Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: mJoSjIvsoaFI7wASnlsa7m0vj6fMcqpFc+B1qe323wY=
Subject key identifier: E0:FF:A1:AC:73:46:72:53:2C:04:CC:B7:25:8D:7C:EF:D8:FC:73:16
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 019E1DC7832F5702DBC4C1A6B291DAD95572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 1899
Signing time: Tue 12 May 2026 20:01:14 +0000
Manifest this update: Tue 12 May 2026 20:01:14 +0000
Manifest next update: Wed 13 May 2026 20:01:14 +0000
Files and hashes: 1: 03K81b7pfVVjypqVCITF7p4JxKM.roa (hash: PP40BChMOh4s2ABeNP+SORVGIO6bgC5+kty6waeJlqk=)
2: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: P8mwuGSryjABw2mHLR2jClj2cy3d/ZhfHbVYFiPQlF4=)
3: kY0iPrlp2DFcIszfKgZ7jk3A9ls.roa (hash: B98fM5TLrUnwgXpz2kR4adHMCSlg8M1bTdaWmo1lkZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:83:2f:57:02:db:c4:c1:a6:b2:91:da:d9:55:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: May 12 20:01:14 2026 GMT
Not After : May 13 20:01:14 2026 GMT
Subject: CN=e0ffa1ac734672532c04ccb7258d7cefd8fc7316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:e0:94:2a:61:d4:27:c6:41:8b:29:41:2e:
09:ed:fa:5b:8c:95:fc:59:1b:51:0b:2c:88:30:cd:
13:1a:2f:cb:80:33:3b:c1:5b:7e:06:32:cb:44:b6:
cf:d4:3f:42:15:30:cf:75:79:c7:7d:2c:0c:da:81:
85:d5:d8:e7:50:bb:ce:8e:26:29:42:8f:49:0a:1b:
76:29:84:92:e4:85:b5:8f:00:9f:49:7d:8c:58:3d:
6e:cf:10:64:cd:a0:1f:9d:4d:9d:73:c4:1e:f7:98:
57:7c:36:5c:e6:fe:65:27:57:50:26:27:02:d9:64:
7a:99:5d:63:f3:39:d3:39:93:23:6b:27:94:e5:d5:
f0:3a:51:78:bd:f7:d3:a1:e2:ef:e1:0f:57:d6:31:
1c:10:77:b9:cf:01:e8:fb:e7:44:44:41:01:23:d8:
a4:56:db:84:5a:53:7c:fe:e6:14:c8:e9:c9:aa:19:
10:54:c6:de:30:52:d2:3f:f2:fb:23:2b:e2:66:f6:
45:b3:6c:2a:68:fa:81:c7:db:a9:d2:9b:f6:f6:c3:
1c:44:71:c0:9b:0d:1a:96:c0:d8:cc:54:45:72:5a:
bb:f0:ce:c5:93:19:f1:aa:ab:bf:7c:3d:fc:b1:94:
78:ea:c4:09:7d:61:6d:96:d1:c2:26:68:d1:33:19:
ba:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FF:A1:AC:73:46:72:53:2C:04:CC:B7:25:8D:7C:EF:D8:FC:73:16
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:83:1b:a4:64:c2:d0:15:79:a9:53:4f:68:2e:70:b9:81:db:
89:9c:ae:55:dc:44:20:59:e9:30:6f:10:6e:0a:18:fe:10:13:
79:b9:4b:0d:d9:8b:d2:4a:1a:b7:3f:ce:cb:7e:de:3e:10:e3:
bc:b9:a7:41:cb:2f:b0:b3:45:c0:0c:0d:6b:76:2a:78:d0:bb:
41:82:ba:f5:bf:13:bd:4c:ea:3b:b6:06:38:56:ba:a0:a0:bd:
95:e1:57:27:a5:7f:65:a7:65:53:3a:89:82:fa:b2:bc:ef:b7:
2c:cb:3e:aa:c9:18:ec:ab:71:cd:c9:91:d0:c8:97:61:34:47:
6c:ff:07:e4:27:0e:72:79:29:fe:17:ef:84:46:6f:34:b3:0d:
c6:c0:95:50:95:f2:cc:79:b4:15:3b:f0:2f:78:cb:09:c9:13:
20:34:60:2a:9b:dd:95:94:6b:a6:ab:1b:6a:2a:b8:db:4d:6e:
c7:b1:46:0a:fa:5b:b5:06:74:10:5b:cf:a6:84:2c:ca:95:ac:
3e:ee:ad:66:6f:f6:7c:14:31:7f:b7:0f:90:8c:db:3d:d9:89:
cf:85:ba:0f:1f:4d:75:2c:e0:1f:05:3a:3b:e2:4e:10:c3:1b:
3f:16:6d:6f:33:39:a2:28:cd:e4:9e:e4:ae:e2:8b:38:c9:c5:
c7:38:aa:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:05:15 2026 by rpki-client