Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
File: eXAA1nyN62Ji4Ampr_QioQOPRIk.mft (raw, json)
Hash identifier: rPDykXhrhj38KsEW5yrNCSS1Z6LF/rTNxZHZmYoD3pE=
Subject key identifier: 35:02:D6:04:7B:69:4A:60:64:CB:23:95:11:27:A3:4E:20:E5:13:0C
Authority key identifier: 79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
Certificate issuer: /CN=797000d67c8deb6262e009a9aff422a1038f4489
Certificate serial: 019D26CD416FA20355165FB19F2446B389F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 21:01:18 +0000
Manifest this update: Wed 25 Mar 2026 21:01:18 +0000
Manifest next update: Thu 26 Mar 2026 21:01:18 +0000
Files and hashes: 1: GAjXHoY_7fmDzbj9H9Uc6m8T6p8.roa (hash: EkPjSmD4j4Tlx7uZB0Hl4Pvd/i8ecVQc5MnBSe4X3KM=)
2: eXAA1nyN62Ji4Ampr_QioQOPRIk.crl (hash: dm6+AYHhtVg5WtYrfsu+2QMCUp5fzqP4tF52IOrCQCE=)
3: ztgFzTNfEVT3y4KjWAVdD6rV_ug.roa (hash: p5G0iO/ni16aCpdoZzR7W6j0r+kLy8M2fpyoJ34V+z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:41:6f:a2:03:55:16:5f:b1:9f:24:46:b3:89:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797000d67c8deb6262e009a9aff422a1038f4489
Validity
Not Before: Mar 25 21:01:18 2026 GMT
Not After : Mar 26 21:01:18 2026 GMT
Subject: CN=3502d6047b694a6064cb23951127a34e20e5130c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c6:33:02:14:ed:d9:82:c4:59:6c:86:20:75:
d7:d2:2c:1c:71:9f:c0:60:14:d6:d2:22:30:90:b8:
ed:9b:a5:fd:bd:9b:ec:ac:62:76:30:9b:cc:37:43:
c2:02:b8:59:b8:eb:6a:29:21:0b:76:c6:45:31:22:
77:77:0f:6a:e0:84:2c:be:07:88:a7:c9:a5:eb:25:
d8:75:d7:3d:2c:cd:ce:b6:17:a8:09:6f:38:17:e4:
6a:46:1f:e6:8e:35:53:d3:72:30:74:b9:af:6e:72:
be:11:08:7a:08:ae:f5:8a:c6:e6:74:97:a4:de:a6:
63:3a:fc:40:0e:68:07:3d:bb:0e:5b:e8:b1:e5:cb:
52:1d:09:de:2a:a6:9d:2b:f4:e4:28:34:fc:69:d5:
a6:d3:51:94:03:47:85:bc:28:af:ae:b6:1a:cd:dd:
af:4e:a9:30:a3:69:55:35:65:d9:bd:47:17:9b:37:
e5:92:fb:88:0f:8c:c5:66:bc:b5:51:ad:fd:68:da:
01:41:e1:e5:a8:a6:06:84:e4:81:f5:43:8f:a6:32:
4c:04:41:7c:16:6a:35:94:d4:20:f7:62:e3:40:9d:
3e:1a:39:1a:c0:ee:d0:e2:ea:10:67:b5:4a:57:65:
28:3e:eb:73:86:76:ba:6d:89:dc:ef:a0:d3:cd:df:
1f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:02:D6:04:7B:69:4A:60:64:CB:23:95:11:27:A3:4E:20:E5:13:0C
X509v3 Authority Key Identifier:
keyid:79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8b:54:3f:a2:c3:40:d8:e1:9e:18:79:ba:b9:94:8f:eb:db:
29:ae:f1:0f:53:12:0c:2d:5e:a5:1f:61:5a:5d:e8:17:7e:8d:
3e:8a:42:6c:f2:d0:96:6e:f8:3d:9e:97:03:53:3c:f0:ca:e2:
f6:cb:c3:0b:ad:57:d9:ef:70:ea:46:34:7b:4e:58:13:f8:cb:
e3:9d:f7:5c:d7:c8:18:88:7a:40:36:51:c4:9b:bf:e7:05:41:
81:0d:d1:b5:f9:de:bc:73:16:7b:b1:34:32:3a:6d:e2:eb:5e:
e2:00:c1:cd:0b:4d:53:70:ed:d7:e4:43:a8:41:48:2b:4a:e7:
19:00:33:77:ea:95:28:63:c7:65:ce:6a:ac:ce:60:6f:82:4d:
f1:e2:b1:e2:6a:a3:2d:54:4a:be:4b:ef:53:5b:48:2f:ef:33:
61:be:ea:09:34:f6:d8:76:dd:fb:35:5e:7d:f2:4e:82:29:19:
90:75:49:77:f0:bc:25:f1:de:c5:80:55:2e:c1:81:47:9b:7c:
9e:b2:99:29:8f:0f:48:62:a6:85:d6:2e:43:cf:70:10:2c:9e:
e1:5b:25:3b:f5:7c:62:e3:74:7b:14:9c:ef:be:74:3e:dc:91:
60:c8:40:59:48:0f:2d:56:2a:ef:3e:95:25:9a:0a:7d:2d:36:
65:34:ca:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:27 2026 by rpki-client