Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
File: eFtJDXZvSxwhHX2t1u-ncPbrniU.mft (raw, json)
Hash identifier: 3MV3NBoJGhu+hfSEGo28DMMPzjQ8vcoauCMbHG61pnc=
Subject key identifier: 29:28:43:7D:14:E7:68:DB:50:53:D3:E6:56:37:C9:CD:54:69:2C:B3
Authority key identifier: 78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
Certificate issuer: /CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Certificate serial: 019D254C538C29FAECE16C2A12B6451DCFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
Manifest number: 1894
Signing time: Wed 25 Mar 2026 14:00:52 +0000
Manifest this update: Wed 25 Mar 2026 14:00:52 +0000
Manifest next update: Thu 26 Mar 2026 14:00:52 +0000
Files and hashes: 1: AFjgj3wO0E3u1GwdCpnSug8abRE.roa (hash: /NnUBYyLAGJ7vpempT7h0f0+FEt6PcJJLRluwujlzWI=)
2: Sn7_2gib1Z4Y7qV-x5tw5ypzrKg.roa (hash: TvWW8wiVEH/RjPvexCDnTxcGMw5rvsW5sddaZst2n7c=)
3: eFtJDXZvSxwhHX2t1u-ncPbrniU.crl (hash: VAJiK4ER9QLpJFfaQAYgfYTVJfmgdVsXSf+vqki+XkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:53:8c:29:fa:ec:e1:6c:2a:12:b6:45:1d:cf:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785b490d766f4b1c211d7dadd6efa770f6eb9e25
Validity
Not Before: Mar 25 14:00:52 2026 GMT
Not After : Mar 26 14:00:52 2026 GMT
Subject: CN=2928437d14e768db5053d3e65637c9cd54692cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8f:bb:de:5f:2c:43:08:db:61:c2:fc:1a:56:
8a:70:15:3b:d4:96:41:fa:80:a4:46:da:7a:9f:08:
8b:9e:1a:12:b5:fa:af:50:1f:f9:2d:69:93:7f:ff:
c3:4b:72:d1:ee:1b:b0:f6:cd:bf:96:75:dd:fb:54:
56:ee:38:c7:eb:3e:ae:13:82:cd:ca:a9:05:60:23:
28:9a:f7:c0:49:2b:84:71:b9:67:73:11:9b:c6:30:
36:3e:f1:1b:61:f5:9c:e2:16:37:0d:fc:2b:fd:9a:
b7:ec:ac:1f:77:76:d2:0b:96:d1:6d:fe:98:eb:41:
1d:2a:b8:62:d5:16:38:a0:71:ef:c4:c9:b0:1d:6b:
1f:91:bd:f8:eb:65:8e:05:99:85:72:f2:87:13:d3:
1b:9b:96:ed:1a:34:8c:68:7d:ad:fc:3c:e8:ec:25:
b8:07:ef:e4:d4:8c:86:bb:84:6d:9a:6b:6c:2f:9c:
20:4e:22:66:cd:97:0e:4b:f8:86:c0:4a:b0:0f:46:
ce:f1:be:29:a4:33:ae:bc:67:91:85:d0:de:ca:5c:
cf:6e:34:94:5c:53:1b:99:fc:ad:2c:79:c8:c6:96:
b1:cc:81:e8:c1:86:67:22:66:62:41:f2:6d:88:dc:
cd:89:9c:3e:e5:ae:5a:d0:11:a6:b3:f8:83:73:c6:
b8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:28:43:7D:14:E7:68:DB:50:53:D3:E6:56:37:C9:CD:54:69:2C:B3
X509v3 Authority Key Identifier:
keyid:78:5B:49:0D:76:6F:4B:1C:21:1D:7D:AD:D6:EF:A7:70:F6:EB:9E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFtJDXZvSxwhHX2t1u-ncPbrniU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5f343d-9b42-44b4-9067-7cae040e49e8/1/eFtJDXZvSxwhHX2t1u-ncPbrniU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7f:6b:56:1c:e2:0e:be:5d:bf:fc:7f:6e:da:29:29:b0:16:
52:b8:22:8c:66:9e:3a:b4:a0:cf:fc:b4:6c:20:02:d9:f9:29:
df:7b:71:d5:fb:2b:4a:53:b5:20:3e:8f:96:9f:78:04:32:c2:
12:f9:db:37:39:8d:4d:4d:36:0e:84:d9:3d:dd:29:4d:3a:30:
d1:5c:65:43:98:e3:25:a0:e6:7f:f1:6b:56:b3:ae:f4:68:3e:
d7:94:8c:14:32:ba:49:bd:92:53:94:e5:fe:d8:b2:6d:ac:0c:
53:3f:08:3d:46:4f:80:28:1c:90:f8:46:02:49:0f:3d:dc:c6:
47:1d:af:86:0d:0f:e2:33:9f:af:20:1e:71:ac:be:99:56:5f:
a4:ea:e1:61:00:ed:de:bb:5c:dc:77:55:dc:bf:5b:36:38:17:
98:3b:b9:20:42:b3:52:b2:8b:bb:43:05:42:65:40:3b:9e:3d:
94:1f:a9:db:44:c9:50:cf:c5:8e:69:dc:d2:d2:28:fe:9d:80:
f0:83:e1:60:37:87:37:e3:28:2b:8d:e4:8e:ae:ab:c5:7a:b9:
c3:09:b6:49:1e:f4:5d:ef:74:36:4f:05:cb:4c:e3:08:00:0d:
80:de:bc:61:80:7a:ec:40:13:70:27:53:29:55:ef:1a:da:89:
f2:09:da:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:50 2026 by rpki-client