Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: V0FZcqI2objv5bxMZNrUmGhDBc1NGWoHFaYJgjN2GZg=
Subject key identifier: 22:55:A6:31:49:C5:88:B9:CB:46:80:1E:6A:0A:4B:DF:D5:71:A4:22
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 019D2695EC9234B263FEB123CE7B8E937960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 1819
Signing time: Wed 25 Mar 2026 20:00:52 +0000
Manifest this update: Wed 25 Mar 2026 20:00:52 +0000
Manifest next update: Thu 26 Mar 2026 20:00:52 +0000
Files and hashes: 1: 03K81b7pfVVjypqVCITF7p4JxKM.roa (hash: PP40BChMOh4s2ABeNP+SORVGIO6bgC5+kty6waeJlqk=)
2: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: LxRt8ylVzjOl0X4qM4U2isDhlNfnkg8iIkGvTnZ8f1Q=)
3: kY0iPrlp2DFcIszfKgZ7jk3A9ls.roa (hash: B98fM5TLrUnwgXpz2kR4adHMCSlg8M1bTdaWmo1lkZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:ec:92:34:b2:63:fe:b1:23:ce:7b:8e:93:79:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Mar 25 20:00:52 2026 GMT
Not After : Mar 26 20:00:52 2026 GMT
Subject: CN=2255a63149c588b9cb46801e6a0a4bdfd571a422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:86:95:4a:d2:09:b9:76:c3:88:6a:c2:16:b4:
de:76:76:98:3c:b5:0e:6d:cb:c8:51:5d:5f:80:8c:
71:2f:f9:58:4e:73:0b:1f:c8:b3:c6:72:79:f0:ec:
4d:ff:b4:8b:79:30:7d:9e:1c:34:d2:de:c7:bc:ef:
1d:c8:6b:7f:61:b8:22:bd:2d:c8:ef:37:47:4d:7f:
8c:5b:bc:33:39:35:4c:8e:c2:48:43:12:42:c2:58:
f7:4c:ae:6e:65:fd:c1:70:78:2c:3c:42:7e:33:4b:
7a:e5:1b:a2:e3:f9:50:2c:f4:9e:1b:36:c0:02:b3:
f7:e0:ad:40:b8:4c:47:c3:da:c4:ee:b1:b1:e0:c2:
93:4f:8b:66:74:ad:66:62:3e:81:96:ee:fe:c1:b8:
b8:56:f5:65:42:3e:99:e6:86:3d:7c:9f:cc:8b:9e:
c2:52:58:53:cb:d7:23:cc:d1:90:24:75:22:c1:fb:
e1:b0:4a:35:ee:16:7b:b2:9b:96:dc:2f:16:aa:9b:
b0:de:34:8b:53:88:ae:80:94:4c:4e:40:00:56:47:
a5:15:4f:cd:79:0d:d0:68:d6:53:ad:6a:77:5f:41:
75:34:e3:4e:98:b9:6e:14:84:48:04:08:a7:30:9d:
6b:4d:97:82:1e:0d:ca:f8:4f:09:e1:43:a0:cf:9a:
35:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:55:A6:31:49:C5:88:B9:CB:46:80:1E:6A:0A:4B:DF:D5:71:A4:22
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a2:96:ca:c2:26:aa:1b:d9:0f:53:fb:dc:4b:cf:dd:7e:fc:
8d:1f:95:f2:f0:00:64:49:06:de:16:72:6c:83:8a:02:a6:74:
d0:59:4b:38:a1:87:04:c0:dd:46:42:8c:79:22:2b:dd:3e:74:
87:0e:8c:4d:46:4b:02:39:ce:87:04:2d:cc:9f:d9:0a:b5:7e:
20:8c:96:8e:b5:9d:17:8d:22:1c:af:4e:fe:ef:61:07:26:9d:
98:0b:4d:8c:a6:4f:1c:8b:b3:e4:bb:96:7f:ec:ec:43:d9:0c:
47:07:c8:a8:36:ce:d5:93:37:47:98:4c:2c:d6:88:b4:d9:e5:
b3:fb:6c:ba:52:7c:64:6b:d6:33:20:06:da:b7:92:9b:ca:f8:
7c:c8:69:a3:ea:8b:ba:9e:12:c0:90:66:9e:20:82:f6:46:12:
03:2f:5b:0d:1c:14:f1:db:06:81:d2:09:aa:22:4d:f7:e4:a2:
dc:d8:dd:24:8c:ec:e9:50:7b:d3:87:a2:aa:1c:bb:40:02:09:
d2:e3:46:c3:54:10:b4:2c:05:f4:3e:f2:3e:66:b9:ea:e4:c3:
80:00:a3:bf:f9:c6:49:4b:d5:9c:9a:7c:82:22:39:57:7c:10:
af:a6:2c:25:46:fb:ff:bd:c8:a4:a0:ce:21:2a:08:af:fe:29:
e6:41:eb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:42 2026 by rpki-client