Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
File: eAl9X3eghkNQCkNtDpjwM9D1SPk.mft (raw, json)
Hash identifier: +P7SBu4LVUakC6NqZa20YpHogfUWZ37PuhbBMN5CxcA=
Subject key identifier: 04:D9:84:62:2E:7D:53:9C:5B:3D:8D:30:77:A6:02:2A:06:B3:62:C6
Authority key identifier: 78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
Certificate issuer: /CN=78097d5f77a08643500a436d0e98f033d0f548f9
Certificate serial: 019D284D99E0E6CF36C565F0102A0C6C2230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 04:01:07 +0000
Manifest this update: Thu 26 Mar 2026 04:01:07 +0000
Manifest next update: Fri 27 Mar 2026 04:01:07 +0000
Files and hashes: 1: eAl9X3eghkNQCkNtDpjwM9D1SPk.crl (hash: JJwfEpSHu+Uxt1FGVrGieoqivCVfpJiK/xJP0caw6U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:99:e0:e6:cf:36:c5:65:f0:10:2a:0c:6c:22:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78097d5f77a08643500a436d0e98f033d0f548f9
Validity
Not Before: Mar 26 04:01:07 2026 GMT
Not After : Mar 27 04:01:07 2026 GMT
Subject: CN=04d984622e7d539c5b3d8d3077a6022a06b362c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e4:fa:f8:96:be:09:5a:d3:d0:b2:aa:46:7e:
9c:d6:81:be:88:58:40:a2:09:dc:92:4a:c3:d4:04:
5d:68:ac:22:e3:98:17:c2:30:fc:fc:e9:b0:17:d5:
3a:ac:bc:f5:74:f4:37:d8:04:fb:af:ff:e8:67:73:
42:71:77:02:06:a5:7b:97:17:9f:6c:ad:3f:28:e1:
c6:76:51:fa:39:cd:6b:8b:fc:c3:e9:55:d3:4c:bb:
b4:69:05:0f:6f:5b:e3:40:e2:a7:56:f4:50:0a:23:
58:a5:68:5c:05:37:8f:04:dd:28:ef:26:ce:c8:2e:
eb:e9:50:97:64:54:c6:22:32:ff:34:ac:43:4b:bd:
e3:0b:fb:07:d4:89:63:5a:ea:0e:58:f8:5c:2c:8b:
ef:96:d6:ea:86:1e:e9:99:54:90:6a:be:7d:51:8b:
98:75:14:f1:b0:b0:3c:db:98:db:30:37:11:ff:01:
27:b3:31:ae:d3:44:aa:84:a9:f8:4b:77:50:34:b4:
64:d9:28:f8:89:8f:d4:14:3a:a1:2b:aa:7c:56:b2:
58:fe:21:bb:7d:bf:10:7e:5d:c1:56:47:a4:6d:39:
fb:ff:32:d5:b5:0b:4e:47:9c:dc:e2:fa:93:1e:8a:
b3:03:0f:5d:1f:f0:75:3b:4c:4d:40:02:1e:62:b2:
3b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D9:84:62:2E:7D:53:9C:5B:3D:8D:30:77:A6:02:2A:06:B3:62:C6
X509v3 Authority Key Identifier:
keyid:78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:58:b3:22:1f:21:cf:1a:ec:7b:6c:8e:ce:26:57:18:77:ec:
ee:5f:d6:11:0e:f8:64:7f:33:91:f8:59:70:32:88:b7:19:8f:
20:ad:0c:44:e2:4e:f5:11:3b:a3:47:8c:5b:fe:3c:a8:6c:e2:
f5:79:2a:4c:49:e9:a3:e6:38:e6:5f:2d:7a:8e:bb:de:7a:35:
e0:5d:4d:b7:d3:e7:23:d0:99:ba:e5:86:55:53:c2:50:7d:9b:
49:06:04:29:06:4c:ab:9f:62:17:81:20:ec:f3:69:0f:f8:c9:
04:98:9d:17:99:d4:10:e7:fc:6c:5f:d9:82:9e:9c:8c:c0:ce:
c4:6f:cc:1a:10:77:ff:df:9e:73:d0:ca:37:58:2e:d7:45:65:
e2:f9:83:6d:ed:af:18:f2:b0:b7:8f:be:fa:41:b7:99:76:1d:
b7:2d:88:8e:28:36:6e:d1:86:72:62:ea:ef:77:f3:8d:23:a1:
5d:8f:08:e3:ea:7b:9c:f8:89:d0:ef:ad:87:65:47:88:bf:8f:
d7:cd:77:0a:61:5a:01:8a:4d:cb:e3:be:39:db:29:f3:62:aa:
2e:0a:47:57:6b:4b:07:f6:f7:61:78:ad:b3:cd:a7:c1:af:48:
be:78:11:b9:47:05:fd:61:0b:13:df:12:43:8e:fd:98:7e:68:
a5:26:5d:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTZng5s82xWXwECoMbCIwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MDk3ZDVmNzdhMDg2NDM1MDBhNDM2ZDBlOThmMDMzZDBm
NTQ4ZjkwHhcNMjYwMzI2MDQwMTA3WhcNMjYwMzI3MDQwMTA3WjAzMTEwLwYDVQQD
EygwNGQ5ODQ2MjJlN2Q1MzljNWIzZDhkMzA3N2E2MDIyYTA2YjM2MmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+T6+Ja+CVrT0LKqRn6c1oG+iFhA
ognckkrD1ARdaKwi45gXwjD8/OmwF9U6rLz1dPQ32AT7r//oZ3NCcXcCBqV7lxef
bK0/KOHGdlH6Oc1ri/zD6VXTTLu0aQUPb1vjQOKnVvRQCiNYpWhcBTePBN0o7ybO
yC7r6VCXZFTGIjL/NKxDS73jC/sH1IljWuoOWPhcLIvvltbqhh7pmVSQar59UYuY
dRTxsLA825jbMDcR/wEnszGu00SqhKn4S3dQNLRk2Sj4iY/UFDqhK6p8VrJY/iG7
fb8Qfl3BVkekbTn7/zLVtQtOR5zc4vqTHoqzAw9dH/B1O0xNQAIeYrI7NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATZhGIufVOcWz2NMHemAioGs2LGMB8GA1UdIwQY
MBaAFHgJfV93oIZDUApDbQ6Y8DPQ9Uj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUFsOVgzZWdoa05RQ2tOdERwandNOUQxU1BrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8zNTI1ZDMtODYyZS00OTc4LWE1ZjEt
YTE4ZTQwMDZmODBhLzEvZUFsOVgzZWdoa05RQ2tOdERwandNOUQxU1BrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8zNTI1ZDMtODYyZS00OTc4LWE1ZjEtYTE4ZTQwMDZmODBh
LzEvZUFsOVgzZWdoa05RQ2tOdERwandNOUQxU1BrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFizIh8h
zxrse2yOziZXGHfs7l/WEQ74ZH8zkfhZcDKItxmPIK0MROJO9RE7o0eMW/48qGzi
9XkqTEnpo+Y45l8teo673no14F1Nt9PnI9CZuuWGVVPCUH2bSQYEKQZMq59iF4Eg
7PNpD/jJBJidF5nUEOf8bF/Zgp6cjMDOxG/MGhB3/9+ec9DKN1gu10Vl4vmDbe2v
GPKwt4+++kG3mXYdty2Ijig2btGGcmLq73fzjSOhXY8I4+p7nPiJ0O+th2VHiL+P
1813CmFaAYpNy+O+Odsp82KqLgpHV2tLB/b3YXits82nwa9IvngRuUcF/WELE98S
Q479mH5opSZd4A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:16 2026 by rpki-client