Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
File: E_hJa3nRwE0IKvg_G-al6rDGYIk.mft (raw, json)
Hash identifier: 0ggsGOmi0sv2MDPbkKMBZ8f6AvDoT7FNy7G+YJihVW4=
Subject key identifier: 7A:12:24:F5:4C:EE:3A:2C:73:F0:B4:0F:58:6A:72:B8:8C:99:12:2A
Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
Certificate issuer: /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Certificate serial: 019D25BAC49B527AF8CA64E83F43C381B994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 16:01:30 +0000
Manifest this update: Wed 25 Mar 2026 16:01:30 +0000
Manifest next update: Thu 26 Mar 2026 16:01:30 +0000
Files and hashes: 1: 0-jMAvh0Spb5-xmRErQMwSZjKoM.roa (hash: +jeSUtpRT2LXECnK0ZPglZoRmjktcmKAgTbcZjeh29w=)
2: E_hJa3nRwE0IKvg_G-al6rDGYIk.crl (hash: AySug5Y8AGre13PshHthYOK5AyltTuI3/dCP5N9U5DI=)
3: PiYMPWiZqPKiPSxxOffNzBJuyIA.roa (hash: iYM4COezS5hiEnoLC5DueAtMJwExPCIZLeAMdYmXws0=)
4: VOsklXRPi5AsfytJ7h-_DeqIeyg.roa (hash: tKatxYKbmsaEuCNsIxKCmZyCQCE1Y1J4bjW+cSVHx5Q=)
5: tv3k8_tkXaxqUisHZsrZ24FV1-U.roa (hash: +j2LkHTfDUaDhQsNd6JulSvZcuxXP5xrCRRkIe7nNyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:c4:9b:52:7a:f8:ca:64:e8:3f:43:c3:81:b9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Validity
Not Before: Mar 25 16:01:30 2026 GMT
Not After : Mar 26 16:01:30 2026 GMT
Subject: CN=7a1224f54cee3a2c73f0b40f586a72b88c99122a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:0d:66:9c:5f:ad:c3:dc:47:65:e6:9f:ab:
60:5c:0d:1a:9d:d1:84:32:11:00:a4:36:d9:80:fa:
29:fc:4b:01:69:9e:5d:a5:ab:82:f1:31:4c:81:89:
c6:e7:1d:60:49:9c:32:53:15:60:f3:67:91:08:01:
0e:bb:d7:14:08:25:ca:3d:2c:35:0d:a5:73:b2:7c:
0b:3b:8a:6e:12:a0:b7:5d:00:b8:10:dd:bc:b9:76:
82:04:8b:b6:a7:d8:ab:f0:47:e5:ad:9d:cb:f2:49:
20:4d:a0:b6:02:32:51:40:bd:12:6e:fe:74:b7:74:
31:24:b5:f2:28:37:1a:b5:d0:37:f3:7c:e5:62:c6:
d5:f7:ba:0c:92:58:81:c6:27:af:5d:8e:0f:dd:da:
b9:19:ec:88:db:78:44:a0:34:2f:95:2d:14:b2:bb:
95:58:07:6b:47:ae:dd:c3:e9:7d:0b:1f:c8:ac:ea:
e8:2c:02:23:24:c8:5e:a3:c2:1d:38:ff:a8:23:61:
5e:20:64:fb:85:51:cf:fa:30:d5:c3:67:1d:10:5f:
60:6f:e5:89:0a:f8:56:56:85:18:d6:43:17:6e:38:
fd:b1:1c:a7:a2:4c:d2:d8:f6:fa:e3:e0:50:24:bd:
7a:e5:ac:de:7f:18:ed:f8:17:0b:ac:8c:16:05:91:
5a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:12:24:F5:4C:EE:3A:2C:73:F0:B4:0F:58:6A:72:B8:8C:99:12:2A
X509v3 Authority Key Identifier:
keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:77:d1:ac:17:af:89:4f:ee:31:7b:62:5e:1b:05:0a:d6:3a:
8b:19:ec:c4:17:4d:10:04:e1:4e:1b:ff:9c:47:d0:56:84:28:
66:be:6e:f2:a6:a6:1c:59:26:a6:55:8f:04:c1:b6:9c:3b:43:
97:18:af:bd:d1:4b:1c:75:ea:50:5b:9a:12:92:4e:4d:1d:08:
75:c6:b7:08:ad:0d:28:ef:25:16:1f:19:8b:e3:e7:95:ea:d3:
26:e9:1d:a7:c6:f6:f0:0d:b8:09:10:4c:90:a0:e9:0d:f6:50:
cf:ec:d7:d1:a7:8a:d1:a7:d1:f0:74:e8:88:53:6f:1e:16:7a:
25:2d:4f:07:38:2c:9e:58:ac:05:64:72:61:89:f2:30:8e:2b:
a3:26:e1:c9:30:03:fe:7a:b6:0a:98:d5:f0:0a:55:9d:59:9f:
ba:5c:b7:9f:05:3f:10:4a:b0:4f:da:c0:f9:18:07:1a:75:51:
8c:b5:0c:05:c0:d7:ba:45:6a:a8:ec:f2:18:46:f1:72:c4:30:
15:4e:87:c3:9d:52:e2:d4:3c:67:c3:bc:b3:72:de:de:c3:ae:
54:6a:62:f3:da:3b:fd:b5:89:4d:2f:c0:d4:7e:2e:88:1e:03:
c6:7c:a2:f0:71:53:dd:ce:2c:fa:92:92:e4:d7:71:a2:8b:8d:
48:89:a3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:53 2026 by rpki-client