Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
File: eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft (raw, json)
Hash identifier: 4laIRZAH2aMdiIhcsEPM71HGVZ5k/Gca94Nmg8NiTsw=
Subject key identifier: 57:18:54:8D:C7:FF:B0:BE:ED:0B:7F:2E:FD:18:BC:DF:0F:68:EA:99
Authority key identifier: 78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
Certificate issuer: /CN=7870621fc0afc8ec18eef20633f6148813279976
Certificate serial: 019D296088903C746C56D28D2850A08504ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
Manifest number: 074D
Signing time: Thu 26 Mar 2026 09:01:25 +0000
Manifest this update: Thu 26 Mar 2026 09:01:25 +0000
Manifest next update: Fri 27 Mar 2026 09:01:25 +0000
Files and hashes: 1: eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl (hash: XA9tQAU9jVjI53XiUqo193AqsLgRw2p4OO31iFTTQE8=)
2: jjcLF7vH_6kvhdbuJiucTbxqBvg.roa (hash: 9CdEC+k58JtQfXt8cCMHjsV9l0T5+udg+CTuc06zGlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:88:90:3c:74:6c:56:d2:8d:28:50:a0:85:04:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7870621fc0afc8ec18eef20633f6148813279976
Validity
Not Before: Mar 26 09:01:25 2026 GMT
Not After : Mar 27 09:01:25 2026 GMT
Subject: CN=5718548dc7ffb0beed0b7f2efd18bcdf0f68ea99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:54:3f:d4:77:2e:2b:41:c7:38:a8:43:5e:12:
d7:ee:20:39:1d:e1:bd:c3:4c:89:8c:38:54:53:cb:
24:67:8c:ef:f0:f7:be:8f:d5:27:4f:0d:27:d1:7e:
c8:5a:08:e0:22:00:e7:91:b2:2d:dd:8b:fc:1e:b7:
de:09:d1:45:2e:9a:9b:57:3d:94:dc:be:7e:93:ee:
db:fb:7c:62:88:31:99:db:5c:65:1a:74:87:b6:b1:
c5:72:7a:8b:d7:0e:a7:90:93:81:0a:91:7f:51:a0:
79:e1:45:ac:48:72:12:0a:a7:cf:10:4e:99:b8:66:
1c:58:78:0e:33:5e:e2:db:89:f8:6c:c8:a8:3b:1a:
ac:78:aa:39:65:66:73:4d:fd:27:88:44:94:ab:c8:
8c:50:58:0e:88:a0:46:81:9a:f6:08:df:9e:a7:8b:
e6:22:51:eb:f7:1b:23:b8:f0:fc:a3:da:08:8c:e4:
ca:6b:6f:7f:94:a1:2c:ca:f6:cd:b8:a3:45:00:7f:
ce:a0:3c:74:da:55:ba:fa:c7:99:2c:98:8f:60:32:
5b:51:0a:4b:19:c4:83:bb:d8:08:5b:da:41:0a:48:
b3:ed:02:cf:bc:1c:3a:b3:d5:61:57:51:1f:9b:25:
1b:83:e4:b2:b3:a2:20:36:b5:8a:21:da:a9:bf:4c:
63:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:18:54:8D:C7:FF:B0:BE:ED:0B:7F:2E:FD:18:BC:DF:0F:68:EA:99
X509v3 Authority Key Identifier:
keyid:78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:2b:5f:86:03:e6:47:7d:4d:d7:ff:fd:a4:de:56:98:8b:7e:
4a:7e:00:b2:8d:33:63:41:60:1b:07:5a:78:2c:8f:c3:29:eb:
45:04:6d:85:25:84:31:18:94:24:57:78:e4:48:60:57:09:91:
41:83:21:7b:38:34:70:aa:a2:16:ea:dc:53:3a:6b:cd:3a:b4:
bf:c0:95:db:11:24:e0:2a:0b:fa:54:a2:8d:dc:1b:8d:65:e5:
91:0a:ed:64:a4:e3:81:bf:3d:fb:a0:24:79:c6:ee:e9:c8:60:
9b:85:2f:c8:e7:84:04:b6:f0:9d:47:3b:cb:74:a5:c3:8e:51:
28:47:eb:d6:aa:ca:f5:9f:45:7f:1b:89:e4:7a:e4:0c:ef:31:
bc:e9:96:0e:1b:0d:d1:f9:03:66:27:fd:89:63:1f:85:bc:70:
38:34:b8:e6:be:f7:f5:70:31:5c:be:9b:ee:5c:42:46:18:34:
52:9d:64:58:b5:64:7d:86:4c:24:ed:99:10:f2:87:b4:2b:33:
d4:18:95:5a:d3:d2:12:f6:7e:91:00:db:72:40:63:00:17:43:
3e:45:0d:15:d1:9a:d8:2e:25:b0:3d:f9:58:e1:a4:d7:9e:f3:
d4:11:ca:89:1d:1c:72:f6:bf:8d:53:16:4e:eb:1f:5b:5f:b1:
c0:26:7c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:01 2026 by rpki-client