Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft
File: eIW8vdwL57G92jasnwzsQn8Tey4.mft (raw, json)
Hash identifier: I/4XlyLOqvbtXZ65moFUxZX7EgdknZzJynXdH2E0kII=
Subject key identifier: 32:90:9F:47:50:B4:1C:F6:C8:11:92:FD:CC:31:38:05:31:8F:85:B0
Authority key identifier: 78:85:BC:BD:DC:0B:E7:B1:BD:DA:36:AC:9F:0C:EC:42:7F:13:7B:2E
Certificate issuer: /CN=7885bcbddc0be7b1bdda36ac9f0cec427f137b2e
Certificate serial: 019D25BA5CBDDDFCF5553CE66EF25F179274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft
Manifest number: AA
Signing time: Wed 25 Mar 2026 16:01:03 +0000
Manifest this update: Wed 25 Mar 2026 16:01:03 +0000
Manifest next update: Thu 26 Mar 2026 16:01:03 +0000
Files and hashes: 1: W03Dmlw1Ww-cFIp9vkfsWC5L8jY.asa (hash: tgVo7GEFMdcLKeWoqIyQC9dBMhmbDoLL5DmLM5lP/iU=)
2: eIW8vdwL57G92jasnwzsQn8Tey4.crl (hash: I7Drl1JqDBmrSelOab7rbys30D5vl0Nb1qHPEGtcwMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:5c:bd:dd:fc:f5:55:3c:e6:6e:f2:5f:17:92:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7885bcbddc0be7b1bdda36ac9f0cec427f137b2e
Validity
Not Before: Mar 25 16:01:03 2026 GMT
Not After : Mar 26 16:01:03 2026 GMT
Subject: CN=32909f4750b41cf6c81192fdcc313805318f85b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:32:b4:48:b9:a8:dd:00:5b:b0:62:f1:ba:
ee:2d:cc:26:9f:0d:f1:d3:c2:44:44:8b:01:6b:06:
b0:33:9c:31:29:53:4b:76:73:32:7f:e5:12:2f:0e:
89:c5:41:b4:3f:00:38:ec:d8:1e:2d:38:87:6b:68:
6b:ba:87:21:2f:68:fb:ae:27:40:78:8d:95:1d:97:
d2:c0:68:b1:9e:4b:ef:95:2b:c2:89:3f:73:47:bb:
7a:d7:db:f7:7a:9f:d7:54:e1:fa:75:ac:f8:14:03:
cc:d7:be:0f:d0:a4:79:a4:45:3c:c2:21:ad:1d:b8:
6d:7e:7b:74:59:a3:c2:29:35:f3:95:16:8e:e0:69:
f3:51:48:d6:b1:1c:34:de:27:0a:c4:1e:ee:77:a0:
aa:26:2c:75:75:4c:ab:b7:60:d4:cb:cf:0d:6d:ea:
b1:20:82:f7:ed:8c:01:f8:fb:3a:69:c3:ff:a2:8b:
81:5a:29:c7:10:b3:26:a9:4b:c2:1d:74:b3:a0:fd:
0a:9c:3c:7e:7f:bb:27:c7:36:0c:ca:e7:9c:1e:eb:
60:af:ec:1e:f0:20:55:0e:7b:b1:23:f0:a5:58:dc:
11:8b:21:35:33:e9:f8:d6:84:bb:8e:5b:92:48:d5:
e9:4c:95:2f:e1:cb:a7:f2:8e:0c:48:e4:ba:90:56:
07:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:90:9F:47:50:B4:1C:F6:C8:11:92:FD:CC:31:38:05:31:8F:85:B0
X509v3 Authority Key Identifier:
keyid:78:85:BC:BD:DC:0B:E7:B1:BD:DA:36:AC:9F:0C:EC:42:7F:13:7B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8c:ae:03:33:a4:74:2c:d0:c9:f0:73:4a:ba:80:93:eb:46:
48:0d:d2:c5:38:cc:1c:4f:e5:88:46:3e:ee:c1:7e:04:9e:6c:
31:9a:f7:c7:f1:b9:21:27:95:84:54:55:49:8d:3a:92:b5:05:
79:72:ce:37:93:9c:c2:1e:46:0f:7e:7b:7a:08:c3:ad:17:83:
be:e5:11:86:44:8e:87:8c:c4:da:2e:6e:5b:69:95:5d:a3:f6:
f5:a5:45:5e:8c:6d:ce:69:a5:87:15:2d:88:56:2c:b5:43:38:
ee:12:ad:fb:53:23:dd:53:b8:2b:77:8b:a4:25:86:3e:0c:cc:
3c:34:d8:81:da:4c:8a:c1:db:a3:f5:04:8f:06:d6:56:f8:38:
63:a7:18:e2:71:5e:a1:99:8d:61:4b:19:11:55:a6:65:c9:33:
5b:0d:b2:b5:d6:91:4e:bf:33:ce:67:02:96:27:75:1a:52:d2:
d4:3a:19:71:d7:33:f7:2b:38:d0:b8:03:bb:c8:82:9a:43:0f:
38:16:4f:fd:79:8a:ff:15:eb:04:f4:6a:f1:58:09:c0:2a:04:
c3:09:bc:c2:77:f5:95:61:a2:41:8d:48:21:8c:6f:f8:3e:71:
1b:55:c8:6a:b0:f1:60:ba:b4:f4:08:9f:55:be:69:82:5a:b1:
6c:03:da:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0luly93fz1VTzmbvJfF5J0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ODViY2JkZGMwYmU3YjFiZGRhMzZhYzlmMGNlYzQyN2Yx
MzdiMmUwHhcNMjYwMzI1MTYwMTAzWhcNMjYwMzI2MTYwMTAzWjAzMTEwLwYDVQQD
EygzMjkwOWY0NzUwYjQxY2Y2YzgxMTkyZmRjYzMxMzgwNTMxOGY4NWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRYytEi5qN0AW7Bi8bruLcwmnw3x
08JERIsBawawM5wxKVNLdnMyf+USLw6JxUG0PwA47NgeLTiHa2hruochL2j7ridA
eI2VHZfSwGixnkvvlSvCiT9zR7t619v3ep/XVOH6daz4FAPM174P0KR5pEU8wiGt
Hbhtfnt0WaPCKTXzlRaO4GnzUUjWsRw03icKxB7ud6CqJix1dUyrt2DUy88Nbeqx
IIL37YwB+Ps6acP/oouBWinHELMmqUvCHXSzoP0KnDx+f7snxzYMyuecHutgr+we
8CBVDnuxI/ClWNwRiyE1M+n41oS7jluSSNXpTJUv4cun8o4MSOS6kFYHNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKQn0dQtBz2yBGS/cwxOAUxj4WwMB8GA1UdIwQY
MBaAFHiFvL3cC+exvdo2rJ8M7EJ/E3suMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUlXOHZkd0w1N0c5Mmphc253enNRbjhUZXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jOTZjZWYtZmJkZC00NGRlLWIxM2Qt
NGZjN2I2YzdhNGMyLzEvZUlXOHZkd0w1N0c5Mmphc253enNRbjhUZXk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9jOTZjZWYtZmJkZC00NGRlLWIxM2QtNGZjN2I2YzdhNGMy
LzEvZUlXOHZkd0w1N0c5Mmphc253enNRbjhUZXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4yuAzOk
dCzQyfBzSrqAk+tGSA3SxTjMHE/liEY+7sF+BJ5sMZr3x/G5ISeVhFRVSY06krUF
eXLON5Ocwh5GD357egjDrReDvuURhkSOh4zE2i5uW2mVXaP29aVFXoxtzmmlhxUt
iFYstUM47hKt+1Mj3VO4K3eLpCWGPgzMPDTYgdpMisHbo/UEjwbWVvg4Y6cY4nFe
oZmNYUsZEVWmZckzWw2ytdaRTr8zzmcClid1GlLS1DoZcdcz9ys40LgDu8iCmkMP
OBZP/XmK/xXrBPRq8VgJwCoEwwm8wnf1lWGiQY1IIYxv+D5xG1XIarDxYLq09Aif
Vb5pglqxbAPacw==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:35:34 2026 by rpki-client