Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
File: eilzR6QNO99Xh8x1OsJALQgkv8s.mft (raw, json)
Hash identifier: bMCT1ediPmxLHwxTsmtzonRNPVHqIoG9qBt+/hwpG28=
Subject key identifier: 40:BF:06:5D:18:4E:0C:C5:1D:DE:DD:74:B8:C8:61:5D:94:EE:95:E2
Authority key identifier: 7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB
Certificate issuer: /CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
Certificate serial: 019D25BA27AB87517FD9356AB50C05CC75E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
Manifest number: 1185
Signing time: Wed 25 Mar 2026 16:00:49 +0000
Manifest this update: Wed 25 Mar 2026 16:00:49 +0000
Manifest next update: Thu 26 Mar 2026 16:00:49 +0000
Files and hashes: 1: eilzR6QNO99Xh8x1OsJALQgkv8s.crl (hash: Hgz6wPeXaISivTN8LOvU6/vX7y3CInw66ahK74rWQ3Y=)
2: z3yszCqzwzJ9Jw2O0rZj44UQN-8.roa (hash: DJhyA7Sgz3SzUiJuyMTiypAx1/FaY4spXUbShFBqPpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:27:ab:87:51:7f:d9:35:6a:b5:0c:05:cc:75:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
Validity
Not Before: Mar 25 16:00:49 2026 GMT
Not After : Mar 26 16:00:49 2026 GMT
Subject: CN=40bf065d184e0cc51ddedd74b8c8615d94ee95e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:74:19:7b:1c:4f:1f:2b:82:29:7b:49:ce:
92:8d:e0:c8:0f:3a:55:db:64:12:1d:f9:21:af:bc:
8a:7f:da:a2:e7:48:f2:c1:9a:f4:84:e7:2b:bb:cd:
dd:7e:16:1d:84:27:53:c6:58:74:47:a5:cd:20:f4:
5c:2a:8f:4d:39:01:56:92:1d:69:e5:9c:2a:de:8f:
a7:4f:e5:35:8e:05:91:a4:4e:6e:34:bc:bd:89:51:
ea:b2:3b:a4:8b:a6:7c:2a:74:cd:af:3b:19:c6:ba:
a0:57:95:1c:c7:aa:de:4b:b1:46:9c:15:7a:13:0f:
52:84:14:23:01:0b:80:de:77:92:b3:8d:27:33:7c:
e2:06:dd:80:9e:8b:52:7c:37:6a:af:9a:e1:7f:6e:
3a:d4:9e:06:6b:94:78:06:87:c0:29:e5:36:f9:df:
df:ab:80:ea:33:ac:2f:04:6b:8c:f6:7e:fc:ad:9c:
0f:6e:a3:fa:e5:5f:42:1a:18:dc:e5:17:c6:3d:3f:
a9:1d:69:47:f3:fb:67:87:76:0b:15:0d:b6:b1:88:
9e:63:94:be:94:a5:d8:33:6e:31:57:c4:2a:92:ce:
22:17:db:cd:43:e9:5a:5d:1f:c8:a6:18:4c:f1:90:
27:a6:a8:b9:58:d5:54:71:2c:cf:e7:20:1d:38:f5:
5c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BF:06:5D:18:4E:0C:C5:1D:DE:DD:74:B8:C8:61:5D:94:EE:95:E2
X509v3 Authority Key Identifier:
keyid:7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:51:b8:1e:f2:97:fb:a7:e4:88:5e:3f:97:6a:1d:99:f9:d0:
38:5c:0e:1b:ea:0f:67:f2:27:8e:9a:ee:b0:68:62:cd:02:eb:
9f:8b:e3:3a:3f:38:3d:d2:17:40:48:45:ae:9a:c3:d7:d2:36:
94:12:35:c8:a3:c5:c1:f4:5a:45:1c:0a:12:30:23:0b:05:33:
42:ff:f5:7b:da:c5:30:57:d0:1e:d8:fa:78:30:ec:54:1b:c8:
bf:0b:3c:1d:fe:c7:f9:b4:96:66:d2:71:5e:81:60:a6:7b:3d:
4e:63:1e:74:07:1e:8c:b6:f7:37:10:7d:1b:7e:ce:ca:08:e7:
d8:ad:32:ca:6a:80:f4:84:9b:d4:80:8a:c4:5f:48:2d:2b:25:
ba:3e:76:f5:72:e0:d4:9f:9b:0c:cc:0b:37:02:45:c0:38:69:
bf:4c:90:33:58:00:91:e3:3d:23:32:22:22:43:24:1b:1e:02:
be:30:2e:e7:8b:9c:35:90:7f:f4:93:de:85:13:8d:cb:a1:56:
4b:03:55:ce:e9:8b:71:99:42:24:b5:45:f9:8d:b9:96:5f:68:
db:d4:e5:50:01:6d:70:30:d1:94:ee:2c:ea:2a:d5:68:7e:89:
82:fa:ae:25:00:fc:fe:9e:a5:bb:b4:2a:e7:ab:1d:c6:06:e9:
be:31:be:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:59 2026 by rpki-client