Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft
File: eYCaQAStlYNQpkbViavLPP3z7S4.mft (raw, json)
Hash identifier: sArXRbKEaz4gPvy3lHa6wBWtfE3c7rBca7F9/7aSsh0=
Subject key identifier: 0B:24:5F:DB:CC:46:84:D7:0A:3B:B1:2C:1F:1D:23:3B:83:E3:20:F9
Authority key identifier: 79:80:9A:40:04:AD:95:83:50:A6:46:D5:89:AB:CB:3C:FD:F3:ED:2E
Certificate issuer: /CN=79809a4004ad958350a646d589abcb3cfdf3ed2e
Certificate serial: 019D99CFE8A09B6FF2CDFCD5ED3E8FC35644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYCaQAStlYNQpkbViavLPP3z7S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft
Manifest number: 0A44
Signing time: Fri 17 Apr 2026 05:00:32 +0000
Manifest this update: Fri 17 Apr 2026 05:00:32 +0000
Manifest next update: Sat 18 Apr 2026 05:00:32 +0000
Files and hashes: 1: eYCaQAStlYNQpkbViavLPP3z7S4.crl (hash: U8pgIv7+HHnxekcnGj8q+y5ddWcLDQXPQhzLOLa2xdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYCaQAStlYNQpkbViavLPP3z7S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:e8:a0:9b:6f:f2:cd:fc:d5:ed:3e:8f:c3:56:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79809a4004ad958350a646d589abcb3cfdf3ed2e
Validity
Not Before: Apr 17 05:00:32 2026 GMT
Not After : Apr 18 05:00:32 2026 GMT
Subject: CN=0b245fdbcc4684d70a3bb12c1f1d233b83e320f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3b:ac:71:5b:47:12:14:ec:74:66:08:fc:e3:
cb:91:5d:68:a2:f2:1e:db:f8:57:a4:e2:c0:dd:b2:
b3:2e:08:e6:ce:d7:96:3e:40:49:af:ca:4a:74:a1:
ff:09:c4:7a:16:23:73:36:7e:72:7f:52:b8:80:a3:
5c:1f:73:ab:c1:16:d5:f6:cd:be:14:11:1e:28:30:
3a:ce:d6:12:28:dd:a9:cb:82:ab:5e:42:97:bf:8a:
84:88:4e:64:e8:42:d8:72:8a:eb:7c:e3:00:9d:ec:
ae:17:85:ca:c1:97:b3:93:a4:3d:60:39:c7:30:24:
45:b7:a2:da:e2:65:3f:01:4c:9e:d6:02:3c:69:68:
83:8d:8d:02:a7:d4:4d:34:b8:0f:a8:da:be:68:25:
5d:9c:80:c3:8e:18:15:5c:8b:b2:b2:f1:64:90:3f:
b1:33:e8:cd:c4:2e:4d:2c:a0:6b:d7:26:81:67:01:
eb:41:d3:12:d9:2a:48:e3:c8:fb:14:df:07:c1:88:
f1:67:a0:b0:e9:57:ae:b3:93:93:1a:a7:0d:b9:b4:
73:48:7f:28:ac:0a:9d:00:38:5b:44:4f:a5:9e:d7:
29:83:c1:90:85:d8:8a:78:e8:71:e2:b0:ce:fa:b7:
b3:1f:d9:12:94:d2:14:12:e1:2e:81:61:c3:59:e4:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:24:5F:DB:CC:46:84:D7:0A:3B:B1:2C:1F:1D:23:3B:83:E3:20:F9
X509v3 Authority Key Identifier:
keyid:79:80:9A:40:04:AD:95:83:50:A6:46:D5:89:AB:CB:3C:FD:F3:ED:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYCaQAStlYNQpkbViavLPP3z7S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:02:1c:e3:82:76:85:ad:ae:bc:1f:01:ee:af:b9:1b:b4:ee:
a6:17:19:e5:75:30:be:9b:bc:31:01:3b:26:7f:9b:e8:05:96:
27:ed:42:8b:1e:b9:2f:50:14:31:8e:fe:3e:44:fd:9f:82:d4:
fa:48:72:99:be:3a:a1:1d:04:a0:07:1b:ce:3a:8e:27:9b:7c:
24:a0:9e:42:d3:6e:c1:f9:8d:38:44:c5:88:28:2a:7b:89:3e:
2e:9e:90:f4:6e:97:28:0b:54:5b:80:98:7d:28:77:0a:85:67:
56:a3:f0:28:cb:fa:83:5d:ff:65:9c:48:02:e3:a9:fe:e4:76:
fa:b9:6e:89:0b:15:fe:52:bf:23:b1:f4:c9:bf:be:aa:ce:4f:
6f:18:24:49:39:ab:8a:aa:bf:91:f5:68:b8:86:26:b4:cc:79:
84:c4:88:66:9c:0b:40:3a:2c:61:84:24:96:76:64:8a:6f:16:
15:e7:cd:20:aa:9c:8b:86:03:9b:e7:91:e9:58:47:4b:2a:c5:
7c:6f:76:be:76:20:11:17:a0:1c:e6:65:70:f4:bf:25:63:6a:
c3:37:5c:cf:b1:f3:bb:81:fb:68:89:42:eb:f7:aa:be:7e:dc:
57:89:01:5a:9a:62:6c:d5:5d:a6:a7:b4:12:2a:34:d3:75:6b:
c3:bb:39:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:29:18 2026 by rpki-client