Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
File: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft (raw, json)
Hash identifier: iIdDOowM4daOZdwxplVSh0kV03YrC7TM7TQUj/jUQsY=
Subject key identifier: 8F:25:1B:AD:08:08:9F:3B:C4:B3:5C:7B:25:7C:FE:09:BA:6D:5E:FE
Authority key identifier: 78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED
Certificate issuer: /CN=78fd422a1ddee016ee5f5a23101b93043af764ed
Certificate serial: 019D2703A2D6D07D5907EE5019EE918D7B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
Manifest number: 06E8
Signing time: Wed 25 Mar 2026 22:00:42 +0000
Manifest this update: Wed 25 Mar 2026 22:00:42 +0000
Manifest next update: Thu 26 Mar 2026 22:00:42 +0000
Files and hashes: 1: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl (hash: 50UuGbBcqXdslLCGE4K7KZQt07l9mstWg8oTPqtCnXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:a2:d6:d0:7d:59:07:ee:50:19:ee:91:8d:7b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fd422a1ddee016ee5f5a23101b93043af764ed
Validity
Not Before: Mar 25 22:00:42 2026 GMT
Not After : Mar 26 22:00:42 2026 GMT
Subject: CN=8f251bad08089f3bc4b35c7b257cfe09ba6d5efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:74:f3:d2:42:74:34:fd:14:12:72:d4:20:40:
b3:88:79:00:57:8a:7c:b1:34:f9:48:ea:0d:3b:13:
43:f0:7e:76:17:4e:a0:c5:bb:2f:7d:ef:87:81:8e:
a3:32:b2:7e:b8:6c:1e:1a:e4:12:cc:d8:6a:2b:76:
f0:b5:34:e9:da:3e:90:37:e2:29:82:07:7e:29:09:
cd:38:b9:2c:46:39:19:a4:47:9b:24:1e:56:28:82:
10:6f:69:b2:6e:8e:64:36:cb:c3:fc:6a:7f:ed:e9:
5d:9d:ef:a0:df:b7:a8:b4:fb:9f:51:5f:af:fc:17:
66:86:c7:2f:4c:66:92:b4:6c:9a:ab:9e:b0:b2:72:
c1:e1:d7:f2:fe:e6:f5:f1:ce:31:15:8e:2c:03:25:
f6:27:75:e1:3c:20:00:88:f5:0d:5e:e9:65:07:65:
1e:52:20:dc:cb:b1:9f:35:64:d6:70:05:27:35:1f:
3a:31:73:b7:fa:04:5b:15:8b:6b:d2:7c:b3:6b:55:
5b:6c:1f:2b:f4:e3:54:40:94:7f:c0:24:27:bb:88:
dd:31:13:fc:13:a4:b7:85:07:8d:06:3c:92:48:f8:
53:5c:41:43:da:5b:9b:f4:e3:ae:94:56:41:82:e9:
c2:31:d8:ac:89:a0:7e:43:92:32:4b:72:5e:61:34:
94:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:25:1B:AD:08:08:9F:3B:C4:B3:5C:7B:25:7C:FE:09:BA:6D:5E:FE
X509v3 Authority Key Identifier:
keyid:78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:50:13:30:22:55:42:13:ff:79:c2:d5:98:fc:1c:d6:ef:fd:
9f:5b:85:86:56:9e:37:90:13:ce:66:ff:15:a6:fe:a2:26:ac:
d3:24:9f:e7:a1:66:7c:99:b7:e2:e9:10:cd:f0:1a:d8:b5:63:
2d:a8:76:cf:7c:1b:af:6e:9b:71:e0:06:6c:76:94:4f:5c:7e:
95:70:8e:90:bf:5d:49:5c:fb:e3:3a:e7:30:22:57:8d:50:f2:
ec:a8:20:43:94:a8:56:4c:4b:33:23:5a:65:1e:fb:2e:c9:61:
58:0d:37:15:22:3e:35:25:ee:04:18:b2:ea:2a:1d:20:50:ee:
68:29:cd:12:75:8d:fe:b1:4c:43:d6:3a:d5:3d:b6:43:83:43:
f2:92:6e:37:aa:63:61:0a:14:0d:c9:23:1e:8c:e1:d8:7d:8d:
24:cf:7e:f7:48:0d:c2:ac:e3:d3:e4:d9:8b:9d:c9:06:d8:a7:
3a:91:80:18:42:c6:02:82:40:ed:6b:41:bd:96:0e:0a:8c:54:
83:43:47:5f:36:6f:0c:e3:ef:bf:2a:dc:29:2f:78:bd:13:ae:
d2:e4:b4:5c:2b:c6:55:26:bc:8e:ab:62:f6:5e:ff:1b:5e:c8:
d2:fc:58:3f:d1:9c:26:46:3d:a7:c5:3e:6c:41:ea:c0:01:a9:
eb:8e:96:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:43:35 2026 by rpki-client