Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
File: eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json)
Hash identifier: 6HBFagigkyqBj2PPX6y816g7I5jLI8MnxcEhUGigz7U=
Subject key identifier: 23:CA:1A:A8:6C:B4:98:90:F2:AC:B8:FB:E2:5C:7B:64:96:15:C5:13
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Certificate issuer: /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial: 019D9C637262B2298C721566C090AC0C3103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
Manifest number: 0E9F
Signing time: Fri 17 Apr 2026 17:00:56 +0000
Manifest this update: Fri 17 Apr 2026 17:00:56 +0000
Manifest next update: Sat 18 Apr 2026 17:00:56 +0000
Files and hashes: 1: 0YhVfBsZbIu7A5iYA94enjAmzkk.roa (hash: HsOjFTzanM+rOeHfu6ck2x7MS7PSUK04NQ5MvXhA+ZA=)
2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: LK2B6mIvlzQvT2Rw3yJ48h2yYY9tY+PAHZ3yNMUTYE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:72:62:b2:29:8c:72:15:66:c0:90:ac:0c:31:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Validity
Not Before: Apr 17 17:00:56 2026 GMT
Not After : Apr 18 17:00:56 2026 GMT
Subject: CN=23ca1aa86cb49890f2acb8fbe25c7b649615c513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d7:4f:b3:e6:37:df:0d:71:46:2e:cd:49:f6:
41:06:53:14:0f:3f:bb:5d:8b:70:aa:04:10:91:e8:
2c:82:b0:87:89:33:2d:f5:75:ed:93:ad:a6:fc:57:
ca:5c:d8:3c:21:4b:4d:0c:02:fa:e5:53:ce:ba:b8:
ff:09:f9:ea:6e:e9:b4:ab:b9:53:95:4d:e0:5a:2d:
91:b7:07:a4:3a:c6:68:29:21:35:60:42:4c:09:ee:
6e:ee:c1:a1:29:7c:43:5e:b8:f3:e1:7d:27:b1:4b:
8b:ef:56:ef:3e:32:d4:51:6a:88:a1:38:b2:c4:7b:
e8:53:c5:21:07:8a:ce:7b:9f:63:42:e7:18:a2:93:
ff:d1:3c:4e:e2:68:3a:a6:a6:ef:32:50:47:1b:a9:
d6:a2:5a:e4:1c:ff:0d:37:a8:20:89:1c:bb:fc:be:
5c:88:59:9b:e3:aa:f2:e8:74:a4:7c:05:98:78:44:
7f:36:1d:b3:db:d7:bd:49:c5:66:e6:6a:42:92:0a:
84:c1:a6:21:03:e1:56:de:a7:0b:a3:14:cc:47:dc:
70:7a:bb:d0:9f:5f:58:9f:c0:4b:f0:07:1e:d6:29:
d3:f6:bd:76:a0:ff:e2:e1:fe:97:04:b9:bd:53:56:
5a:2f:e1:b6:b8:6a:55:4a:72:9a:5f:83:71:c7:14:
78:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CA:1A:A8:6C:B4:98:90:F2:AC:B8:FB:E2:5C:7B:64:96:15:C5:13
X509v3 Authority Key Identifier:
keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:df:25:39:fc:de:e1:0c:d3:73:20:f3:53:dd:6c:c7:48:7d:
66:90:f9:59:e8:97:8e:68:72:21:be:78:67:8a:b7:b1:bf:c8:
77:d3:92:69:43:a9:c3:07:77:85:3b:77:e7:44:23:76:07:c9:
16:bf:fd:e4:f5:e0:10:b4:92:08:69:c3:01:c8:8d:9d:86:38:
bf:40:ba:8d:73:e4:69:15:08:bc:1f:24:98:ba:88:fc:9b:5c:
a5:ca:ed:55:45:4c:b1:6a:a3:c0:49:05:87:45:ab:67:98:de:
0c:ec:2a:03:51:ac:a1:be:41:84:10:65:0a:b6:08:ac:41:6f:
cb:38:02:4a:0f:16:4a:58:9c:9e:25:44:fc:02:ce:35:f8:c3:
85:16:d7:e6:83:47:fc:21:e9:bd:0f:21:40:26:70:8b:8d:5b:
90:13:88:73:b6:8c:a8:80:4e:ea:c0:77:3c:2f:66:34:69:fd:
c9:86:67:91:d0:1a:9c:7a:fc:b7:9b:d9:1c:68:91:39:97:1d:
37:8e:27:81:6f:4a:80:1c:6c:ee:ce:5f:a7:c5:d5:a7:0a:71:
e9:07:45:db:d4:aa:f0:c7:62:23:1f:c5:cb:1d:7a:71:26:64:
ff:c3:c6:50:c3:cf:9b:59:f9:bd:57:ba:51:ec:1f:6d:b6:67:
d1:64:ed:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:48:23 2026 by rpki-client