Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
File: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft (raw, json)
Hash identifier: F5oJlgTzxjC6RsK9Azz/IPDLz6roCFJ/Ab4LHk3X5+M=
Subject key identifier: 20:63:E5:79:0B:FE:B8:07:83:64:31:42:42:98:33:BA:0F:94:A0:CD
Authority key identifier: 79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
Certificate issuer: /CN=79730b9ea010d832f940efb589c51889132f4c94
Certificate serial: 019CA9EB0BB98E5595DD8287E0A3A3BCC13D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 15:01:19 +0000
Manifest this update: Sun 01 Mar 2026 15:01:19 +0000
Manifest next update: Mon 02 Mar 2026 15:01:19 +0000
Files and hashes: 1: NwdvwdgUQDYbtp-Ubv8WmZm6NA0.roa (hash: 08IB4CQ6qXGvHbqlm2iST8aQYIXZEjOYZuD8asm6wTA=)
2: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl (hash: XHVuyosUFDif/7LerO5ywPI8wDEBc+yKH4FoxE2tuUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:0b:b9:8e:55:95:dd:82:87:e0:a3:a3:bc:c1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79730b9ea010d832f940efb589c51889132f4c94
Validity
Not Before: Mar 1 15:01:19 2026 GMT
Not After : Mar 2 15:01:19 2026 GMT
Subject: CN=2063e5790bfeb80783643142429833ba0f94a0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:08:05:b1:23:4e:56:20:5d:46:73:15:d9:97:
88:85:dc:a5:b5:2e:47:58:1b:f9:e4:2c:15:c2:23:
5a:ab:d7:f9:02:86:b9:5f:e8:5c:26:7d:67:24:f5:
be:8a:e7:35:2f:33:e7:6f:b1:6e:2f:49:18:fc:59:
53:19:1c:52:8a:c4:2c:f8:61:ce:47:ae:51:ca:1b:
cc:f9:14:0e:4a:54:21:34:d9:dc:16:49:37:62:90:
f3:44:f3:6d:a3:02:b1:dd:7c:2c:9c:80:90:fa:f5:
32:14:22:c3:85:a6:c3:8a:57:d0:81:0c:b9:56:69:
eb:7d:a3:93:e6:72:47:72:bb:e2:46:97:2d:be:ef:
c4:99:0c:6e:99:ca:ee:d2:d4:8d:d1:c4:af:9d:36:
66:36:4f:42:73:f6:39:c7:47:86:df:00:ec:c5:ac:
98:e3:ee:06:2e:87:85:a3:a4:bb:85:1a:ba:be:93:
18:9e:c3:5e:ee:cc:ab:52:bf:ba:61:80:7e:54:d8:
42:0b:62:19:8d:b6:75:16:2c:56:1b:32:6f:58:10:
af:24:d0:8c:62:65:25:df:3a:56:3a:b5:ca:56:f6:
61:d7:48:a2:a3:37:e5:b3:b3:83:3f:5a:fd:7f:06:
34:83:8e:e1:be:38:17:15:d1:a8:af:a1:a2:e8:95:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:63:E5:79:0B:FE:B8:07:83:64:31:42:42:98:33:BA:0F:94:A0:CD
X509v3 Authority Key Identifier:
keyid:79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a5:4e:5d:8e:48:30:b0:65:b5:1a:cc:2d:8a:10:45:75:35:
f6:a6:4e:b2:c0:8d:65:e8:44:11:e5:2d:4e:97:d1:7c:96:94:
3d:e2:9c:39:27:b6:0f:d6:ca:eb:28:5b:67:be:61:fc:55:f6:
bd:f8:cb:4b:3c:55:b4:9a:2c:1a:0e:c1:eb:17:7c:26:d6:9c:
7e:16:9c:17:dd:80:b0:0c:33:51:4e:79:45:96:3b:c9:72:64:
d1:6f:79:d2:24:7a:4c:d9:97:50:a8:1c:12:d1:54:f4:6a:86:
be:89:9e:96:67:c2:3a:bc:06:e9:24:c8:da:c1:2a:f7:b2:63:
e1:37:ed:fc:39:71:d4:c5:57:47:32:1b:5d:61:b4:88:78:20:
c8:80:8f:ba:11:8d:ab:86:de:e9:78:57:76:f6:bb:ba:08:36:
04:a5:90:0a:2f:bd:a8:99:84:fe:3b:2c:15:e5:fa:bc:71:8f:
da:ab:51:9a:72:5f:e0:fe:cf:58:1c:bf:39:33:ba:c2:bc:95:
c4:77:1b:65:66:c4:19:9b:9e:9d:ed:31:05:9e:e4:43:9e:2a:
99:50:7f:6d:f7:88:3f:69:75:6b:2f:f1:77:94:06:fb:4e:f3:
12:2f:2a:95:09:76:77:64:b5:10:18:99:4d:02:7e:11:14:ea:
cd:55:b0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:55:55 2026 by rpki-client