Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
File: eojTDTUC0d-66TDV6pzJ1yY-lQg.mft (raw, json)
Hash identifier: nMAXv5x000oq5KZdUBtBHmQL+1tWYraGmEhae4dGPCE=
Subject key identifier: F3:AA:4E:B4:4B:65:BF:9F:2D:7D:37:9E:C7:DE:74:59:BC:59:FE:46
Authority key identifier: 7A:88:D3:0D:35:02:D1:DF:BA:E9:30:D5:EA:9C:C9:D7:26:3E:95:08
Certificate issuer: /CN=7a88d30d3502d1dfbae930d5ea9cc9d7263e9508
Certificate serial: 019CAA21C1DAEAA26542561AD5D472D71B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
Manifest number: 053B
Signing time: Sun 01 Mar 2026 16:01:04 +0000
Manifest this update: Sun 01 Mar 2026 16:01:04 +0000
Manifest next update: Mon 02 Mar 2026 16:01:04 +0000
Files and hashes: 1: 1-4K1IVOJn7nAT0rq7-vBNKDfOH0.roa (hash: zpB+4xP9DfxiPXYyO76KcFfYZAOeUtNUuwf832esy4E=)
2: eojTDTUC0d-66TDV6pzJ1yY-lQg.crl (hash: igj8Azc2VgJTeq+XRoC2ADDFx3CagxUJkKKA9NfU/oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:c1:da:ea:a2:65:42:56:1a:d5:d4:72:d7:1b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a88d30d3502d1dfbae930d5ea9cc9d7263e9508
Validity
Not Before: Mar 1 16:01:04 2026 GMT
Not After : Mar 2 16:01:04 2026 GMT
Subject: CN=f3aa4eb44b65bf9f2d7d379ec7de7459bc59fe46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:84:8f:d5:87:c6:c0:1f:de:5f:97:3f:d9:33:
16:66:5d:ab:bd:f6:5c:4f:7e:d1:a9:89:0e:d7:a6:
20:6a:6f:c8:c8:bd:27:7e:fa:09:21:8b:0a:13:6d:
0f:47:bf:a5:f6:41:25:1d:db:56:0b:0e:dc:b4:3a:
77:0c:96:ec:63:39:21:e8:df:3e:43:90:49:8b:fc:
0a:90:76:d9:7d:da:56:0b:b1:37:4c:5a:82:15:6d:
52:f8:bb:89:a2:91:0b:f6:53:c9:8a:07:ff:1f:2f:
12:ed:4b:79:8b:83:f7:df:38:9f:81:a9:34:ba:f4:
9d:e8:2a:84:e3:08:20:32:2d:36:fe:c9:69:84:42:
fc:17:ed:1a:2d:7b:75:9c:a1:b5:89:c7:8c:4a:66:
01:05:e5:ee:50:67:c4:e9:fd:c8:d3:38:7a:4f:e4:
1e:ae:ca:be:d7:00:f1:e4:ca:e8:ea:cb:95:ed:03:
8e:81:01:73:eb:a8:75:79:6a:8b:96:8c:02:16:eb:
77:fa:82:41:70:1c:50:ae:b5:7d:75:f1:bc:f1:0b:
4a:f2:11:be:68:cf:fd:c2:8d:d9:2a:8e:d9:b3:a4:
8b:4c:16:a7:af:f8:9f:c9:be:c9:5e:9d:c1:23:06:
00:00:7a:a7:01:3f:5b:22:27:73:5f:97:24:f4:73:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AA:4E:B4:4B:65:BF:9F:2D:7D:37:9E:C7:DE:74:59:BC:59:FE:46
X509v3 Authority Key Identifier:
keyid:7A:88:D3:0D:35:02:D1:DF:BA:E9:30:D5:EA:9C:C9:D7:26:3E:95:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:69:eb:46:dd:cf:28:bf:36:9a:cd:c1:20:16:04:8f:7e:d0:
d0:bb:0a:02:2d:3c:6b:9c:d7:8a:d4:a1:41:e0:96:21:5e:b7:
61:80:c0:99:67:db:fb:d2:db:48:e8:57:32:c5:49:bc:b8:ac:
79:dd:3b:ad:df:c7:9d:d4:da:3b:57:a0:d2:8a:4c:d6:3e:f9:
79:10:99:66:9e:f6:51:66:71:f0:4c:e7:bc:9a:ac:b2:b3:7b:
5a:2e:96:22:11:21:21:14:c0:6b:54:b5:89:dd:03:66:ec:0f:
e0:4b:d1:cb:09:1b:47:79:6c:41:96:06:b5:63:ed:3c:0f:50:
f3:73:8d:09:94:b6:90:ad:5b:c0:04:82:cf:5c:6a:a0:e3:5e:
79:6f:55:32:45:09:b1:af:de:5a:9c:0a:3c:6a:98:da:26:b9:
a9:f4:ec:01:4f:5c:c5:fa:9f:e4:57:69:f7:ac:15:e9:49:a8:
0b:fa:af:24:23:57:44:2a:3c:e5:7e:6d:05:eb:73:d2:35:50:
e1:54:5c:94:80:cf:8a:3b:54:04:8f:83:e2:8e:17:4e:69:a2:
13:a8:f9:c6:08:f7:1a:56:20:52:b8:98:de:a8:ee:63:8a:9f:
60:76:34:7f:4c:26:30:98:ef:17:25:b3:bf:03:3e:bc:4a:23:
00:5c:74:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:21 2026 by rpki-client