Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
File: eIxPX0SmYGp2F6ls7BhJAKym-A4.mft (raw, json)
Hash identifier: CisDjgwx+MkXQAvi1mfzL/E+ozXSRC7htMId3akM1f8=
Subject key identifier: F4:70:37:89:C1:CA:2D:F9:9B:BD:6B:B0:DC:A7:D3:2C:B9:7C:61:D4
Authority key identifier: 78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
Certificate issuer: /CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Certificate serial: 019D2A3BB04F1AFCCF4A4887F87248BBC746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
Manifest number: 0E46
Signing time: Thu 26 Mar 2026 13:00:48 +0000
Manifest this update: Thu 26 Mar 2026 13:00:48 +0000
Manifest next update: Fri 27 Mar 2026 13:00:48 +0000
Files and hashes: 1: eIxPX0SmYGp2F6ls7BhJAKym-A4.crl (hash: 6BAnSLJAjyCfCXMWJVpanHZKlm6jAM544FRfC/5GQdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:b0:4f:1a:fc:cf:4a:48:87:f8:72:48:bb:c7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Validity
Not Before: Mar 26 13:00:48 2026 GMT
Not After : Mar 27 13:00:48 2026 GMT
Subject: CN=f4703789c1ca2df99bbd6bb0dca7d32cb97c61d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:66:54:d6:d6:69:cc:ae:f8:da:99:87:e2:52:
c2:56:a1:6f:ac:1e:14:4e:9e:c0:5f:a9:45:3e:ce:
ba:37:bd:a1:3d:13:ed:98:2e:de:44:e4:6e:34:46:
d3:f6:6c:4d:76:03:74:e8:81:b8:6d:7f:a4:ec:82:
d0:48:f5:fe:fc:30:ff:93:bb:1b:28:af:75:ce:57:
96:6f:da:46:d1:66:31:a8:67:8a:18:51:21:fe:e1:
74:71:8f:14:bb:c0:ea:9c:0f:eb:a4:82:45:10:10:
8d:70:ff:5b:7c:99:6f:37:e2:c5:05:bf:c7:bd:49:
a2:25:fd:91:27:13:c3:ef:89:30:e6:4e:30:8e:ff:
19:88:13:f8:17:5e:a6:b3:ee:6d:c6:5c:a6:37:ea:
d8:7c:c8:8a:1d:7a:56:75:8f:28:11:6d:eb:bb:b8:
d5:d4:ad:1e:48:6d:98:05:0e:c0:95:d4:b4:cf:e0:
fa:89:36:68:e1:b1:2f:7f:22:9c:3f:42:a0:d6:98:
3b:40:02:aa:7f:7a:4a:5f:6b:25:b6:9c:6a:8d:27:
7d:b4:08:ac:18:fc:ff:d1:00:78:49:4f:05:65:3d:
ba:2d:79:6f:33:f4:1b:f6:5b:bf:4c:8f:18:57:96:
59:2f:41:10:13:d2:b8:35:60:e6:26:28:e0:a1:0e:
f7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:70:37:89:C1:CA:2D:F9:9B:BD:6B:B0:DC:A7:D3:2C:B9:7C:61:D4
X509v3 Authority Key Identifier:
keyid:78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e3:ec:ad:f0:76:ab:d5:08:7e:1d:ed:6f:35:9b:dc:80:23:
48:11:26:fd:e7:9a:69:ed:aa:cc:da:51:da:a2:90:bb:e7:f4:
58:32:95:b5:6a:02:88:4a:66:64:2b:94:a8:1f:44:37:6c:2c:
cc:4b:a3:6a:01:3f:59:ed:a8:4a:2a:fe:01:e5:11:55:33:c8:
06:b2:6c:31:a7:4b:f2:6a:74:51:ce:7f:85:42:e4:0b:e8:bd:
0f:28:2f:61:21:b6:fc:8d:fb:80:a2:27:ab:0d:ef:7e:45:f7:
9c:a7:92:54:3e:b3:8b:f0:82:97:af:51:94:19:67:91:8b:5e:
6e:8d:1e:3d:da:47:7e:a5:23:44:94:a3:90:7a:91:f0:14:77:
ec:f1:e9:d0:f6:df:06:a5:e3:96:f7:e6:01:14:e5:2b:f1:6e:
79:34:2a:79:45:b4:0a:17:94:39:a1:90:82:99:0f:06:17:20:
5c:b0:a7:ed:ad:da:68:dc:cd:5a:e1:bf:6c:17:f4:8f:58:1c:
e7:ab:7e:3d:d3:71:0a:bd:ac:61:98:4d:11:d7:ff:51:a2:e6:
5a:bd:fa:3c:24:46:28:b6:bb:9d:2a:f5:0d:5f:81:e8:d9:af:
88:27:cc:7f:96:01:b5:24:57:40:c2:aa:9a:f2:93:f1:85:20:
06:a6:0d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:49 2026 by rpki-client