Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
File: 65YJgugr-emHVEUAkwjefsvQXFQ.mft (raw, json)
Hash identifier: dF/fHwEpJdhAq75bI99fbsm2uhlHJBZgsYG+BdnK2nw=
Subject key identifier: F3:D7:DA:28:2A:88:F2:0A:02:EB:79:E0:88:C2:F5:67:08:2B:D9:1E
Authority key identifier: EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
Certificate issuer: /CN=eb960982e82bf9e9875445009308de7ecbd05c54
Certificate serial: 019D992B0E64329FF11CE82E4DEAF62AFDB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
Manifest number: 0DF5
Signing time: Fri 17 Apr 2026 02:00:28 +0000
Manifest this update: Fri 17 Apr 2026 02:00:28 +0000
Manifest next update: Sat 18 Apr 2026 02:00:28 +0000
Files and hashes: 1: 3NE1-ierdloX8nhN3iBkvRLmeck.roa (hash: gQY+8HGUw14ADa6TeHXGdaEBXGR4Hxky1qeV/2hoxfs=)
2: 65YJgugr-emHVEUAkwjefsvQXFQ.crl (hash: Dunn0c63JAPzPhWUi1TKeEJ1Q/B7r7WkRRG8uyrB1bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:0e:64:32:9f:f1:1c:e8:2e:4d:ea:f6:2a:fd:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb960982e82bf9e9875445009308de7ecbd05c54
Validity
Not Before: Apr 17 02:00:28 2026 GMT
Not After : Apr 18 02:00:28 2026 GMT
Subject: CN=f3d7da282a88f20a02eb79e088c2f567082bd91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:76:d9:0c:fd:20:92:27:72:fc:62:01:cb:
5e:42:91:e8:28:e7:40:bc:ee:2d:49:24:d4:e3:2b:
0d:8d:f9:c5:66:e8:2e:13:66:91:40:12:51:01:ef:
e1:1f:fc:e1:34:c8:e3:92:c9:49:70:29:9f:2d:3f:
7f:ef:5c:2b:2e:3b:1b:a0:1b:2b:43:3e:32:df:e1:
2a:fe:2a:a7:2f:ee:43:06:11:c0:d3:3d:08:d4:3d:
d2:1e:88:ab:4c:57:9e:62:80:d4:e3:2c:00:6d:21:
c8:03:15:39:3c:6f:e6:9b:cc:9f:88:d8:3e:cf:37:
86:d3:2a:ea:10:c3:8a:ae:c2:8a:71:2c:dc:a1:09:
d7:13:b1:ab:0a:db:90:c0:a8:ff:c9:c8:6a:c3:45:
63:b8:90:70:4b:23:f3:8e:b0:81:5e:1d:2b:cf:a5:
52:a3:f7:13:6c:88:29:2a:6e:81:b2:e4:b4:44:0d:
6b:11:42:53:68:fd:b6:6b:4e:04:cd:da:8a:58:ff:
c2:ee:48:e2:c3:63:2d:86:5c:00:53:af:12:5c:00:
be:a0:cc:54:bc:52:4b:7b:aa:7d:f8:3a:67:12:b8:
c8:71:e4:34:41:bf:e9:88:6b:49:e1:81:a7:d2:18:
11:29:ae:5a:27:76:39:21:66:50:d6:a5:d3:4d:d4:
97:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D7:DA:28:2A:88:F2:0A:02:EB:79:E0:88:C2:F5:67:08:2B:D9:1E
X509v3 Authority Key Identifier:
keyid:EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:f8:06:c5:45:e8:3b:20:da:f8:c7:d9:d8:90:d9:9a:68:c4:
5d:72:0b:ae:f4:8f:87:08:62:f2:4e:ed:6e:87:0d:04:03:b4:
e5:47:26:cc:e3:93:be:76:de:65:fb:fc:f0:d4:93:4b:8f:f5:
c4:9b:17:3b:d1:4a:d4:4a:05:37:f0:eb:53:a3:ba:1e:bb:d9:
ad:e5:d4:59:03:06:cd:a6:fc:9d:78:d0:53:e3:39:81:70:e4:
de:52:cc:7d:76:81:c4:8e:fe:50:a1:11:ad:27:e3:4e:a3:64:
bd:1c:63:b0:34:aa:81:df:51:4b:f6:e2:c3:00:f3:bd:94:c5:
c0:d4:a6:fe:ce:f0:9c:82:26:18:b6:f1:08:15:cf:6d:82:26:
20:19:18:9a:68:fb:35:1b:24:30:f1:c7:b7:b1:79:6b:6d:0a:
f7:7f:cc:65:b6:90:f9:6a:f3:ba:99:1a:c0:4b:da:00:b5:c0:
56:15:69:f7:1f:de:0b:0f:cb:4b:95:01:67:00:ac:57:75:d3:
88:8a:e8:7d:60:3d:df:73:08:e6:ad:49:2d:99:5b:44:86:bf:
2a:8d:6a:0d:6a:14:c0:bd:a9:bd:61:2d:2c:94:38:a6:66:bc:
ab:73:b5:0d:f8:49:25:ca:60:03:06:32:15:93:71:8b:82:16:
c3:11:eb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:41 2026 by rpki-client