Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
File: eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft (raw, json)
Hash identifier: QDARUOFXjD0aRMCA+TDZHJ3GyjVQgED8TchpFeJrlVw=
Subject key identifier: 15:AA:78:41:16:2F:E2:4D:77:59:84:B2:0F:B4:82:41:95:4E:7A:4A
Authority key identifier: 78:70:56:17:98:E5:C8:A2:67:07:62:0D:F0:82:EF:37:78:D7:16:3D
Certificate issuer: /CN=7870561798e5c8a26707620df082ef3778d7163d
Certificate serial: 019D29291B97B7DFAB721DDCB2266C780F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
Manifest number: 1781
Signing time: Thu 26 Mar 2026 08:00:53 +0000
Manifest this update: Thu 26 Mar 2026 08:00:53 +0000
Manifest next update: Fri 27 Mar 2026 08:00:53 +0000
Files and hashes: 1: M3zpnwwGXaGL3R2w7EMCJ4wbclk.roa (hash: j1ibhMzbM/bGDbvXooShA+Ex1FCjg8NtC5fCI4cFBAs=)
2: eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl (hash: TkZwREyKMAFrKYGkgJuCSZkh5s6W8kOdV9D/6JlzJFA=)
3: nkcqRqm6JxltUVOst-8A4bjg-Yw.roa (hash: XaEc/XtzoivAIb5D2Y8YGEKADIQDianztAx7Av77swM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:1b:97:b7:df:ab:72:1d:dc:b2:26:6c:78:0f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7870561798e5c8a26707620df082ef3778d7163d
Validity
Not Before: Mar 26 08:00:53 2026 GMT
Not After : Mar 27 08:00:53 2026 GMT
Subject: CN=15aa7841162fe24d775984b20fb48241954e7a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:46:7c:da:11:3a:21:fa:b1:01:b9:83:05:20:
eb:e9:56:3b:23:a8:b7:59:c4:6e:ac:c6:ff:87:aa:
72:4a:13:a8:63:4e:5f:7f:4c:e9:55:74:fc:f2:8d:
bb:de:4d:0c:65:3a:6c:12:78:12:72:0e:3e:9a:f1:
ec:a7:8d:2e:24:b7:60:16:73:5d:c2:ff:c1:3b:7f:
0f:a4:b3:ad:ac:48:f7:2f:75:28:b1:e5:25:82:1d:
50:0e:eb:46:0f:fa:86:80:09:ee:b0:82:bf:37:f7:
77:6c:8b:1d:9f:38:bf:af:6f:76:91:95:04:15:b9:
51:d4:26:6b:3b:2c:9e:05:b1:09:8e:6c:cf:91:15:
02:ff:6d:48:f9:a4:45:ec:32:29:dd:02:7a:4a:1b:
bd:38:e4:b2:16:cb:87:9f:f7:1b:69:1a:c4:e0:48:
8a:4c:74:36:c8:66:c9:a6:ac:ad:e6:3a:0d:10:d0:
6b:ec:4a:79:12:f4:c7:5e:7b:50:45:5c:6b:0f:74:
c8:c3:0e:bb:1f:38:b1:0c:79:45:66:8c:ec:cd:11:
ed:34:94:2b:61:89:67:a7:53:62:19:f5:c3:74:7d:
ec:53:1c:98:f6:ef:be:1b:b9:71:73:d5:81:be:80:
71:29:19:19:99:d4:e7:41:30:f2:22:e6:74:df:88:
f6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AA:78:41:16:2F:E2:4D:77:59:84:B2:0F:B4:82:41:95:4E:7A:4A
X509v3 Authority Key Identifier:
keyid:78:70:56:17:98:E5:C8:A2:67:07:62:0D:F0:82:EF:37:78:D7:16:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e0:46:dd:b3:6b:59:4d:44:ee:70:55:c5:79:67:09:9b:a7:
3d:53:ad:87:a2:93:22:75:af:e0:03:e5:16:d1:d2:b7:2b:1d:
ad:ee:26:db:00:a3:23:36:4d:3e:65:1a:59:af:aa:33:61:0a:
13:7b:67:d4:af:ee:27:05:e5:50:dd:7f:d9:53:c4:82:05:0c:
29:b7:c3:16:fa:dc:63:84:ee:6b:7a:d2:58:cf:04:a5:3d:d5:
ee:d9:0b:ab:84:a6:c7:96:eb:5a:86:7f:e5:69:56:81:b8:6e:
46:a3:c8:89:59:9c:30:f2:95:4d:a2:c1:61:76:34:6a:71:11:
48:83:eb:31:d1:a5:83:af:9e:61:b3:d2:6e:ac:50:b5:8c:be:
b5:a9:5a:d2:68:22:ec:15:81:a6:a2:3e:eb:42:cd:df:34:3b:
74:df:50:1d:d4:6a:f8:54:d1:fa:5f:3e:85:d4:f8:1a:26:06:
31:03:77:6a:f4:9b:db:a6:4a:a3:a8:61:0f:a5:ca:9d:3a:35:
af:7f:0e:90:1c:1f:ac:a6:9f:37:70:23:54:c9:aa:a1:99:11:
77:75:14:7a:f5:a2:bd:c7:9e:0c:4d:f8:a2:ca:2f:86:58:10:
cf:cf:38:33:a0:2b:db:b7:6f:b0:ca:86:6a:7a:3c:87:b3:3b:
05:97:06:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:52 2026 by rpki-client