Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
File: eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json)
Hash identifier: yE97KpFy51cKjxH+CXJ53EDEWAeydaEG6fI6jmEtw10=
Subject key identifier: BD:D9:3A:E8:07:A7:84:23:58:4F:87:1A:E4:01:18:5E:11:79:E0:05
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Certificate issuer: /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial: 019CACEBCB35303E52C663F04C9A143D3978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
Manifest number: 0E23
Signing time: Mon 02 Mar 2026 05:01:00 +0000
Manifest this update: Mon 02 Mar 2026 05:01:00 +0000
Manifest next update: Tue 03 Mar 2026 05:01:00 +0000
Files and hashes: 1: 0YhVfBsZbIu7A5iYA94enjAmzkk.roa (hash: HsOjFTzanM+rOeHfu6ck2x7MS7PSUK04NQ5MvXhA+ZA=)
2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: tcogA+o09UI6nkJ70BiRsgiydcW6kmXLB9x8bfQNsHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:cb:35:30:3e:52:c6:63:f0:4c:9a:14:3d:39:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Validity
Not Before: Mar 2 05:01:00 2026 GMT
Not After : Mar 3 05:01:00 2026 GMT
Subject: CN=bdd93ae807a78423584f871ae401185e1179e005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:ae:24:04:8a:50:0b:09:0e:b1:97:ca:75:
91:02:95:ab:0a:f3:27:68:22:a4:a1:fe:c4:95:e8:
39:cd:a4:e2:8d:62:c5:10:f3:80:d9:63:7c:99:3e:
d9:1a:75:1c:08:83:06:5c:71:b7:1f:7e:c3:21:f4:
03:f1:6c:e2:b4:44:ac:ed:3b:54:de:9a:6a:32:52:
b4:11:7b:c9:19:49:d4:da:22:37:6b:fe:b5:8f:1d:
70:da:5d:54:1a:dc:b6:02:dc:0f:f3:35:9b:a8:fb:
0a:fd:4b:34:c5:ac:51:cb:66:dd:a3:17:99:53:12:
58:88:2d:a2:54:d4:0d:ba:8b:08:23:85:3c:df:02:
c4:3b:6e:63:62:0f:02:96:93:08:c1:fb:bc:a2:8c:
ae:41:4a:f9:95:92:a4:b7:a1:80:e4:1e:c8:78:30:
18:fb:4a:9a:24:7c:69:fb:08:9b:64:62:fe:04:40:
b6:99:99:20:f9:36:d1:aa:04:e7:c7:b0:7f:d2:91:
97:de:0b:c6:12:38:73:a2:c7:80:1a:18:b4:d9:ae:
63:17:3c:ed:44:70:a5:de:62:04:8e:a0:07:1d:b9:
7d:27:a7:e0:8f:8e:fe:46:06:1c:2e:a1:cd:51:8a:
f6:d2:d7:c8:e4:25:b3:1e:8f:03:ca:34:3e:61:de:
e7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D9:3A:E8:07:A7:84:23:58:4F:87:1A:E4:01:18:5E:11:79:E0:05
X509v3 Authority Key Identifier:
keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9e:68:6b:e8:6a:a7:8d:ef:e5:14:fd:eb:48:98:a2:67:5b:
00:ef:20:8d:05:d3:64:84:ae:68:74:41:f1:ff:c7:8a:ee:93:
bb:23:d2:db:cf:9e:71:be:a3:f7:6e:3f:8e:09:32:e5:ef:1b:
bc:f1:77:c9:36:77:32:35:c1:a2:91:72:a7:3d:da:9f:22:05:
df:a3:ed:99:45:7f:f6:cd:d1:a9:9c:9f:86:c9:52:fd:bc:7d:
1d:bd:2b:4c:b0:b2:af:cc:f4:bd:f8:b5:1e:b1:21:cd:4b:0e:
ed:ae:50:aa:3d:0e:81:7b:2a:02:c4:61:79:01:0d:e9:70:9b:
3c:86:68:d9:b1:7c:3f:cc:1c:e2:e8:38:cc:79:19:61:25:57:
75:c0:e1:dd:2f:92:98:63:7c:ae:c9:4f:8b:c2:c7:91:70:62:
1b:81:59:a3:94:4a:dd:e0:14:0d:07:86:fb:a7:21:fb:e6:bf:
bb:58:6c:f7:c8:23:23:fa:fd:d7:6c:37:62:ba:b0:2b:56:f8:
c1:8f:e4:39:31:d5:52:1c:5b:f0:47:af:49:97:67:fb:ea:33:
b4:2f:fa:4a:a9:58:22:37:df:94:2c:58:31:98:ed:05:a0:47:
2c:e5:53:b5:b3:f3:bd:e7:c5:02:4c:ba:9c:d8:19:fe:ba:02:
0b:50:7e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:45 2026 by rpki-client