Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
File: enBAB-ITXIsSeANbp2QrmRWURLE.mft (raw, json)
Hash identifier: FAdSbrhL8xC7AcRmQBpx+1+Tng6Gmg8FPOipdEnVBT4=
Subject key identifier: DD:96:7F:16:8E:07:57:7C:70:53:79:E3:1C:4A:78:E6:6B:8E:EC:95
Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
Certificate issuer: /CN=7a704007e2135c8b1278035ba7642b99159444b1
Certificate serial: 019D25F19D584CF433042713502D277D0CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 17:01:24 +0000
Manifest this update: Wed 25 Mar 2026 17:01:24 +0000
Manifest next update: Thu 26 Mar 2026 17:01:24 +0000
Files and hashes: 1: enBAB-ITXIsSeANbp2QrmRWURLE.crl (hash: GW5U4tdi8GCPf5xcSKvRtQiM1L1+Lb9SCLiz1ueMSds=)
2: n2RXCHmE2mIVVK86mWjjYTONVEY.roa (hash: vfexF/zKDf9M5bj3mCjRl7MbjkVTZHBSgi+Kjne7g2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:9d:58:4c:f4:33:04:27:13:50:2d:27:7d:0c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1
Validity
Not Before: Mar 25 17:01:24 2026 GMT
Not After : Mar 26 17:01:24 2026 GMT
Subject: CN=dd967f168e07577c705379e31c4a78e66b8eec95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d1:2a:1c:1a:5c:4e:e8:1d:7e:60:0a:37:bf:
bd:5c:20:a1:a7:4a:c4:ab:17:eb:f7:0c:61:8d:dd:
8f:4e:f0:d0:07:78:32:6a:8d:f1:47:f7:b4:48:1e:
21:83:00:01:6b:79:6b:51:3a:a4:2b:34:c3:3b:9c:
71:f3:82:59:80:d7:0a:f1:bc:1f:2d:37:3a:42:b0:
73:0f:0c:d4:ff:b4:8b:81:50:32:24:15:5b:ac:fa:
a0:d1:f9:01:05:d2:30:03:ff:72:e5:2f:30:7d:ae:
1c:3c:cf:24:80:5f:f7:98:ff:6b:4e:7c:b3:1a:52:
ac:32:5e:8d:0b:bc:07:63:d7:15:c3:8d:a3:29:13:
25:be:78:dc:2f:5e:18:be:b8:ec:0f:fa:94:d2:45:
dd:69:8c:b5:03:4b:84:24:3d:25:d6:f8:b3:53:ee:
f2:2b:85:6f:b4:b8:95:ee:b0:00:08:0a:77:69:32:
0b:6b:7b:e9:6e:51:1d:20:f0:da:21:8a:25:50:bd:
0b:81:37:1c:f2:e6:63:a9:6a:83:30:d8:cd:14:cb:
1f:ff:9e:c0:f1:bb:7f:af:5b:39:ff:01:6f:88:b2:
72:f2:46:a5:08:88:7a:e3:0d:f8:a7:df:88:3d:f7:
ce:31:2e:e4:d8:58:73:70:e8:fa:18:d0:20:cf:99:
c0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:96:7F:16:8E:07:57:7C:70:53:79:E3:1C:4A:78:E6:6B:8E:EC:95
X509v3 Authority Key Identifier:
keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:48:39:d8:c8:71:cc:21:25:e2:8d:85:16:b2:58:c0:17:c5:
51:0c:38:3f:a6:c0:aa:1f:d7:6c:be:7f:3a:f8:96:6e:04:a1:
fd:62:9c:12:70:a7:bd:b9:3e:95:90:06:e9:9d:4e:80:3e:a4:
33:fd:e6:b9:16:37:b4:1d:41:e3:15:e8:cd:3c:a2:11:2c:48:
9c:5c:6d:77:e0:57:69:8b:61:b6:b0:8e:91:18:0c:7e:f0:d9:
3c:bc:df:ff:98:8b:3b:a0:6e:33:26:ab:69:c1:30:e8:37:7c:
7c:dd:c4:16:6a:aa:5e:2e:ac:79:68:16:c9:7f:50:f6:92:00:
7c:36:4b:56:cd:07:15:5a:98:bd:17:d3:84:a2:b5:66:ec:b2:
99:19:0e:f5:31:0e:86:fb:1c:7b:a7:b2:d8:29:90:7d:3b:68:
08:fe:16:d5:21:2e:5b:5f:d3:5c:47:88:62:28:ab:8d:b3:cf:
73:ad:31:b3:a8:e1:2c:71:2a:57:80:21:07:bf:e1:77:93:35:
e5:a4:df:28:7a:ed:2e:87:1c:91:39:f2:4d:65:8d:d1:90:69:
fd:3a:15:e4:e9:40:3f:00:10:2e:91:d5:6f:45:3f:ad:89:76:
f8:3a:1a:5f:69:b1:76:73:0d:8e:37:be:a8:0a:6a:80:ca:f4:
a5:38:68:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:11 2026 by rpki-client