Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
File: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json)
Hash identifier: I76XjbcQcha/4rOyWkXYcHScWEuZOTK+kPLpfil9RWg=
Subject key identifier: 1A:AC:D1:1D:86:E5:6B:AC:9C:46:C4:79:78:E1:A9:1E:D2:00:1C:66
Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Certificate serial: 019D25BA04FBD765FBDCAB7DE2E4107F97DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
Manifest number: 0FBE
Signing time: Wed 25 Mar 2026 16:00:40 +0000
Manifest this update: Wed 25 Mar 2026 16:00:40 +0000
Manifest next update: Thu 26 Mar 2026 16:00:40 +0000
Files and hashes: 1: U0fRXYHgtW5Lj2ILWS5wUzrlnN4.roa (hash: rlb8IZvmVYRTy9dDl5LBuhuMRpChfmFYGPXw/aHFukE=)
2: Zu2YCOMNdF6aNceeKzP2XiSPhlU.roa (hash: cnBeGVbEPlV3dfTfeIQYswJCwcZDweKXTvgV5NLGKQU=)
3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: jMO63hR/0xDuZttpQusf+2yXFd5/RnJPbXrOPz+eE+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:04:fb:d7:65:fb:dc:ab:7d:e2:e4:10:7f:97:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Validity
Not Before: Mar 25 16:00:40 2026 GMT
Not After : Mar 26 16:00:40 2026 GMT
Subject: CN=1aacd11d86e56bac9c46c47978e1a91ed2001c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:3a:38:36:14:69:cd:fc:e8:df:d6:79:62:
d4:3a:c2:a2:cf:ec:14:84:8e:1d:9a:2a:31:f7:2b:
7d:eb:bf:4f:1c:99:ea:32:f0:55:50:be:a9:c0:b6:
21:7f:e8:4c:bf:0e:c7:23:6b:89:5d:09:50:95:5a:
71:af:13:05:65:5c:a5:50:23:bb:a7:87:7c:e7:be:
bf:44:fe:e7:1c:73:ba:9e:43:14:cb:e1:65:ff:56:
e9:1a:91:f9:e3:44:15:cd:1a:93:7c:9c:53:94:65:
9e:92:94:bf:11:b5:56:0e:4f:0a:12:25:61:60:38:
ac:b3:07:54:eb:fc:44:1c:75:ab:cb:0b:80:bd:b2:
33:dd:d9:4b:1b:41:e2:b2:5a:6d:51:75:eb:66:9e:
cb:9b:aa:67:7b:44:70:7c:26:2d:65:87:47:38:de:
89:66:50:41:0e:6c:f4:40:d1:85:bd:10:7c:63:76:
1d:60:75:e8:ca:8c:1c:fe:86:fb:bc:82:6c:fe:b5:
4b:3e:51:a4:2d:de:28:ed:5c:27:51:07:18:f5:e9:
93:45:2d:00:17:f1:79:f0:15:12:a2:2e:91:22:e9:
d9:9c:a7:96:48:3c:15:d0:e1:e5:12:b3:54:44:b2:
0b:ba:6b:fe:e4:c1:b4:be:f8:66:f5:33:c3:f8:31:
ab:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AC:D1:1D:86:E5:6B:AC:9C:46:C4:79:78:E1:A9:1E:D2:00:1C:66
X509v3 Authority Key Identifier:
keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a7:70:27:4b:8b:4d:3c:fe:43:f9:38:1b:2a:9a:b8:a0:e2:
4a:9d:f2:60:cf:ad:1d:fe:50:e1:cf:f8:52:43:bc:21:31:c5:
7e:28:b9:ad:b1:da:e4:fd:c0:5f:a6:92:25:fc:f3:bc:62:ff:
4b:33:a7:7d:86:b2:39:5d:41:cc:39:1e:9d:6c:1c:7d:61:52:
55:ca:c8:20:30:80:aa:e3:ba:1b:98:b0:a7:e9:76:34:1d:5b:
4b:08:ad:53:ea:97:39:d4:70:0a:04:b1:f4:bc:75:69:be:93:
1d:2c:9d:66:60:12:ed:47:82:66:ba:12:99:c1:31:9e:6e:5d:
85:9d:e6:11:4f:1a:d0:32:03:54:b6:be:ec:7e:46:4b:2c:73:
6c:67:f6:40:f9:0f:fa:7e:8b:70:e3:8c:3c:c6:48:dd:1e:78:
19:b9:cf:d3:b3:b7:85:45:b6:74:ad:64:b4:62:27:d4:5b:c8:
21:cb:d9:c7:aa:d3:57:ef:37:e4:21:c8:94:ec:df:bf:73:b1:
e7:18:16:d3:11:df:d1:11:5b:e9:12:eb:2d:d1:73:50:6e:52:
dd:78:7c:7c:b9:92:14:15:7a:06:56:2a:08:ff:d0:89:c4:47:
1b:73:6c:8d:da:7d:ec:ee:2a:86:51:2b:69:69:5a:49:ec:11:
07:3d:17:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:49 2026 by rpki-client