Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
File: eNiveOb7rS7n4tDOuGuji_pUjhs.mft (raw, json)
Hash identifier: cDfkj9GBt9FJuI04M/g7y17NLy87duDTc++eLQYEqEU=
Subject key identifier: 9D:8B:94:54:E9:D1:71:E5:0B:74:03:68:84:B5:1C:2E:67:EF:B9:12
Authority key identifier: 78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B
Certificate issuer: /CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
Certificate serial: 019D28163C65D1609849D2DD64AD95ECCC07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
Manifest number: 0470
Signing time: Thu 26 Mar 2026 03:00:39 +0000
Manifest this update: Thu 26 Mar 2026 03:00:39 +0000
Manifest next update: Fri 27 Mar 2026 03:00:39 +0000
Files and hashes: 1: eNiveOb7rS7n4tDOuGuji_pUjhs.crl (hash: V9kJe7JKxQP7kwDqDommkCXs4fM33d6YOSKh14CJLHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:3c:65:d1:60:98:49:d2:dd:64:ad:95:ec:cc:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
Validity
Not Before: Mar 26 03:00:39 2026 GMT
Not After : Mar 27 03:00:39 2026 GMT
Subject: CN=9d8b9454e9d171e50b74036884b51c2e67efb912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6b:cf:b0:74:c0:f2:75:62:a5:b1:79:f6:4a:
1e:c3:96:99:15:3e:d5:ed:b0:2f:3d:62:84:1a:3e:
22:10:48:06:f4:c4:21:b6:6c:76:84:1e:77:5f:d8:
47:a8:e5:e5:1e:67:5a:37:91:18:a5:81:11:fa:61:
d0:33:fc:c3:c9:df:67:10:aa:66:dd:43:83:eb:e8:
a3:ab:0e:89:22:1d:79:de:86:49:92:8b:27:a6:cf:
53:45:eb:03:db:e4:10:77:e5:bc:c1:d9:24:e0:6e:
fa:5f:f2:5c:b8:b6:15:dc:84:12:b9:bf:3d:98:59:
f3:1b:03:8c:35:6d:95:7c:fd:1c:cd:9e:be:d4:3d:
8f:09:3d:53:3c:34:ec:17:b8:b6:df:df:20:85:f3:
b8:9d:5d:79:62:f3:2b:c9:15:59:b4:95:37:c4:31:
b0:f0:84:e1:bb:c6:9d:ff:2c:8e:f8:16:45:bb:1a:
14:c8:62:1b:1b:66:2e:c5:7f:ac:c6:55:1a:b2:72:
df:01:09:1e:8a:34:5a:1a:63:ab:c1:d2:38:07:08:
00:27:97:96:cd:27:db:54:a3:80:47:e1:9d:e5:26:
3a:d5:3b:68:76:af:d7:cd:cf:a4:eb:e5:1d:20:6b:
a1:f5:1f:df:d7:db:b9:f7:b1:32:b6:dc:db:71:16:
35:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8B:94:54:E9:D1:71:E5:0B:74:03:68:84:B5:1C:2E:67:EF:B9:12
X509v3 Authority Key Identifier:
keyid:78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a3:d4:53:40:cb:37:d3:eb:94:4c:cc:99:6f:d5:66:6a:c4:
d6:b7:f4:bb:3f:0e:88:18:17:ce:fc:15:ae:49:a4:23:db:d7:
b5:26:58:a7:c8:f3:c1:5f:ec:1b:30:85:de:22:ba:3e:3a:69:
9f:62:0c:25:d4:c9:94:11:13:01:0c:dc:75:91:5c:fd:44:c3:
2b:43:6f:f5:66:5a:d7:9f:35:e2:f9:cb:dd:24:f3:fe:04:e3:
7c:b8:11:7f:2e:f8:be:13:c1:f8:c3:2e:ac:64:32:4f:f4:b3:
45:da:c4:37:c6:e3:7a:14:58:70:a6:8c:a3:fc:fd:26:56:6e:
a2:27:8b:00:37:a4:22:70:6e:9d:a3:27:48:ec:02:3b:b5:60:
94:44:21:e4:df:3f:60:90:77:bc:23:92:78:01:cd:2a:be:f9:
58:9d:68:df:ae:8c:59:c3:6c:da:f4:46:b3:e8:b8:70:dc:40:
1c:b3:e8:c6:80:81:3d:18:78:7d:a0:cb:2a:06:91:e0:4f:53:
cf:75:17:10:ef:c2:d7:92:07:b8:dc:75:57:7e:54:20:47:8b:
08:58:43:37:f2:91:6c:49:c7:4b:58:53:47:b2:b8:13:4a:09:
1d:fe:57:39:fb:39:25:56:65:b5:3c:00:02:a3:41:cf:8b:67:
df:af:8a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:40 2026 by rpki-client