Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
File: ebUTSxH5QJEfD_MVyUjapT9zLuA.mft (raw, json)
Hash identifier: /akm97PpWJtW5E1MJ8Uu5LP1YXw7JCNn5E6x8rqFVqI=
Subject key identifier: 03:4F:8A:A5:1B:23:8D:A1:11:81:7E:9C:F4:4C:F7:62:59:21:D5:6A
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Certificate issuer: /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial: 019D270403F8A229CD17DB96D7882564AF86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
Manifest number: 189E
Signing time: Wed 25 Mar 2026 22:01:07 +0000
Manifest this update: Wed 25 Mar 2026 22:01:07 +0000
Manifest next update: Thu 26 Mar 2026 22:01:07 +0000
Files and hashes: 1: NcDn26l6X1jaA0rTBfljUSQkQrA.roa (hash: DBP3tSVruTN+BPgGFJB1Pkmv6KFos1kOIWJAln1+ovw=)
2: ebUTSxH5QJEfD_MVyUjapT9zLuA.crl (hash: vCcwj+I8k1scszO+BWmpIwO//MIHfqkfyuzpxBSLgK8=)
3: et0olEFrB1y2vEuy1NWpl0biftA.roa (hash: o7zVoM3aaUFP3OzR2+EuOIiIDki9aymtbkBZVSrLD3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:03:f8:a2:29:cd:17:db:96:d7:88:25:64:af:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
Validity
Not Before: Mar 25 22:01:07 2026 GMT
Not After : Mar 26 22:01:07 2026 GMT
Subject: CN=034f8aa51b238da111817e9cf44cf7625921d56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:42:ed:b4:53:ab:81:92:72:af:df:d5:19:
67:e5:a8:c8:2c:cc:ed:77:01:5d:31:37:02:c9:bc:
70:81:65:fb:0b:3f:f4:77:9a:2d:a6:9e:5d:3a:2b:
d6:cf:65:cf:e6:a4:88:52:73:46:c3:63:60:6a:a0:
2c:76:93:58:8a:42:cc:62:c7:b0:4a:b9:57:02:97:
68:c5:41:bf:40:c3:9c:fe:2c:e2:db:50:63:e6:9f:
e4:53:24:20:53:24:e0:51:f0:82:82:79:c8:62:22:
80:69:63:d5:c3:11:d4:1d:8f:2e:7c:8b:a8:9d:65:
39:10:32:e4:cb:53:3c:5e:cf:dc:64:bc:18:38:6e:
d9:6d:13:21:33:65:c1:fa:29:d6:2f:0e:44:19:c0:
18:da:96:d8:75:81:78:2d:49:0d:67:a0:53:29:d2:
37:02:7d:59:2f:fe:5c:14:96:d7:5f:87:75:e8:23:
d0:63:ac:6c:e8:34:ad:cf:e8:e7:90:c8:a7:db:62:
a0:3c:7d:b4:c9:f3:d7:55:a9:38:d4:b7:45:ae:83:
e7:c7:65:b7:a1:8e:10:2a:38:eb:c5:b5:c1:6c:af:
33:af:c7:3b:e2:f1:f9:d4:e3:93:63:54:65:f1:32:
cc:7c:07:01:b4:95:08:d6:27:c0:d7:b0:37:b3:0d:
4c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4F:8A:A5:1B:23:8D:A1:11:81:7E:9C:F4:4C:F7:62:59:21:D5:6A
X509v3 Authority Key Identifier:
keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:97:fe:2d:34:2d:29:cf:3c:66:0b:38:4a:c2:0c:14:cc:ac:
3f:de:6f:7a:05:cb:93:c0:0f:57:31:a3:6f:43:9c:18:d6:eb:
34:36:6a:61:c2:7d:21:c9:be:c1:d5:f0:9e:41:aa:12:07:eb:
d1:b3:eb:e3:8f:82:c8:a9:23:bd:cb:25:76:72:1e:c9:8a:69:
d7:c7:4e:00:41:f1:fb:aa:e4:39:9c:be:a9:ef:da:87:4b:b9:
8e:47:eb:1a:a8:d2:6e:3d:08:02:d3:d9:d2:27:0e:14:f4:73:
be:8e:7e:d9:07:a0:9a:33:b4:a6:b5:db:be:d9:26:59:6a:0f:
4c:17:22:d6:4a:c4:13:39:b9:b0:5e:72:ab:e4:36:cb:ac:c9:
42:4b:8c:c5:2e:81:af:0d:11:83:9e:45:19:f7:2e:eb:07:88:
3a:23:e8:f8:45:02:6d:3e:ca:64:95:1d:a3:0e:0b:1a:d2:a8:
35:d4:18:ce:c8:7c:24:f9:b2:77:05:f6:af:c5:5e:a5:ac:09:
f8:46:09:11:4b:c2:33:17:d7:58:66:c8:41:8b:45:c8:67:ca:
eb:2f:2e:ef:ec:53:82:fc:0d:e2:0c:6e:f1:05:6e:af:24:d4:
f0:07:51:8c:c2:d5:0f:6f:a2:21:9d:ef:e8:33:2a:40:f9:dd:
56:40:47:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:41:21 2026 by rpki-client