Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
File: e8sSfHzXeGBylriDhuiUrh3jhb8.mft (raw, json)
Hash identifier: YvQa4mtVCo2rEA4N4NjXvLBRZ5UTMZXU2H3lLixPmkI=
Subject key identifier: 78:7F:3F:3F:F6:2A:B2:B7:8B:54:B4:04:22:51:2E:24:16:43:92:F4
Authority key identifier: 7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
Certificate issuer: /CN=7bcb127c7cd778607296b88386e894ae1de385bf
Certificate serial: 019D26601AC71F581ACFC9949C1737598194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
Manifest number: 04E1
Signing time: Wed 25 Mar 2026 19:02:05 +0000
Manifest this update: Wed 25 Mar 2026 19:02:05 +0000
Manifest next update: Thu 26 Mar 2026 19:02:05 +0000
Files and hashes: 1: UXWpgGFDnRE9Qd9B2_kQeDANeEU.roa (hash: 4rUA5GWn/3ql2gbHZLTVs1SZ20Xz3g2AjgFXRxPtMJw=)
2: e8sSfHzXeGBylriDhuiUrh3jhb8.crl (hash: YdNBd3gOvXHEz4U7bpo7ARHGWO0xAV7Ud0YVFVmr1tg=)
3: kkmKgi6g6HFL37DCnaadKvfK-YA.roa (hash: yjFJ1aHJiDzMEJQJojyjv8H/6rRO5DIEZ/IoW8c9H7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:60:1a:c7:1f:58:1a:cf:c9:94:9c:17:37:59:81:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcb127c7cd778607296b88386e894ae1de385bf
Validity
Not Before: Mar 25 19:02:05 2026 GMT
Not After : Mar 26 19:02:05 2026 GMT
Subject: CN=787f3f3ff62ab2b78b54b40422512e24164392f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:f3:94:03:a5:fd:e1:34:d2:27:47:b7:53:
fa:c5:cd:34:f7:13:8a:d3:52:2a:1f:5e:85:42:51:
a9:d3:0f:5c:25:ba:8f:92:fd:a2:c2:90:dd:c5:de:
39:4d:c6:60:c9:5e:4a:56:12:b9:69:24:a7:d4:4a:
09:9f:5f:9a:cd:4c:c4:e1:64:45:7d:5b:a2:83:df:
58:46:a5:1d:6d:3f:dc:47:ae:5f:b5:ab:24:f2:95:
15:f1:6d:ec:be:5e:a3:04:d8:76:55:b4:24:29:a7:
36:0d:fc:f8:69:d2:2d:73:0d:47:75:cf:a9:0b:a0:
7c:e5:7e:45:dd:16:8f:5f:f7:43:c8:68:b6:0c:aa:
e4:37:da:2c:c3:ac:51:f7:ba:16:8a:3b:7a:9b:36:
e7:26:b2:6d:7f:19:2d:e1:67:c1:0e:07:1f:f2:7b:
17:e5:3a:a4:e6:a7:c2:06:22:59:77:70:83:92:25:
cc:b9:5a:2d:da:3b:b5:ac:a1:04:01:d4:e0:ca:21:
4f:8f:f3:32:ca:b4:05:34:a8:2c:d2:d1:47:1c:0d:
2d:84:bc:1c:a0:b2:99:00:fc:7e:7b:54:5c:6c:1d:
ed:c1:77:2f:fa:d0:56:26:4e:38:24:1c:fa:13:f7:
14:e6:e5:19:90:7e:cb:07:69:92:4c:28:48:9f:90:
32:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7F:3F:3F:F6:2A:B2:B7:8B:54:B4:04:22:51:2E:24:16:43:92:F4
X509v3 Authority Key Identifier:
keyid:7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7a:4a:0c:bf:20:48:06:c5:5e:83:fb:ee:8e:11:79:9b:bf:
9d:ec:6e:bf:72:8d:c1:36:6a:9f:6e:7b:28:b3:10:08:2e:4b:
89:08:8a:78:bc:c1:83:11:97:05:40:20:38:1e:d1:67:3c:6c:
f1:7f:d7:f4:2e:8a:28:d1:d5:ea:84:47:e8:18:c0:b5:c2:5f:
50:9d:28:b3:ff:76:86:b9:cd:9d:93:b1:2e:2d:00:73:fa:1f:
e1:f2:e4:04:9e:1b:82:d2:e6:7d:36:a6:b1:30:0b:ea:c9:9b:
40:01:f7:e4:74:e0:e4:25:1a:c9:16:e8:97:26:1b:6b:4a:95:
7d:57:80:16:97:03:08:ac:d4:fc:a1:ee:8a:e7:e5:18:b2:5b:
a6:ee:8e:aa:58:10:09:91:97:c9:4b:58:a8:8d:14:b1:84:a3:
11:65:05:b6:cc:d9:8f:be:4f:e5:e4:6b:dd:c5:83:89:ec:df:
58:a5:a7:2a:76:1e:ef:55:e2:bf:c9:d5:da:b1:5b:01:79:14:
a2:f1:1d:dc:c8:12:b2:84:d3:a0:f7:5e:7b:d1:63:af:eb:6a:
11:f0:a2:c9:da:c5:f5:93:13:b8:79:37:4e:97:20:f1:a6:2b:
21:3d:d6:8d:1f:47:42:85:63:6a:cd:7d:ac:ff:d4:fa:27:45:
f3:15:47:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:46 2026 by rpki-client