
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
File: Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft (raw, json)
Hash identifier: e0uTTd/MVPniLK8nOx2kK6hO1OjEBgY/h7np2LW51Lg=
Subject key identifier: 1B:C7:CB:90:2E:D6:05:9E:79:6A:C9:95:B1:38:4C:9B:48:4D:26:D5
Authority key identifier: 12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
Certificate issuer: /CN=121a37282dd992d88658160559e048392798c84b
Certificate serial: 019D2704199FFEAE10FC58A1288D800252F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
Manifest number: 1042
Signing time: Wed 25 Mar 2026 22:01:13 +0000
Manifest this update: Wed 25 Mar 2026 22:01:13 +0000
Manifest next update: Thu 26 Mar 2026 22:01:13 +0000
Files and hashes: 1: 1I6xXRp2MIVm80sw3U3Tfku76Z4.roa (hash: f523msZqQLAjCeDR2b4rSYrcaIntt3g/koqAV5ProOw=)
2: Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl (hash: gmFUVvZX8ZpXL7roZs5N3nBgg147aqCoqiMnl5mUgBk=)
3: WPpx-izSeflERwTZTBDMUjusV5s.roa (hash: cWk+1ANHgFtlvOQuSevrBNEAZRGbynzPPc7h5zNZTe0=)
4: bN4b_Ro1UEHJNER_9HcU775UCQk.roa (hash: RK/VwkDkfRH19Tjgu6wUkuqkclNxNJAitWxY+C+QqsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:19:9f:fe:ae:10:fc:58:a1:28:8d:80:02:52:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121a37282dd992d88658160559e048392798c84b
Validity
Not Before: Mar 25 22:01:13 2026 GMT
Not After : Mar 26 22:01:13 2026 GMT
Subject: CN=1bc7cb902ed6059e796ac995b1384c9b484d26d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:e6:cf:07:1d:41:2d:94:78:00:34:fd:5f:
e8:55:ee:cf:90:6a:02:80:0a:9a:21:24:dd:14:f5:
51:32:2d:6b:dc:b1:a9:57:09:c0:74:1d:99:41:24:
b4:23:3e:43:71:3c:b2:d5:b2:8b:45:01:63:7b:d7:
21:df:1c:ac:bb:18:00:92:da:c1:76:78:ba:ce:44:
17:fb:6b:c6:d4:b3:9e:19:45:4e:84:60:b8:99:5e:
51:01:de:b7:46:33:3d:4d:10:0d:de:4b:92:a0:93:
15:cf:7a:b1:03:da:fa:b0:f2:f4:13:f4:52:44:3d:
fb:30:ed:c6:d9:a2:7d:88:20:59:5c:4d:65:49:6a:
50:97:68:5e:fe:fc:f0:c8:9f:29:f0:d5:d7:b9:19:
51:70:8f:e1:bd:08:96:ca:b1:c6:8c:d1:19:23:45:
0e:c5:34:16:00:ff:4e:70:a3:01:22:cb:9c:01:0e:
97:42:c7:56:c1:0c:29:ff:96:fc:4a:11:f9:2a:40:
17:a8:66:4f:85:08:95:a6:00:35:dc:b1:54:91:06:
8c:14:4d:9d:8f:c8:b4:8d:c9:06:08:20:51:8c:81:
a7:2e:f4:3d:45:50:49:af:ad:4a:fc:e8:e9:1a:48:
54:4d:41:1a:56:49:31:6a:d7:bb:3c:0f:08:3b:fd:
67:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C7:CB:90:2E:D6:05:9E:79:6A:C9:95:B1:38:4C:9B:48:4D:26:D5
X509v3 Authority Key Identifier:
keyid:12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:35:4c:0d:16:70:7b:56:6e:22:32:38:3d:ba:27:8b:68:84:
89:af:23:23:d7:43:52:78:d7:cb:94:ec:70:bc:4f:96:1f:1c:
20:36:d3:b4:d3:29:f6:68:3f:15:89:d6:3f:84:33:5a:64:6a:
59:f1:4f:f7:d6:58:c8:10:00:ec:31:80:71:30:63:0c:43:3a:
f4:74:08:28:83:aa:da:4c:f3:7c:88:56:cb:61:cf:48:46:0e:
e0:fe:f9:29:bb:51:10:a8:20:bb:98:7f:78:c7:5c:11:f5:79:
ae:41:99:b6:fd:93:cc:2f:3a:f9:b1:a8:7c:e2:bd:e7:93:3c:
59:1f:d4:fa:06:bc:99:7f:07:81:0d:a3:4f:ac:d1:75:60:5b:
a8:c1:99:87:04:56:d9:c1:30:00:f3:c8:21:5b:5d:ce:cc:d1:
7a:27:c5:03:0d:eb:19:7f:44:50:e8:2d:04:6f:f4:0a:f6:4e:
87:7b:76:d2:6d:6d:52:8d:b2:56:e7:a9:29:fd:70:64:35:7b:
e5:cb:58:da:46:3d:14:37:e4:f9:23:d3:08:d1:4c:0c:4b:c7:
e6:22:59:b1:27:d9:2c:fc:03:35:3f:4b:89:16:a9:3d:45:07:
4d:2e:4b:67:b3:ee:80:a4:c7:01:98:d0:23:07:8e:2d:02:ff:
32:bc:c0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:19:58 2026 by rpki-client