Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
File: 1EggcpoPmr-2ysO1-WwnGY12ORs.mft (raw, json)
Hash identifier: j1haSQqe35ZnxH55l3Abfsz7zt1JIvAuODCGyk+oYqA=
Subject key identifier: DB:18:45:D2:16:6F:0F:F0:38:67:5D:E5:0B:93:66:7D:7B:70:0A:3A
Authority key identifier: D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B
Certificate issuer: /CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
Certificate serial: 019D27A8A50A10F65602B73367ABF6886B2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 01:00:56 +0000
Manifest this update: Thu 26 Mar 2026 01:00:56 +0000
Manifest next update: Fri 27 Mar 2026 01:00:56 +0000
Files and hashes: 1: 1EggcpoPmr-2ysO1-WwnGY12ORs.crl (hash: FVzGwJZOJ0Z1xLkWiZO+dVJaNkkzJY176TFXSfN0zjc=)
2: CbDZWAH-omIyip_WwmqNFzGEN6Q.roa (hash: JAGjJAojKoIa2rnuQE4G2jO7W0AL58snegAhZ+6Gung=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a5:0a:10:f6:56:02:b7:33:67:ab:f6:88:6b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
Validity
Not Before: Mar 26 01:00:56 2026 GMT
Not After : Mar 27 01:00:56 2026 GMT
Subject: CN=db1845d2166f0ff038675de50b93667d7b700a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a4:1c:a7:fd:ae:a9:ca:f6:c4:81:0c:9b:71:
03:3d:68:cd:69:c1:9a:21:09:ee:2f:18:50:8a:3a:
bc:5c:1e:59:ee:f8:da:eb:f0:87:a2:98:28:2c:33:
fe:df:86:34:a1:af:7b:67:f6:20:81:d3:8f:ae:07:
53:7d:63:62:df:d9:49:8c:27:e0:8e:67:16:78:d9:
9a:98:e5:86:6f:d7:e9:2d:8f:8b:b5:31:36:5f:8d:
59:b1:4d:44:af:43:90:19:09:fd:9f:c1:3c:d5:85:
66:ed:97:10:cb:01:56:a3:8f:0b:8d:93:84:b6:56:
eb:20:9b:a8:8f:cb:c4:6d:14:9e:8b:32:a4:a8:de:
4d:ef:91:cc:13:bd:7d:40:f7:e8:a5:60:0c:41:77:
b7:34:0e:08:ab:89:b9:8b:8e:cc:12:c0:12:7a:64:
aa:26:59:fb:06:33:60:1a:8d:0c:41:c4:3c:18:cd:
36:48:9f:06:8d:dc:d5:c7:0b:64:65:aa:bb:ba:a5:
2f:4f:43:01:0e:2f:a1:26:1c:7a:9b:04:60:be:c0:
bc:fd:3c:eb:b2:82:c3:c1:fe:8e:9c:5f:66:d8:3e:
20:de:57:54:88:6d:37:14:21:46:8a:32:f0:84:b1:
95:00:32:b8:78:d7:ec:9a:3a:8e:17:3d:fa:e1:4e:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:18:45:D2:16:6F:0F:F0:38:67:5D:E5:0B:93:66:7D:7B:70:0A:3A
X509v3 Authority Key Identifier:
keyid:D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:63:ab:51:7c:9e:43:f7:f6:4f:e9:c3:97:be:44:30:31:2f:
2b:d5:0c:61:0c:c8:fd:f7:ee:f9:14:99:bc:72:36:e7:e2:77:
0b:78:20:72:1b:bb:27:1b:90:a5:5a:5e:bd:85:f9:f8:1a:32:
f5:ac:96:32:02:28:94:b4:00:90:6c:03:ad:3b:ae:5b:65:c9:
6a:1d:1c:ab:69:60:3e:ac:8f:b4:9c:c3:f8:1d:72:65:cc:ed:
d9:dc:d4:55:ec:88:b6:89:c8:32:37:53:a2:cf:68:ed:80:f5:
c4:c0:76:20:b7:68:8c:4e:75:8b:2c:bc:35:19:c2:aa:f9:e0:
76:35:fd:91:2e:11:04:81:0f:84:66:b1:d3:d2:a6:cd:7f:f5:
58:c2:46:fe:7a:03:95:b6:95:3f:7a:4f:df:3b:0c:3d:c5:b2:
99:78:bd:cb:c2:7a:c9:a7:53:fd:97:9f:0a:b4:01:45:cc:10:
76:c7:74:fc:ca:52:2b:e6:02:ec:cb:5f:0b:e2:32:85:4e:bc:
2d:8b:78:01:66:34:8c:3e:3e:41:31:ee:a2:5e:e3:0d:36:d7:
a4:13:b8:43:d4:e3:84:8d:7d:3f:61:38:a5:50:d1:b6:70:ff:
56:50:ae:72:fc:04:af:b6:00:7e:31:ca:c1:d3:85:4c:4e:9f:
c7:1d:05:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:43:55 2026 by rpki-client