Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
File: eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft (raw, json)
Hash identifier: dzYJvO5WCIAm1p73n7gMRsQ1oSh2raGM7rghOdqJJNY=
Subject key identifier: 5C:38:9C:0E:0A:45:0C:0C:AB:36:06:9D:EB:44:88:D8:11:DD:7E:B9
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial: 019D273AB38710BC82854E89A84660E336EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
Manifest number: 188E
Signing time: Wed 25 Mar 2026 23:00:51 +0000
Manifest this update: Wed 25 Mar 2026 23:00:51 +0000
Manifest next update: Thu 26 Mar 2026 23:00:51 +0000
Files and hashes: 1: 0KPNPZABDj0Qzagg_XV0X1ugEl0.roa (hash: MiYwj7dTzwCXkj4L24OFbR3dzFvz57EK/cZJ5GPnv1I=)
2: 0qcfJpEX8g6MF2qj_nDo1QD1IkU.roa (hash: E2DR9Q+D5XZIwJi+r9euBWagkYE3FYAiz4v22D7W4YM=)
3: 3AW5BjScGKAvdrK1Tz5bl8xJnoc.roa (hash: AnfSRJoJBQHSsw5wKN0U0W2kl6uSdHO9bTTKS8nGB5c=)
4: S-bwMSos2-eKtENDykR1_8Qkp_I.roa (hash: xbxuJbxZkr/mH223J2YVdm3uiis0Dm1Iy28FKMjVeRU=)
5: XyYjURWnDtL6j5DL-ST6SPw7rFI.roa (hash: 26mKNoH4079E9ccWRUpU/d+cgxVIAOMCoINSih0nzDo=)
6: eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl (hash: 9z6MGm1hNPcovs8Te4bNNIVQwqbtXwi6Iu9ugjopZDs=)
7: lPnGL0KIOYwCmT8t1QVCdAPTLQc.roa (hash: bPZuuyywF6pfSEcL1PH/gV1v3n4qj+MA79LKLf/5bEE=)
8: tDGAKA6vCaBKcErUgT3MNC6aIu0.roa (hash: e/pJ6HHlGchTF3Diz9Sgd8uUt2kZ7DHh23Gu0gHK74Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:b3:87:10:bc:82:85:4e:89:a8:46:60:e3:36:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
Validity
Not Before: Mar 25 23:00:51 2026 GMT
Not After : Mar 26 23:00:51 2026 GMT
Subject: CN=5c389c0e0a450c0cab36069deb4488d811dd7eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:e4:3e:ec:1d:0a:d6:5e:a3:5a:a6:f4:2b:
c4:cc:33:fc:fd:6b:31:7d:bc:19:53:c6:ab:0c:4c:
45:1a:8a:5a:2a:ce:0d:a2:d7:62:91:4c:65:ba:63:
f0:68:4f:8b:9f:9f:db:ee:c1:4d:1a:55:04:1a:a9:
c8:a7:89:a5:a6:15:71:53:5a:63:af:c1:7c:10:e5:
78:25:eb:a0:99:dc:97:12:b8:16:07:dd:ae:c0:cc:
94:88:f1:ea:e0:82:ef:8a:42:a5:5b:55:93:3a:c3:
46:61:c1:1f:b6:a4:79:bc:6d:0c:bc:0b:09:b2:8f:
a9:2e:a1:e2:92:08:ae:76:ac:e6:90:bc:50:cb:06:
92:b2:e7:cf:bb:9a:02:f9:ee:65:2d:71:b5:94:a4:
09:4e:52:55:a5:de:be:16:8b:62:a5:28:aa:cf:2d:
e9:e8:fb:18:53:87:5b:dc:71:4d:d3:85:80:6f:a7:
29:a8:11:12:c3:76:f6:9f:02:a4:65:5c:e8:ac:19:
4e:e8:92:0f:1f:86:ec:0d:7d:19:14:01:2f:78:d7:
b7:10:3e:09:ba:fb:1d:fa:37:17:ed:f3:8b:87:2d:
3a:00:24:d4:fb:1a:8b:c4:11:33:1c:51:39:4e:a1:
a3:fd:10:5c:1a:0e:f4:94:de:99:be:b4:d6:4b:fd:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:38:9C:0E:0A:45:0C:0C:AB:36:06:9D:EB:44:88:D8:11:DD:7E:B9
X509v3 Authority Key Identifier:
keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1c:02:d0:79:c4:b3:c4:bd:23:d1:a4:99:1c:19:70:a2:40:
86:86:2d:0c:e2:0e:da:81:1c:23:91:78:17:08:55:b6:25:ac:
83:e1:bd:83:7e:2e:9b:35:e2:2f:01:93:ac:6f:d5:dd:36:f6:
f3:63:7e:42:b7:0f:ee:c3:d3:07:01:2a:74:db:74:b4:e5:9d:
d3:c3:9e:eb:98:3c:c1:48:ac:e8:3e:95:eb:08:bf:49:8e:69:
fe:96:92:3e:c6:29:d1:8d:3b:06:0e:73:af:81:4c:f2:58:fd:
e8:2c:ff:9d:00:1e:9c:5f:b3:0c:8e:97:06:14:57:16:6e:f7:
db:36:6c:69:c3:b1:3d:12:c9:b2:3e:73:9f:0c:7b:cf:7c:d9:
05:56:e5:5f:d6:bd:e7:c8:c4:db:d5:5d:ec:98:28:9e:0d:d7:
ac:6d:72:31:47:d6:56:70:42:26:d1:cd:57:fe:f0:22:72:2b:
d1:aa:c9:1c:41:bc:41:be:78:c2:c5:18:f9:43:7e:93:39:17:
5c:ef:91:e9:02:a6:47:8e:2a:19:16:1e:e2:d1:e4:78:4e:41:
ae:ad:e5:da:71:ee:9d:6d:e3:ab:07:20:f1:e7:22:ef:78:ea:
f0:4d:7f:39:73:07:a0:61:cc:d9:38:a1:ae:4a:99:47:fd:77:
fb:14:c0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:14 2026 by rpki-client