Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
File: eknuryQ0LDssYyyeSEYxON4twAs.mft (raw, json)
Hash identifier: CCoMUrN28rca4O5rlSUDXcg2lvVi2pRjfW9WAQvNFEE=
Subject key identifier: F1:D5:E0:88:F6:45:1C:85:3C:E8:36:66:E6:27:1F:68:8B:C5:75:EE
Authority key identifier: 7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B
Certificate issuer: /CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
Certificate serial: 019CAE6C65AF1AEE8B59F300E990643F5929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 12:01:05 +0000
Manifest this update: Mon 02 Mar 2026 12:01:05 +0000
Manifest next update: Tue 03 Mar 2026 12:01:05 +0000
Files and hashes: 1: Zi7Fm7xGDMI0wzFEfSwodKSqV1A.roa (hash: xTOm/EemcqAocmaFWYcszLLVt5VioXRzSyJ/5c30dUE=)
2: eknuryQ0LDssYyyeSEYxON4twAs.crl (hash: 96xQCEFiDqUrIg9O/iFXDCt2tI1tOzkY+TqwIeGQYi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:65:af:1a:ee:8b:59:f3:00:e9:90:64:3f:59:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a49eeaf24342c3b2c632c9e48463138de2dc00b
Validity
Not Before: Mar 2 12:01:05 2026 GMT
Not After : Mar 3 12:01:05 2026 GMT
Subject: CN=f1d5e088f6451c853ce83666e6271f688bc575ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:77:30:21:fb:8a:92:7e:8f:e1:7a:43:16:
00:d1:4c:92:6d:c9:6a:a1:fe:e7:85:e4:62:c4:57:
98:86:06:ae:f3:dd:fd:84:9f:e1:96:18:e0:ea:3d:
1d:57:97:37:34:31:87:a7:47:dd:4e:50:cf:7d:49:
7c:10:54:a6:8f:c9:c4:1b:83:98:6c:27:be:1d:e5:
1b:bd:c5:79:4e:54:d1:c6:79:2f:0a:0d:85:f4:3b:
9b:c6:a1:fd:51:dd:7a:c4:30:2c:99:46:8b:de:32:
fd:cb:9c:1d:1d:16:4f:19:85:48:95:29:3d:bc:be:
4e:71:d5:61:c9:57:1e:45:82:a1:b5:fe:51:15:cb:
71:e3:45:61:72:1b:97:25:07:1e:57:17:88:6c:45:
5d:7e:06:e7:38:92:47:42:ee:06:fe:7f:e9:e1:13:
60:15:56:21:69:e9:65:a3:cd:ad:09:95:97:b2:01:
ef:4c:4f:50:51:4f:e8:dc:01:46:70:82:bb:ea:6a:
c5:db:dc:57:32:74:dd:3d:ef:53:42:4c:03:f7:5d:
9e:67:76:72:d1:4a:fe:d9:8c:24:4b:d0:90:88:46:
84:0c:27:17:11:9d:3a:df:8a:55:eb:b7:9e:2a:3b:
f1:30:83:e3:53:e6:47:9d:eb:a5:ea:0b:95:bd:96:
87:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D5:E0:88:F6:45:1C:85:3C:E8:36:66:E6:27:1F:68:8B:C5:75:EE
X509v3 Authority Key Identifier:
keyid:7A:49:EE:AF:24:34:2C:3B:2C:63:2C:9E:48:46:31:38:DE:2D:C0:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eknuryQ0LDssYyyeSEYxON4twAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/63b8aa-722f-4009-ada7-f9b60711453c/1/eknuryQ0LDssYyyeSEYxON4twAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:da:28:1f:9f:66:1a:b3:59:2b:02:8c:2c:23:1c:7d:63:59:
be:ec:2e:e4:98:10:94:bc:12:1f:a2:2b:4f:97:94:07:f3:50:
0c:03:a0:c0:65:3d:db:27:65:04:63:89:c0:25:c2:8a:7d:6b:
23:71:1c:c0:08:1d:4c:21:16:07:70:bb:79:3d:4e:9b:69:2d:
c3:b5:90:d5:dd:5d:a9:73:bd:0f:9b:5a:f7:a1:ee:4a:8c:e6:
cc:d2:24:18:ce:ac:de:c1:c6:35:7d:d4:29:ba:0c:96:25:23:
a2:f1:19:19:51:79:24:04:89:19:0f:2e:04:c6:46:d4:0f:eb:
a7:0b:94:22:e5:ff:2e:7a:b5:7e:83:71:b4:26:a8:d7:7e:cc:
6f:c3:86:e2:8a:e7:02:c2:f2:bc:ad:6e:51:0b:47:2a:59:47:
c7:32:2a:a9:e5:14:f0:2a:f1:e1:72:ab:24:f5:77:f6:1e:b2:
75:51:8d:d7:c7:16:c0:b8:dd:d6:0e:43:a0:81:c7:88:93:4e:
60:71:44:c7:a5:e9:e0:66:be:4f:20:88:7a:40:d0:18:d2:1d:
01:5d:dc:c2:6c:9f:3a:5c:f0:63:99:1c:cb:b4:3d:7f:fa:0a:
d5:60:ea:60:a4:cc:51:db:3d:a4:6d:03:7f:78:ab:af:e8:1e:
5a:04:dc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:35:46 2026 by rpki-client