Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
File: eIKlTbKvSuLgSGRxuNUPj6X36GE.mft (raw, json)
Hash identifier: fMQ23uscLcNodzpn4py37E0Fdz74ZMpmmtjH2RSpyW4=
Subject key identifier: C4:57:3F:88:58:E6:E6:62:14:0A:16:34:F8:84:08:79:BA:06:A0:21
Authority key identifier: 78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61
Certificate issuer: /CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861
Certificate serial: 019D28844D3FDCD538FDD09D9924F884FE15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
Manifest number: 01A1
Signing time: Thu 26 Mar 2026 05:00:52 +0000
Manifest this update: Thu 26 Mar 2026 05:00:52 +0000
Manifest next update: Fri 27 Mar 2026 05:00:52 +0000
Files and hashes: 1: Sm4r_ZYf1TK-pmJlyZULA1V5IWY.roa (hash: WcFy3x0XhhNqCP1SgxYrQOhQpXbYRQ1TrY/aquk9Bhg=)
2: eIKlTbKvSuLgSGRxuNUPj6X36GE.crl (hash: rIidaQfcybJL+TtigRFg1UeF04A+B3nZEJ/frXnvT7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:4d:3f:dc:d5:38:fd:d0:9d:99:24:f8:84:fe:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861
Validity
Not Before: Mar 26 05:00:52 2026 GMT
Not After : Mar 27 05:00:52 2026 GMT
Subject: CN=c4573f8858e6e662140a1634f8840879ba06a021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5a:3b:80:c8:ee:27:12:7a:cf:d5:4f:18:6a:
11:7b:9c:b0:09:04:98:ea:e4:23:d4:99:62:dd:66:
d3:2c:79:c9:f1:d9:f5:3d:c3:e4:b6:9c:38:2f:6f:
5b:81:b0:5e:41:46:e6:89:ee:b9:32:68:a4:94:7b:
b8:17:ae:fd:98:69:5a:d3:83:ee:e8:81:df:fe:be:
8c:1a:19:42:ee:0e:4b:5b:40:44:b0:31:5d:e0:6d:
ca:2b:45:4b:ea:dc:97:b9:ed:a6:b0:29:44:3d:35:
b5:85:5c:8e:40:3a:cf:4f:ee:4f:95:40:cb:8f:86:
76:de:29:53:3e:36:1a:e5:29:08:36:33:72:74:6e:
9f:86:0b:03:8e:03:74:85:6c:0d:5f:9a:d2:25:bc:
01:20:2c:fb:40:24:c2:96:6c:45:cb:a9:e0:76:bc:
63:70:cf:d9:1b:99:83:c8:32:94:fe:49:25:97:bd:
8c:0c:e9:2e:ae:a2:42:76:23:64:bc:c6:9b:4d:69:
9c:f9:72:57:01:86:7b:4f:36:e7:92:e8:6e:26:5f:
a6:2c:23:8d:b7:5c:a1:31:10:e3:8a:e7:9a:db:28:
10:d7:5b:91:4d:32:ba:6b:63:07:71:47:4b:86:6b:
4d:64:3e:83:cc:30:7a:de:42:54:87:87:c9:3c:08:
86:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:57:3F:88:58:E6:E6:62:14:0A:16:34:F8:84:08:79:BA:06:A0:21
X509v3 Authority Key Identifier:
keyid:78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7c:63:8f:8a:cc:9b:4a:4b:53:39:99:7f:8f:43:e0:0c:75:
7c:d3:2b:6a:ac:4b:3b:7e:9a:10:6f:cf:d3:23:14:7b:6c:e7:
20:17:81:5e:fa:6b:be:62:ae:10:9d:b7:a0:80:0f:a9:4e:c9:
25:34:10:47:9c:a6:26:46:02:9d:b1:55:21:b4:27:20:0a:55:
6c:59:b5:d4:fb:55:ee:ba:1c:3e:0b:cf:fe:0a:59:ff:03:f0:
43:84:5c:c5:df:e1:fb:09:75:6d:be:3f:51:a1:e5:53:40:16:
3c:8e:05:9c:d8:91:97:b8:87:37:2e:5c:93:63:93:69:f5:9d:
3b:43:15:c2:e5:5c:73:15:3c:3f:67:02:c1:50:67:a8:7b:19:
47:3f:9c:fa:4f:21:35:7b:c4:e1:a0:bd:c0:bb:0c:bd:29:b6:
35:8c:12:23:89:35:78:5d:93:54:13:1b:e9:33:c5:ec:1a:a9:
7d:82:17:e9:e8:f8:2d:98:2f:7c:2a:53:43:1c:e3:7d:ed:7b:
05:0f:b8:ab:5a:37:ea:eb:e7:df:f5:cc:d4:44:e9:92:93:e2:
ec:14:47:3a:a0:fa:e0:5d:87:a2:db:14:b3:3e:5f:f4:32:6f:
9c:6a:67:06:77:fc:f2:f4:70:8b:18:47:cc:b1:06:19:bb:fb:
ae:fb:97:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:18:08 2026 by rpki-client