Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
File: eHnrndYtUa-lAS76Gp0QxmQAxEU.mft (raw, json)
Hash identifier: X9DP3SfdXpM5h9+F/GZR9UPWr+aXc5k6tDi1BILZBIs=
Subject key identifier: BA:BF:35:86:E6:F8:A5:D7:44:A7:78:6A:D8:F3:03:79:F0:F1:61:F2
Authority key identifier: 78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
Certificate issuer: /CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Certificate serial: 019D26CD8B1621765158E99ED0C1CF6DBB27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 21:01:37 +0000
Manifest this update: Wed 25 Mar 2026 21:01:37 +0000
Manifest next update: Thu 26 Mar 2026 21:01:37 +0000
Files and hashes: 1: eHnrndYtUa-lAS76Gp0QxmQAxEU.crl (hash: 099eYR7KqTQWMt64C0OWH2cOl3dTTy8+dNFiMWs7DiQ=)
2: u20Y3FANdfmda1Xtsnh_0s435JM.roa (hash: S9BpRBE4oWaa9W/9qIMquDTbVfqR1JKGeq8wj5z0rN4=)
3: w2BN5Okc8CAi7WJd5D6lCmGLa9o.roa (hash: U6ZbAgCOETb02sjUGl8fc/vrWrB/9CMYg74fhgDMPO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:8b:16:21:76:51:58:e9:9e:d0:c1:cf:6d:bb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Validity
Not Before: Mar 25 21:01:37 2026 GMT
Not After : Mar 26 21:01:37 2026 GMT
Subject: CN=babf3586e6f8a5d744a7786ad8f30379f0f161f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:11:2e:e0:b3:22:0f:bc:f2:59:d3:8b:9d:
18:1b:62:95:30:69:6f:77:3e:b6:57:9c:f9:14:f0:
80:f2:c3:8f:59:a5:4b:22:34:23:72:e7:7b:60:65:
30:be:ef:0b:8f:7e:3a:b8:d7:ba:a2:ce:15:6a:97:
59:c2:36:a7:06:27:07:f0:a3:3c:a2:24:08:9a:b3:
65:24:4c:af:3a:30:dd:ef:5c:10:86:4b:8c:24:c3:
c1:63:3c:9b:33:07:0c:15:1b:57:30:52:90:dc:a1:
2f:0e:12:21:02:07:18:71:9b:97:29:41:09:75:6a:
9d:3a:4a:36:86:a2:ac:b8:3e:3c:32:8e:9c:aa:4a:
db:8d:ef:b2:d9:ee:8e:cd:18:6d:10:da:69:ed:72:
02:16:09:2d:cd:ce:7d:36:0d:a3:cf:74:17:51:84:
36:40:a7:c3:3d:e5:fc:25:d1:c3:7c:99:e0:af:8f:
bf:a8:09:2f:15:31:fd:51:b9:11:f7:0a:99:0b:33:
2d:0e:15:59:0a:01:e4:4f:dc:35:8e:2c:27:e7:b0:
cf:fe:07:46:99:b4:41:7d:09:c8:17:b0:05:8c:ae:
17:6a:f6:ef:b4:af:bd:79:10:fb:7a:3a:25:e3:c5:
48:4c:b6:f0:6c:30:3a:35:a8:24:38:19:27:b5:49:
49:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BF:35:86:E6:F8:A5:D7:44:A7:78:6A:D8:F3:03:79:F0:F1:61:F2
X509v3 Authority Key Identifier:
keyid:78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f2:34:59:93:9f:b3:79:1f:af:92:00:11:92:76:96:07:9c:
fa:99:a2:8d:34:5f:81:f4:08:65:4b:6a:b3:3d:4a:81:7f:01:
4a:bf:ac:f4:c1:e0:8b:c5:1a:f5:f1:ca:6e:a5:de:5b:78:25:
9b:fa:f1:2f:11:a6:1d:5e:7f:6a:96:d7:1f:f6:de:47:42:85:
e6:58:6e:82:e3:59:ec:66:71:ed:3b:94:ab:00:bf:35:4b:e9:
91:53:07:90:69:d2:1f:e2:69:66:70:5d:21:74:a6:c0:af:6f:
6d:51:5c:fd:a9:dd:11:17:b0:40:b5:c8:15:00:4b:38:e9:92:
5c:18:a0:e4:6c:d5:46:80:fd:ba:67:f8:c2:d9:f5:f2:b4:f1:
23:d9:c6:3d:7c:51:5d:0b:20:0b:70:e3:c3:bd:18:18:a3:cc:
8a:91:c5:28:6a:30:ad:b8:ec:5d:41:a3:f1:e0:74:f6:76:da:
75:64:81:1c:d5:d8:76:0d:f8:8e:70:86:fb:45:eb:3c:fb:44:
5c:99:03:80:1d:02:f3:5b:53:5a:38:2c:ba:7d:77:6c:9b:20:
6a:71:b7:46:ee:bc:a7:14:f7:56:2e:84:9d:ed:4d:81:d2:62:
c1:53:81:49:fb:65:5e:66:93:12:fd:3c:f6:45:30:f8:83:c8:
a2:d8:c5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:55 2026 by rpki-client