Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
File: ezhehhZ9XMwi_YWJJWCudgtfKJg.mft (raw, json)
Hash identifier: zKJKLXBg0EvP6Ptg9PcPXVfOMPzJDQGb3eqInauOV+8=
Subject key identifier: B6:01:69:73:2F:ED:01:B1:46:6D:1D:E0:53:B9:D0:BA:31:CD:80:DE
Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
Certificate issuer: /CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Certificate serial: 019D284E4B38BF6BAE99615225B3DB6FE89D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 04:01:52 +0000
Manifest this update: Thu 26 Mar 2026 04:01:52 +0000
Manifest next update: Fri 27 Mar 2026 04:01:52 +0000
Files and hashes: 1: Az-iHkJejR0VdZYNnzrlZuh1_DI.roa (hash: sKSrtLFKb8T7tzu/qrkRHr+dbwySR1WM0V46K4Zjtg8=)
2: QBz4vHPmaaMrots9J1TfiJn6g8U.roa (hash: 1zuHsD0Vu63nJy0iEzu4F0kzfYEsfd1yuIUMu7fViHM=)
3: dr4ERfRqn_ghQRIttdnBh9fXjas.roa (hash: uHaHOk9OGRVoN05Lx2H15zjg2EWZadYEAqhzWiPC/Ak=)
4: ezhehhZ9XMwi_YWJJWCudgtfKJg.crl (hash: 0KUKC+HCLLo5wIXd0+XO6952jxT6oBMMLSc32IGIya0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:4b:38:bf:6b:ae:99:61:52:25:b3:db:6f:e8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Validity
Not Before: Mar 26 04:01:52 2026 GMT
Not After : Mar 27 04:01:52 2026 GMT
Subject: CN=b60169732fed01b1466d1de053b9d0ba31cd80de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:d0:41:79:2e:1e:fc:28:58:f2:e4:f7:68:
fb:04:22:c4:37:eb:8f:17:17:90:ee:08:e8:51:f4:
07:44:b5:44:38:45:34:14:76:02:6b:fa:3c:cc:bb:
c6:88:8c:1a:a0:36:bb:79:22:f1:31:7e:4c:77:99:
e1:e6:9b:f4:72:30:f9:e4:be:8c:b1:1e:b7:f7:98:
b8:c1:a0:9c:13:ad:ba:46:b6:44:8f:4e:d4:22:eb:
ff:55:87:54:5d:a0:35:5e:56:74:35:64:f0:07:f2:
3a:cb:3a:69:42:e4:4a:c3:bb:1f:4c:db:cc:97:e7:
2d:33:ae:7f:93:3e:c0:8b:43:59:16:ae:2f:ee:87:
ae:e7:29:b9:4c:0a:9c:8f:be:b8:30:bd:fa:9b:be:
81:0e:29:66:35:4f:44:9f:e5:ae:32:29:60:a6:2c:
15:4a:52:35:f9:ba:68:07:66:a7:d0:e7:89:52:a5:
a4:b2:8d:fb:2b:c6:f8:40:48:a5:56:69:c0:0a:47:
b5:99:64:7e:60:83:12:5c:15:4a:a1:4e:aa:7f:04:
22:c2:ab:78:18:fd:c7:7c:2d:20:ae:10:3e:7a:3c:
8f:1b:88:4c:2a:c2:0a:30:14:7e:df:86:63:f4:6d:
a3:6f:17:91:d8:8a:60:f3:43:66:28:50:9a:bd:60:
c7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:01:69:73:2F:ED:01:B1:46:6D:1D:E0:53:B9:D0:BA:31:CD:80:DE
X509v3 Authority Key Identifier:
keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:6f:cd:7a:e0:f0:13:43:bc:ef:8c:36:98:b8:7b:2e:02:ba:
2d:34:6c:0d:99:a2:65:68:b1:ca:12:df:44:b4:03:11:dc:f3:
13:01:1f:b9:ce:5b:e1:84:56:aa:a9:c6:70:74:ee:34:ae:9c:
a1:26:6c:db:b0:22:c3:0d:99:28:f8:fe:00:64:d3:4a:ea:e3:
f9:86:06:93:db:93:bd:9a:9d:c0:97:32:2a:8c:67:d9:50:9f:
74:a4:67:32:2f:9e:1e:80:54:57:c7:c2:bb:a1:a0:92:48:b9:
a6:af:1b:bf:01:d9:3a:e7:0c:71:e9:f6:70:15:10:df:d9:73:
bf:90:d2:c7:19:9d:dc:d3:80:c4:bd:7e:57:ad:61:30:b0:77:
cb:61:da:4b:6c:73:3e:11:56:4f:bb:45:ce:8b:86:40:e9:70:
0f:f6:e2:b3:f0:fa:9f:e3:af:c6:d1:e3:be:7d:02:f4:02:1d:
a1:af:9f:61:d5:49:28:22:f6:da:07:92:fb:07:c1:fd:90:a2:
f1:80:3b:f6:5f:03:bd:dc:fa:c3:ed:ca:9d:3d:86:c5:05:13:
89:36:ec:01:b8:b0:6b:e6:d8:48:5a:03:6e:21:e2:2f:07:75:
29:8e:26:2a:c1:fc:c2:df:b9:46:8c:e9:7a:e6:7f:65:a6:66:
c5:5e:50:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:15 2026 by rpki-client