Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
File: EHbBYnj8gh4e75Mv3qmz3WPKayE.mft (raw, json)
Hash identifier: HvyYjeSvZfSX+7aHZA3OaPqZxjZskOAAHyVbACJ8cf4=
Subject key identifier: 0B:D7:95:F7:3F:3E:66:EF:E6:22:7C:7A:F7:C0:DB:3F:8C:40:F0:1A
Authority key identifier: 10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
Certificate issuer: /CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Certificate serial: 019D28844EFD005D89BA4B96A912AE56389A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
Manifest number: 08C0
Signing time: Thu 26 Mar 2026 05:00:52 +0000
Manifest this update: Thu 26 Mar 2026 05:00:52 +0000
Manifest next update: Fri 27 Mar 2026 05:00:52 +0000
Files and hashes: 1: EHbBYnj8gh4e75Mv3qmz3WPKayE.crl (hash: k9Q9tfgVJQ1mPHCkf2Pt0kK/ACDR1TfV9vgsQAJMLww=)
2: q7k3Jgi45VhxVB2FaU-fxYdycok.roa (hash: aUl7kjDi6eCHksQ88LJAOR22rf6+FmaVUEOAmzpORAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:4e:fd:00:5d:89:ba:4b:96:a9:12:ae:56:38:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Validity
Not Before: Mar 26 05:00:52 2026 GMT
Not After : Mar 27 05:00:52 2026 GMT
Subject: CN=0bd795f73f3e66efe6227c7af7c0db3f8c40f01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:b9:70:2b:46:c9:b2:6d:b9:b9:36:0c:17:
97:ae:1b:e0:52:7b:5b:dd:f4:73:ed:18:e5:57:b7:
d6:8c:f0:30:19:36:42:5a:1d:88:da:bf:59:af:f4:
f3:3d:e5:4c:b6:8a:8f:64:7f:ae:84:68:0f:1b:91:
cf:a8:3e:d2:22:0b:9d:e8:01:fe:95:1d:9f:6c:ad:
9b:ca:82:77:8f:d4:70:95:3a:1d:b1:a4:98:c7:37:
f7:87:da:15:d3:64:77:23:bf:7b:c4:2c:d5:53:22:
35:03:79:c3:a7:fb:e9:76:56:47:89:35:45:b2:1e:
ce:e1:a1:71:c1:47:03:d6:5a:c9:94:64:c6:4f:4b:
16:ca:b5:7e:80:05:76:ec:42:57:45:a6:e1:3e:de:
33:62:7a:72:d3:8b:d6:7f:f7:b2:73:63:ca:e9:45:
88:9f:6d:8c:30:63:90:1a:02:f5:c5:6f:b7:1b:2d:
86:0d:d4:7f:30:9b:f4:10:92:3d:1b:6c:52:24:c5:
f0:cc:55:76:f8:f6:3a:5f:77:07:76:6c:4c:a0:f4:
a5:d9:63:c2:29:41:a6:53:fa:1f:67:54:91:b6:4b:
76:a8:6d:1b:1a:ef:9d:1c:19:26:13:64:73:44:0d:
b3:00:1b:a2:09:1c:27:00:e2:aa:22:71:8a:18:99:
bf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D7:95:F7:3F:3E:66:EF:E6:22:7C:7A:F7:C0:DB:3F:8C:40:F0:1A
X509v3 Authority Key Identifier:
keyid:10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7f:d2:e2:16:05:f1:b2:50:21:69:0e:0a:18:e1:cb:7d:a9:
90:fc:08:d6:f4:f2:ff:d5:a8:35:42:dd:14:be:c9:45:1c:2d:
2f:24:d2:68:f3:bf:81:2c:a8:b6:5e:cf:2f:13:0a:38:92:29:
b3:7a:6b:55:3f:21:16:3f:8d:b4:80:2e:8f:43:be:f0:45:ab:
c2:29:b7:bd:72:fb:42:de:42:d0:64:0d:0c:93:23:f6:b8:16:
dc:d8:69:04:8f:c4:32:0c:78:7d:1b:09:04:f4:3d:d9:a0:9d:
a4:c7:1a:9b:fb:c2:09:e5:4f:15:ee:4e:96:1e:75:43:e5:bf:
cf:d5:0c:bb:69:6d:86:0a:1a:2b:86:66:47:e2:fc:22:67:f3:
bc:56:dd:da:08:f8:b5:7d:23:f7:4a:4a:59:48:0e:e2:23:76:
2d:85:5d:e4:1b:37:0d:e9:2c:ec:35:d3:a3:94:88:06:fc:78:
1b:b3:a4:3f:75:23:87:1f:91:65:5f:23:08:2f:45:2c:2e:69:
ff:f1:f9:b9:52:15:c4:d4:18:65:c5:97:95:ae:72:63:97:af:
3f:7b:26:56:10:26:c3:47:dd:f7:60:d6:4a:0a:56:89:ae:e7:
85:74:48:d8:79:4e:c7:db:34:5e:5e:7b:70:a4:11:7d:55:ef:
ef:3c:69:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:08 2026 by rpki-client