Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
File: eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft (raw, json)
Hash identifier: YLUEUm4zqSp3kNGkRW4BU1Ttp5FXe3NfFkUnzQenZDI=
Subject key identifier: 38:37:D2:49:F2:87:8B:FA:D9:BE:2F:A6:AE:D5:7D:65:7E:A2:FC:67
Authority key identifier: 79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
Certificate issuer: /CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Certificate serial: 019CAB3412F93BBC14125F21267FC2FC2AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
Manifest number: 0492
Signing time: Sun 01 Mar 2026 21:00:42 +0000
Manifest this update: Sun 01 Mar 2026 21:00:42 +0000
Manifest next update: Mon 02 Mar 2026 21:00:42 +0000
Files and hashes: 1: Taq-VnAV0GtRFkkJ8jADCy9IBA4.roa (hash: YbxVfzZLxN4dbnEpk9Qnj+ot0+OX2VpkljxxR5pMXWk=)
2: eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl (hash: 65mS7na1IkgQw1MLpcYQyzqD8j27+HR7onVtrycqOGw=)
3: odXhA_xZijYQgRVHy6_dtJpV9S4.roa (hash: phjPAghGyg2dhEtydU7dRYb/McKqEnDMEOpSwT4IJtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:12:f9:3b:bc:14:12:5f:21:26:7f:c2:fc:2a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Validity
Not Before: Mar 1 21:00:42 2026 GMT
Not After : Mar 2 21:00:42 2026 GMT
Subject: CN=3837d249f2878bfad9be2fa6aed57d657ea2fc67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6d:5c:d3:e2:3f:b0:5c:81:e9:c8:46:ad:c9:
6f:19:7d:16:41:8b:92:c4:03:34:9d:bf:a6:71:38:
2d:0e:70:e5:c4:6f:e7:fc:ff:61:4a:88:de:98:ce:
a6:89:70:6c:82:bb:c2:e5:f0:1e:18:a0:6f:c0:06:
24:54:e1:cf:1a:46:23:7c:72:4c:15:43:8f:3e:5d:
c8:f0:ff:15:08:a3:43:39:11:ca:bb:f7:aa:64:f6:
b3:65:45:34:ac:a6:c0:99:c9:69:15:26:cf:a7:ed:
58:6b:83:e3:52:a7:c8:8c:d7:de:89:81:83:8e:24:
d8:85:03:97:bb:43:18:6c:75:37:87:8d:06:75:a5:
c4:43:dc:4e:92:89:25:a7:6d:c9:43:74:3f:e1:09:
c3:a9:92:7c:90:1f:7d:19:e3:02:e0:20:09:95:30:
db:88:60:71:94:6b:7f:85:5c:c7:e7:ec:27:82:6a:
65:b5:82:90:6e:ce:d3:23:a4:9b:7b:57:cb:61:2f:
9f:b9:31:65:5b:4d:4a:04:84:69:09:c7:e1:79:41:
22:f5:82:5c:03:46:af:15:18:17:83:1d:e5:89:63:
78:4a:fc:54:c7:f5:9d:55:32:23:d3:3a:b6:e1:8e:
62:1f:77:b0:f9:76:92:e2:74:54:36:4d:cc:08:20:
a2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:37:D2:49:F2:87:8B:FA:D9:BE:2F:A6:AE:D5:7D:65:7E:A2:FC:67
X509v3 Authority Key Identifier:
keyid:79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:be:04:b7:fd:f7:19:9a:dc:b2:8b:ad:6e:9e:b9:e5:ec:3f:
a7:58:69:be:ad:ce:c6:13:0f:4b:d5:06:98:0f:ce:60:e8:72:
36:15:37:58:a7:00:b1:c8:66:c4:77:92:28:3d:0a:fe:eb:f2:
43:1e:a9:24:a2:93:a3:f3:46:aa:a1:a6:d8:90:15:a8:d3:2c:
36:19:fe:85:6b:28:f1:56:9e:c6:29:e3:86:ed:5f:6b:5e:d8:
fc:5e:48:30:5b:aa:80:cf:04:8e:57:ca:56:fa:51:54:55:bb:
d8:85:9d:ec:37:91:33:4b:ef:1c:36:a4:5c:bc:1c:05:a1:3f:
de:f7:08:02:31:ab:36:21:05:ac:1b:66:12:df:21:7a:6b:8c:
ed:ce:df:4d:5b:d0:b6:e6:71:b9:87:00:25:8f:14:99:b0:4a:
d5:eb:9e:83:65:a8:e0:7d:02:94:d2:a7:d3:0b:dc:01:05:4c:
17:5f:08:ce:b8:81:67:56:43:c2:6b:95:eb:8d:c4:aa:da:2e:
65:e9:c5:a2:7c:29:55:df:ab:dc:d9:99:5e:99:89:9d:f7:4c:
99:0b:f2:f7:24:2a:cf:3e:53:98:99:78:01:4a:5d:f0:eb:5a:
2d:06:06:48:75:2e:ea:c5:58:01:72:c2:7e:82:e6:ad:f2:80:
b7:80:3b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:56 2026 by rpki-client