Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft
File: eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft (raw, json)
Hash identifier: wED+JOGwCr8xKNwKqa2de+bFhdzKf3Jcge016AyvIhA=
Subject key identifier: 2E:DC:73:A9:BA:A9:E2:6F:C8:92:5E:FC:B7:96:EB:9A:AB:D7:E9:DF
Authority key identifier: 78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85
Certificate issuer: /CN=78decead419807747c92ace69448113ff0928b85
Certificate serial: 019CAF10A6FD3C111F2B2D20CA53FE10A582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft
Manifest number: 02D9
Signing time: Mon 02 Mar 2026 15:00:29 +0000
Manifest this update: Mon 02 Mar 2026 15:00:29 +0000
Manifest next update: Tue 03 Mar 2026 15:00:29 +0000
Files and hashes: 1: 4Iq17c_GHtel1CbLjFxgwB0Dn1M.roa (hash: ynXE8G+gS/lsZOLIqXkN1x5b0cy4lp5fSomJfLM7n9s=)
2: EzLM6o264fzi2aUeuo8X1-IxasQ.roa (hash: egEkzBQdw69GxTodEUiKdxFXNinDxPmtmsSk0Laf0Kg=)
3: JlJF5EbQzwplegsjgak95qFufvc.roa (hash: SWOatFVOoit3m90PErmrJxk2vw5+frRT4NdsxOBZwLo=)
4: eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl (hash: Tioy3mdYfTW9LNz9b7gqEj5qvtLmlJdu4sqb2+/zJFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:a6:fd:3c:11:1f:2b:2d:20:ca:53:fe:10:a5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78decead419807747c92ace69448113ff0928b85
Validity
Not Before: Mar 2 15:00:29 2026 GMT
Not After : Mar 3 15:00:29 2026 GMT
Subject: CN=2edc73a9baa9e26fc8925efcb796eb9aabd7e9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b7:c4:b8:58:fa:13:a8:36:6c:c1:07:ec:b7:
7b:94:37:ad:6f:42:eb:76:8e:9a:29:c3:0e:2c:cd:
b1:59:19:fe:6b:07:e1:dd:3e:05:f5:93:13:90:34:
93:79:1c:eb:21:84:a0:3d:6a:ec:14:60:b7:94:ea:
14:ab:07:fe:5a:00:bc:2c:d1:cc:41:68:44:34:e4:
6e:bf:fc:2f:3a:f1:53:d5:1d:79:9f:c9:a1:4c:34:
39:31:95:93:02:71:a5:77:2b:76:77:6e:d9:08:54:
c8:c2:9d:87:2a:27:bc:6f:3d:cc:db:91:50:12:f7:
ce:c6:a3:27:a9:87:d0:c6:32:a2:46:82:9f:60:4c:
c7:3f:da:77:2f:29:8e:3c:63:c0:c0:af:56:69:16:
34:e6:63:5f:cb:ea:b6:ff:98:11:e3:df:1d:53:20:
d7:09:55:63:3c:80:24:c1:74:7b:a0:69:d7:55:ed:
cf:88:c0:39:1b:50:b9:50:db:1a:42:22:d4:e3:f3:
73:60:ab:83:83:f9:68:1d:ac:99:1b:92:74:50:17:
82:80:57:67:c1:5d:dd:43:dc:eb:9d:d6:f8:40:4c:
00:83:2b:46:49:5a:dd:91:9e:69:ec:91:fd:70:b8:
38:01:bc:e9:18:98:89:5a:4c:42:a5:58:e6:d6:82:
e5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DC:73:A9:BA:A9:E2:6F:C8:92:5E:FC:B7:96:EB:9A:AB:D7:E9:DF
X509v3 Authority Key Identifier:
keyid:78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9e:97:1e:de:b1:02:5f:7b:b2:b3:45:06:bc:eb:cd:60:99:
c4:77:df:ab:ab:11:1e:46:e8:5f:ac:ca:98:7e:a5:22:5d:a0:
15:23:cc:e0:40:ea:0a:82:57:7a:df:56:a4:5a:02:fe:39:50:
53:e0:45:79:bb:d0:5e:cb:38:e6:08:0c:a7:ef:28:40:fe:bd:
2b:d5:b2:85:81:dc:ae:a1:11:cb:6a:b6:89:03:2e:45:7f:b8:
5d:97:80:c8:a1:9a:6b:e0:45:cc:33:53:8b:ab:64:e1:c8:d8:
8e:65:f7:94:de:26:5a:b5:3f:11:e7:26:b4:91:9b:08:78:93:
fa:4e:11:04:f8:3d:ee:3c:a7:59:1e:45:8e:04:dc:3e:61:74:
51:22:4c:77:76:3d:7c:0c:37:bd:3f:95:ff:82:f8:b5:5b:68:
60:58:cf:ca:57:0a:76:6f:cc:fc:30:ad:0e:0d:f6:f6:50:91:
aa:09:0b:5a:99:c3:94:8d:ed:b4:ef:d3:38:14:ee:28:99:fd:
69:31:0f:a4:c7:e8:73:79:00:25:56:71:8a:d8:a8:ea:f6:12:
87:a5:44:03:b6:9b:51:a7:6f:93:f6:75:d6:a6:86:a6:7c:66:
85:f7:04:ae:f6:a2:46:ea:6f:c0:89:37:2b:54:4d:e1:c6:03:
9d:34:bc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:34:42 2026 by rpki-client