Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
File: eaOyw2It-eh5guqDUJeKbJh1p8g.mft (raw, json)
Hash identifier: 5dtuM7ByL2nW3nuvAzyav/TgAWJoaznOARCVgWul0EM=
Subject key identifier: 72:BC:C9:21:02:B5:C2:D8:09:73:0B:18:0A:CD:55:18:F5:BA:55:CC
Authority key identifier: 79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
Certificate issuer: /CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Certificate serial: 019CA9B3C8CB13F5C0137F6ECEC61A6B0C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
Manifest number: 184E
Signing time: Sun 01 Mar 2026 14:00:57 +0000
Manifest this update: Sun 01 Mar 2026 14:00:57 +0000
Manifest next update: Mon 02 Mar 2026 14:00:57 +0000
Files and hashes: 1: bwuSOp298-dczsmqdU4uLpa6gjo.roa (hash: uzISkAnF902L3J+B/MyOvw4U5tLzeELoUDdqRYulmzE=)
2: eaOyw2It-eh5guqDUJeKbJh1p8g.crl (hash: 52M7uqX4QFuHglTQZ8jjSg/ir0U/+qbDGFdIVhhgEfs=)
3: ntyTSk72RSe0ZIrYeLH81RbxpHA.asa (hash: iPI512YEQ0gn5dd5DCMPxy3EAFdTv8AI/1+OEDUHbSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:c8:cb:13:f5:c0:13:7f:6e:ce:c6:1a:6b:0c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Validity
Not Before: Mar 1 14:00:57 2026 GMT
Not After : Mar 2 14:00:57 2026 GMT
Subject: CN=72bcc92102b5c2d809730b180acd5518f5ba55cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:82:7a:aa:46:4f:da:2d:9b:0a:78:ad:ab:e1:
96:30:bd:fe:99:45:f9:d8:f5:5d:e8:cc:ad:2b:e6:
25:ef:72:6e:ba:53:d6:7b:96:a6:3e:36:cc:21:9e:
bd:ec:50:28:75:f4:a4:ac:47:53:86:0f:d9:68:1c:
52:d4:c1:a4:80:3a:10:af:52:d1:68:0d:12:62:9e:
de:59:1c:d1:d9:e7:0b:fd:78:dc:bd:85:6c:a5:5d:
00:bb:bb:0e:1c:f3:53:0b:4e:a6:00:f3:d4:eb:b3:
64:4c:58:1b:ea:ed:c7:80:51:d4:3f:20:79:5b:8d:
42:a9:a5:db:4e:3c:e0:3b:a4:bb:45:4f:1b:e0:c6:
85:7e:c1:a8:2c:fe:5f:89:f1:a3:f6:7f:20:b7:75:
4c:be:d2:8d:5f:7c:77:c3:29:22:b9:08:5f:00:da:
84:03:a7:c9:12:29:4a:24:18:c9:16:56:c7:93:d9:
88:7d:c8:ef:13:99:0f:80:d2:34:2a:84:e9:b8:84:
c8:aa:f1:6e:30:f8:22:5e:44:18:42:f0:88:56:dd:
2c:13:73:43:b1:ab:f9:87:b0:bc:52:16:75:9d:87:
c0:ef:6f:cd:17:cc:7a:e0:e5:73:f5:ed:1e:a7:5f:
fb:7b:3d:d4:d7:11:ed:40:10:4b:d0:b3:cf:aa:ae:
2c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BC:C9:21:02:B5:C2:D8:09:73:0B:18:0A:CD:55:18:F5:BA:55:CC
X509v3 Authority Key Identifier:
keyid:79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6f:6d:61:78:08:80:ac:e6:83:42:8c:bb:7a:e5:4b:e7:3a:
52:64:db:c5:6c:87:8f:c1:34:06:f0:83:50:b6:ba:42:b4:95:
85:4b:c0:75:98:e1:00:36:32:c0:a7:bb:e7:d9:82:6e:a2:09:
f5:e1:ab:66:ef:35:50:b0:1a:95:7c:fc:fe:f1:6e:f9:c2:3f:
45:36:a2:f2:e9:d9:e2:d3:fa:a2:20:ca:5f:e5:1a:9c:e0:0f:
1c:98:2b:44:bb:1d:4a:4e:f6:c3:11:28:70:60:04:f6:76:9b:
d9:eb:a5:f0:6f:e0:03:59:fc:17:c3:fc:d7:94:ba:77:83:f1:
69:83:9e:ad:d7:36:63:cb:11:e0:e1:7a:ce:72:ed:19:42:07:
20:dd:ee:c1:3e:71:1d:22:68:2c:5f:20:a2:df:d3:82:f1:bb:
91:72:f6:e1:14:e1:f6:6d:ff:3f:df:2c:2d:5f:02:ae:e9:98:
22:1f:61:0f:23:ae:53:34:8f:43:c8:2d:b9:8d:db:f4:a6:31:
17:e3:fa:7f:fd:fe:82:37:f8:a4:57:04:65:82:4e:2c:c2:77:
d2:f0:15:e3:99:51:4c:a3:ca:80:f1:ce:32:17:97:01:81:68:
b1:c2:e3:68:9a:3f:6a:91:6c:a9:b3:0e:da:40:02:d8:b3:b0:
57:07:7f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:56 2026 by rpki-client