Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
File: eBd1rflxcuL2j8kQUwnTdTuh9M0.mft (raw, json)
Hash identifier: CLr65L1wFsmIftCuo3ShP0VvrEyqFAk8lG5JSO26iPY=
Subject key identifier: 72:EB:FB:D6:B4:3D:C7:A4:09:12:C9:4E:0F:75:35:DC:A9:65:10:AF
Authority key identifier: 78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD
Certificate issuer: /CN=781775adf97172e2f68fc9105309d3753ba1f4cd
Certificate serial: 019D2703EFB38BDB17895EC1A7CE3DB2811C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:01:02 +0000
Manifest this update: Wed 25 Mar 2026 22:01:02 +0000
Manifest next update: Thu 26 Mar 2026 22:01:02 +0000
Files and hashes: 1: eBd1rflxcuL2j8kQUwnTdTuh9M0.crl (hash: qFSo/bjCXtpka2UbzgsL88mZWBiR2O3QD165Hq396PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ef:b3:8b:db:17:89:5e:c1:a7:ce:3d:b2:81:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781775adf97172e2f68fc9105309d3753ba1f4cd
Validity
Not Before: Mar 25 22:01:02 2026 GMT
Not After : Mar 26 22:01:02 2026 GMT
Subject: CN=72ebfbd6b43dc7a40912c94e0f7535dca96510af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:aa:26:ca:d8:81:2e:bb:d2:73:ed:16:ef:
3b:be:7e:b1:f0:a7:bc:59:df:7c:5d:fe:08:7b:21:
71:6b:e4:93:03:f2:cb:1a:38:49:03:b3:a8:d8:67:
6e:6b:20:5e:71:0b:e5:91:2f:3b:12:e7:1d:da:bb:
86:79:66:41:ac:d4:87:a3:c6:c2:49:98:80:e2:b1:
a5:fd:3b:bd:99:8c:28:34:b7:ea:6d:af:1f:d3:0a:
7a:2c:4b:96:28:12:d3:b7:d7:c4:4f:54:ca:b2:57:
87:af:58:f7:77:ee:99:14:1f:96:dd:64:23:13:a4:
0e:9f:ce:9a:86:8a:f0:0f:a3:06:3e:92:c4:b9:88:
97:c5:50:36:12:cf:a1:5c:d4:78:07:cf:33:22:6d:
6e:27:a2:fd:bd:d5:1f:50:cb:99:4a:3d:70:ba:59:
36:7b:40:08:52:53:4f:07:04:b0:20:b6:1a:e4:70:
b2:59:d1:03:93:3f:9c:9a:25:1c:9d:b3:a4:f9:56:
30:60:cf:9f:f8:4f:c6:eb:9f:48:99:8f:64:57:88:
92:a9:01:a1:a2:cf:c9:9f:5c:c5:39:53:b3:81:84:
a7:a3:ec:a7:e6:8f:64:88:d9:c7:29:ca:be:76:02:
54:e7:fd:b0:f1:b4:09:cb:53:cb:42:a9:c7:f1:90:
59:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EB:FB:D6:B4:3D:C7:A4:09:12:C9:4E:0F:75:35:DC:A9:65:10:AF
X509v3 Authority Key Identifier:
keyid:78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:88:1a:b7:9a:40:0d:e7:bc:eb:8c:6f:2b:ed:e0:75:d5:81:
df:d7:d7:eb:93:dd:ac:6f:64:ab:09:50:91:3a:f6:e9:96:02:
df:fd:59:6e:73:8d:58:bc:d2:06:12:c8:93:00:27:eb:44:fc:
01:f6:4d:f1:3c:f2:42:f8:16:26:92:11:32:c6:01:aa:2d:e6:
c5:a4:62:09:de:be:68:3d:ae:f3:d6:e0:2f:c0:19:b1:cf:ee:
26:1d:84:56:7e:a1:c7:b2:7c:89:43:0f:7e:ac:a4:e9:7b:7f:
c9:94:2e:31:53:37:cc:20:f5:e0:02:de:fa:ed:99:98:d6:59:
9a:f9:45:fa:0c:55:12:54:fd:83:03:ed:6b:f3:ce:c0:c4:92:
cf:5c:cf:10:c1:88:91:fd:81:74:f2:e3:6f:f1:00:9a:ac:20:
d1:d7:b7:3d:79:f3:28:d5:10:33:3f:13:11:27:04:01:d5:ab:
ee:1b:97:3b:59:e3:8a:89:f0:d5:6d:77:f9:c1:d2:4f:02:e5:
1b:8e:05:af:8e:17:2c:4c:d6:dd:a8:9b:44:02:75:4d:03:77:
a6:fa:a9:09:db:5e:0b:4b:a3:18:2d:fe:05:09:6f:fe:b9:d0:
f2:83:c5:45:85:98:82:df:b0:78:d8:eb:54:6d:66:ba:3a:64:
ba:7c:f7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:05:08 2026 by rpki-client