Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
File: elsD4kg77RNDh7_DBHoTmJ_epB8.mft (raw, json)
Hash identifier: nKYSTLdcgxOnSmDuEuemG2UNcW/612eXDoOTWc/ccL0=
Subject key identifier: BE:C4:7D:F7:91:B8:89:1F:E1:4C:65:4C:85:35:07:DE:DB:B9:49:F3
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Certificate issuer: /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial: 019D273AA7623867B189CD1456F185ABFC68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
Manifest number: 08DF
Signing time: Wed 25 Mar 2026 23:00:48 +0000
Manifest this update: Wed 25 Mar 2026 23:00:48 +0000
Manifest next update: Thu 26 Mar 2026 23:00:48 +0000
Files and hashes: 1: 1jLJCus46gm-AStfLL9q2M5Ho3g.roa (hash: XrU3m/+eSwJdl/VMMh61KI+6fAsJ3/LwxcvviYIdgKo=)
2: QdrNcN-oAM5Z8NA93nywrdwjlpY.roa (hash: dR7J85RI6taLvzWRGM0v5+kdTnGBa4MyfOc9jNOLw3w=)
3: elsD4kg77RNDh7_DBHoTmJ_epB8.crl (hash: uBZ2Ykl7byOEf/v916GQct8T6ezUdkNrIP7GcdY143U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:a7:62:38:67:b1:89:cd:14:56:f1:85:ab:fc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Validity
Not Before: Mar 25 23:00:48 2026 GMT
Not After : Mar 26 23:00:48 2026 GMT
Subject: CN=bec47df791b8891fe14c654c853507dedbb949f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c5:5e:ed:b6:cd:1b:db:e9:79:da:95:8f:6b:
f5:36:e8:72:e6:8e:2a:06:32:c0:cf:1e:78:1d:a9:
ad:73:a5:cc:6e:24:6c:0f:a1:87:20:eb:33:bf:cb:
df:fe:be:74:d5:3b:03:63:32:59:6a:69:b9:7b:30:
f2:23:d1:c6:b2:ac:cb:9a:e0:01:aa:b9:06:35:28:
23:11:97:1d:83:2d:36:b3:d9:02:0b:8e:17:66:f0:
40:94:ad:f8:ef:89:16:ec:96:8f:76:2b:a9:7b:d7:
1c:25:e1:bc:7e:65:ab:10:a6:e5:d7:c8:13:d7:7c:
4a:55:25:be:0e:44:41:71:fa:81:25:0a:9e:63:90:
0c:b4:04:8c:e9:86:0c:1b:7b:69:78:42:da:e2:d2:
d5:05:42:72:26:0b:24:6b:26:58:d4:81:5c:d0:9d:
a7:05:93:bf:fe:f9:52:d4:6b:6d:e8:07:37:27:8f:
ba:ae:79:6c:b3:df:4f:07:2a:d0:a2:55:6f:23:ce:
f9:dc:da:35:f2:6f:56:9c:6a:12:d4:56:37:26:df:
9a:54:b2:b5:11:1d:4c:fb:5e:ca:b3:e9:e8:30:32:
02:53:32:d5:0a:1d:50:03:c4:31:42:71:51:ac:33:
38:b1:3e:b9:a4:91:11:59:36:2d:67:c7:00:e1:6d:
8a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C4:7D:F7:91:B8:89:1F:E1:4C:65:4C:85:35:07:DE:DB:B9:49:F3
X509v3 Authority Key Identifier:
keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ae:4d:29:65:36:52:25:be:60:fe:53:18:1e:3c:53:20:c1:
41:5d:13:52:14:4b:25:c8:87:47:43:64:67:c0:f5:a6:17:ef:
07:47:2c:37:f9:c7:ab:86:f0:25:5d:93:3e:7c:24:33:ce:9e:
52:12:bc:11:91:01:2c:f7:ce:80:6e:c7:78:88:d5:d1:31:2a:
ea:5f:de:5b:c3:04:c1:26:f6:d0:bd:ec:9b:2c:58:7b:ea:30:
3c:4b:b3:77:5e:41:d6:eb:c9:8d:ec:d7:d8:1f:30:b0:5a:fb:
3d:57:09:a4:2c:a1:a4:41:38:55:45:8b:3d:6c:33:87:67:02:
51:97:1b:f4:a4:76:7c:7e:01:cc:27:66:dc:42:2f:91:74:29:
99:b3:d5:e3:6d:db:54:32:72:3e:1b:fd:33:23:86:48:c4:4c:
53:ef:42:b3:96:53:09:d8:14:f8:28:e6:83:7c:f4:b6:72:4f:
c2:14:c6:4e:53:3d:8a:2b:34:19:ec:63:98:04:b6:fa:3c:de:
44:b4:47:c5:d5:12:75:7d:e9:f9:68:e3:30:a0:4d:b7:59:e7:
43:44:90:d4:d5:93:0d:67:8f:c3:9f:ff:9e:7b:fb:79:44:5c:
9b:49:a4:76:74:33:d5:f3:91:12:11:a5:f9:e4:14:db:dd:08:
24:dd:61:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:54:38 2026 by rpki-client