c9:05:6d:14:7f:7d:56:2e:
62:d1:44:d8:26:d5:30:50:1e:c0:16:01:de:69:9d:44:13:f4:
01:d5:18:60:bc:48:33:da:1b:e4:d5:95:77:db:54:a0:a1:5b:
d4:6f:94:33:60:00:5e:4f:39:ff:c8:70:95:1f:2f:56:bc:f4:
5c:89:04:4d:ec:c0:bc:89:c1:86:85:2f:49:42:cf:de:3d:a4:
29:95:b4:fa:7f:d3:c4:3e:8a:45:af:db:16:c0:2e:50:f0:2f:
0e:e0:e8:e8:27:d0:a9:3c:af:94:6b:15:58:28:be:76:ea:d8:
59:f3:ca:42:1b:be:5d:aa:f1:76:1e:e1:6e:73:6d:fd:98:fa:
6d:86:8a:d5:ee:a7:8f:32:bd:88:be:79:80:21:39:6b:b5:0a:
e9:83:6a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:12 2026 by rpki-client