Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
File: eF70vSl2vykqtzMEkH9RDNAMyKI.mft (raw, json)
Hash identifier: zGMY+mty1d06e0Ds8/GIEqgdIVLb8EtPHpx8kWXRclM=
Subject key identifier: A9:2D:E7:DB:1F:4D:8B:F5:55:62:D5:AF:17:46:09:36:B6:C2:97:CB
Authority key identifier: 78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
Certificate issuer: /CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Certificate serial: 019D9999022CC1B2618B195688A8ECC62FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
Manifest number: 0FAA
Signing time: Fri 17 Apr 2026 04:00:34 +0000
Manifest this update: Fri 17 Apr 2026 04:00:34 +0000
Manifest next update: Sat 18 Apr 2026 04:00:34 +0000
Files and hashes: 1: GQ-SbgfC8MIeM9gcufA_-1qzAXc.roa (hash: KV1JNt34o+H7DaSa9GDJPYnWz3s55bQ0FiJGe7uGgr0=)
2: Kx0VUGAT79oWA-cyRKWJVf52D4Y.roa (hash: 9vDSqAA9sKbg10kGGfffYdHsPHCsPjZ37Jvu2FldDuU=)
3: N8W6aW0riM_3M90H1ZPp8kp3yHQ.roa (hash: wUxFvKdtoCc4uBF7RszaarkR6hmxjfvZWGVXKaQQ8Q4=)
4: eF70vSl2vykqtzMEkH9RDNAMyKI.crl (hash: VKkDvPAG3/vI5LVpu9nnILw9GFrh+wUpdyzriBNpMCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:02:2c:c1:b2:61:8b:19:56:88:a8:ec:c6:2f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Validity
Not Before: Apr 17 04:00:34 2026 GMT
Not After : Apr 18 04:00:34 2026 GMT
Subject: CN=a92de7db1f4d8bf55562d5af17460936b6c297cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cd:80:c3:f7:ad:5a:6c:4a:ee:bc:b4:d8:01:
26:b5:8f:5a:5f:28:76:00:fb:06:88:e4:a1:4d:a8:
79:fd:d7:d8:18:77:b6:ab:56:d9:b8:0d:26:c9:b4:
9d:69:2d:d7:ad:d6:52:20:39:c2:71:70:2e:0c:55:
1d:00:4b:63:40:a4:7f:69:da:87:9e:15:5f:1a:af:
77:4c:b4:36:a0:c1:6e:4c:9d:20:a7:48:be:ea:ed:
6c:f0:e0:ec:e3:27:ca:31:a1:cb:3f:9e:b1:45:89:
e1:34:8b:b3:b1:80:d8:ec:9e:83:e7:c1:d3:81:5d:
be:c4:66:d9:42:68:a3:1a:4f:8e:82:f1:5f:c5:40:
b7:fc:ba:f6:8a:4a:e5:10:53:d8:58:d9:b7:61:8b:
ab:5d:71:a0:9b:0c:49:72:df:e5:1f:a6:fc:de:1a:
5d:27:d8:14:5b:63:b7:f0:dc:03:58:a1:c2:a0:88:
1e:14:cf:42:c4:e6:8a:4c:8e:ab:23:b5:1e:5f:33:
c8:d1:61:53:8e:07:14:cd:21:ac:29:38:5f:63:6d:
5b:66:fd:ab:a3:17:4c:a9:78:02:29:bd:26:1e:f8:
c0:d2:73:77:e9:09:ee:4f:f4:4b:26:29:f3:38:02:
61:61:47:7c:28:8d:88:28:78:22:be:db:80:f9:99:
6b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2D:E7:DB:1F:4D:8B:F5:55:62:D5:AF:17:46:09:36:B6:C2:97:CB
X509v3 Authority Key Identifier:
keyid:78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c3:be:cc:67:80:65:53:09:39:5f:73:90:b2:2d:c2:20:7a:
e5:c2:5d:9d:b7:4f:34:a0:e8:36:a3:9c:d8:16:d5:16:d1:90:
dd:e0:7e:b1:46:f2:30:73:df:0b:21:74:f6:d0:cc:98:8c:e9:
f5:9a:8f:56:96:9f:63:6b:cb:18:00:92:52:2f:fc:56:b7:2c:
0b:43:72:4a:58:70:c2:0d:80:d0:de:51:dc:40:fd:bf:c2:5a:
81:1e:13:7c:af:16:14:37:07:8b:88:93:b7:b4:80:71:85:23:
bb:45:04:05:22:0f:5f:7b:f4:a2:b7:a4:68:84:9a:fa:da:93:
b7:af:cb:b9:96:3c:70:7c:50:0b:bd:04:d7:ce:3d:09:a4:a9:
32:60:73:2c:43:a9:e0:a5:31:90:46:f3:36:ab:ec:50:92:6b:
35:d9:39:01:4c:e0:dc:69:34:8a:f3:67:b6:c3:a4:ae:7b:77:
2e:07:98:7e:3b:f5:20:58:49:81:d1:8b:b5:8b:6c:67:ef:c1:
fd:f0:4b:e9:0f:93:69:3a:ab:5c:4e:99:74:b6:1c:3a:6f:15:
d1:8a:8d:71:68:4b:5f:e7:3a:6d:fe:c5:3a:e2:5e:d2:78:09:
7a:42:20:f4:67:72:9e:5c:1a:06:74:19:c2:ca:92:49:63:7d:
3f:ff:67:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:00:12 2026 by rpki-client