Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
File: eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft (raw, json)
Hash identifier: EhlhRX95XeMiu9PMH/4RfuCbHQtn86Qm6fJUvfbz0ZQ=
Subject key identifier: 2F:8D:9F:1F:29:1E:41:7C:3E:0D:17:ED:31:C6:1F:C0:FF:2F:CB:C5
Authority key identifier: 79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
Certificate issuer: /CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Certificate serial: 019D27A928B0DA151D3AB53FFC55803A50C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 01:01:30 +0000
Manifest this update: Thu 26 Mar 2026 01:01:30 +0000
Manifest next update: Fri 27 Mar 2026 01:01:30 +0000
Files and hashes: 1: 5zwZDxIuULUKjp1rgcwRTBY-pVU.roa (hash: mUMWXUGRFNqTfVs8CnS61wDQkaxlvFmZ/n69Cmi6CP8=)
2: eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl (hash: +iY9PnOIeqqclqkewP+NJhg+Kg635DRp3DMDz95c8W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:28:b0:da:15:1d:3a:b5:3f:fc:55:80:3a:50:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Validity
Not Before: Mar 26 01:01:30 2026 GMT
Not After : Mar 27 01:01:30 2026 GMT
Subject: CN=2f8d9f1f291e417c3e0d17ed31c61fc0ff2fcbc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:87:3e:77:ea:7d:16:ff:88:09:51:fd:26:
11:c1:24:4f:61:4f:e5:c2:38:6b:ee:be:18:a2:f8:
0b:45:08:41:75:13:08:33:59:c8:f3:aa:9a:fd:f7:
f9:5d:df:e2:1e:19:38:e6:c9:fc:72:ed:07:b4:4b:
29:d7:e4:02:2e:25:d1:12:78:06:c0:be:05:c0:a6:
02:18:b9:22:17:92:90:20:51:3a:dc:d9:24:f0:df:
19:a2:b3:ce:a7:8e:70:d0:38:8b:ce:c1:46:f9:ff:
c4:70:de:a6:55:a5:08:fa:74:52:cf:b1:2f:22:00:
8a:15:ec:22:4d:c5:03:11:0c:5f:d5:6f:70:4b:3c:
3f:28:6d:90:45:80:f2:e0:39:b9:2c:98:3d:a1:a0:
a1:1e:07:d0:42:78:c9:60:e7:d0:b8:b6:26:53:19:
93:e4:64:23:59:80:47:ce:49:a3:d3:41:a8:32:38:
07:6b:7e:36:d2:62:59:ea:42:db:92:e3:ab:86:3b:
10:64:5e:8e:d5:44:3a:26:6d:e9:5b:14:1d:cb:df:
0b:50:ff:50:1f:66:58:88:39:25:f8:f2:23:dc:b5:
3d:55:03:f2:ce:2c:82:5d:59:3f:6f:39:72:a6:ce:
74:e6:c4:83:a9:58:da:5e:73:18:5e:0b:2d:f4:0c:
84:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8D:9F:1F:29:1E:41:7C:3E:0D:17:ED:31:C6:1F:C0:FF:2F:CB:C5
X509v3 Authority Key Identifier:
keyid:79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:20:87:51:05:9c:6d:ac:fb:34:ab:48:95:96:64:a0:14:80:
dc:a6:c3:17:9b:42:55:dd:49:70:ef:d9:1c:27:7b:a1:4b:e2:
14:96:c5:b3:c5:e4:91:09:7f:7e:a3:6a:15:05:97:50:4e:d5:
8c:c8:90:19:3c:65:33:bb:fa:71:32:29:3f:be:a5:a7:bc:65:
72:09:f2:c6:6c:d7:9c:4e:45:fd:7d:75:65:5e:a5:6f:2b:f6:
45:37:43:f5:20:3f:f8:a9:6f:5e:99:06:e3:72:6a:be:a7:75:
c6:ef:06:fa:8f:d5:83:f7:b5:88:59:cb:c7:ed:69:20:fc:d8:
73:6a:91:a2:e8:a4:2c:82:1d:96:54:0d:27:73:80:3b:81:69:
70:6d:ee:84:3c:e8:e0:cf:07:65:cb:2e:aa:92:8d:2d:89:c3:
dc:c8:ac:c3:c4:c9:ee:82:e0:67:d1:7c:40:cd:45:0f:08:cd:
a9:7a:a9:4b:32:f4:20:09:7c:57:8d:ba:6b:87:41:0c:86:ea:
d4:95:4b:0c:53:67:31:5e:79:b2:dc:96:37:39:65:5d:cc:3e:
7c:f3:e3:9b:c1:cb:a5:2b:47:8a:6d:ea:8f:dc:b8:23:98:3e:
67:33:59:98:4f:1d:92:98:71:b5:21:bc:f2:fb:03:49:d4:df:
d5:d3:3b:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqSiw2hUdOrU//FWAOlDEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTFjZjFhYThmYmM0ZTMzMzc4NjczZWJkMDUzNjQ4ODBl
MmE5MWYwHhcNMjYwMzI2MDEwMTMwWhcNMjYwMzI3MDEwMTMwWjAzMTEwLwYDVQQD
EygyZjhkOWYxZjI5MWU0MTdjM2UwZDE3ZWQzMWM2MWZjMGZmMmZjYmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbCHPnfqfRb/iAlR/SYRwSRPYU/l
wjhr7r4YovgLRQhBdRMIM1nI86qa/ff5Xd/iHhk45sn8cu0HtEsp1+QCLiXREngG
wL4FwKYCGLkiF5KQIFE63Nkk8N8ZorPOp45w0DiLzsFG+f/EcN6mVaUI+nRSz7Ev
IgCKFewiTcUDEQxf1W9wSzw/KG2QRYDy4Dm5LJg9oaChHgfQQnjJYOfQuLYmUxmT
5GQjWYBHzkmj00GoMjgHa3420mJZ6kLbkuOrhjsQZF6O1UQ6Jm3pWxQdy98LUP9Q
H2ZYiDkl+PIj3LU9VQPyziyCXVk/bzlyps505sSDqVjaXnMYXgst9AyEdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+Nnx8pHkF8Pg0X7THGH8D/L8vFMB8GA1UdIwQY
MBaAFHmhzxqo+8TjM3hnPr0FNkiA4qkfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kZjViYWQtYWM1OS00MTNlLTlhZDAt
NTk5NWFlOGFjYjlmLzEvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9kZjViYWQtYWM1OS00MTNlLTlhZDAtNTk5NWFlOGFjYjlm
LzEvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSCHUQWc
baz7NKtIlZZkoBSA3KbDF5tCVd1JcO/ZHCd7oUviFJbFs8XkkQl/fqNqFQWXUE7V
jMiQGTxlM7v6cTIpP76lp7xlcgnyxmzXnE5F/X11ZV6lbyv2RTdD9SA/+KlvXpkG
43Jqvqd1xu8G+o/Vg/e1iFnLx+1pIPzYc2qRouikLIIdllQNJ3OAO4FpcG3uhDzo
4M8HZcsuqpKNLYnD3Misw8TJ7oLgZ9F8QM1FDwjNqXqpSzL0IAl8V426a4dBDIbq
1JVLDFNnMV55styWNzllXcw+fPPjm8HLpStHim3qj9y4I5g+ZzNZmE8dkphxtSG8
8vsDSdTf1dM7Aw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:08:45 2026 by rpki-client