Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
File: eH0Q8i5f-ksg99W3goxVuVCal1k.mft (raw, json)
Hash identifier: b0tf/qvT54aAI0bKr+xEw9jtS1Et+iN1jjbdh+9RKZI=
Subject key identifier: FB:9F:5E:44:4B:5A:08:E1:6D:40:87:85:86:8C:20:56:5B:51:51:3E
Authority key identifier: 78:7D:10:F2:2E:5F:FA:4B:20:F7:D5:B7:82:8C:55:B9:50:9A:97:59
Certificate issuer: /CN=787d10f22e5ffa4b20f7d5b7828c55b9509a9759
Certificate serial: 019D25BA1CD4EED25EB781DA7CA7535EFD8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 16:00:47 +0000
Manifest this update: Wed 25 Mar 2026 16:00:47 +0000
Manifest next update: Thu 26 Mar 2026 16:00:47 +0000
Files and hashes: 1: eH0Q8i5f-ksg99W3goxVuVCal1k.crl (hash: WYGJPaZy/94xA0pkpGqc2WkiczrkmYkVTrXOVRboQ2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:1c:d4:ee:d2:5e:b7:81:da:7c:a7:53:5e:fd:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787d10f22e5ffa4b20f7d5b7828c55b9509a9759
Validity
Not Before: Mar 25 16:00:47 2026 GMT
Not After : Mar 26 16:00:47 2026 GMT
Subject: CN=fb9f5e444b5a08e16d408785868c20565b51513e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:fd:8a:1c:05:37:86:bb:0e:1c:e9:e7:93:
b8:e1:7f:71:51:f3:ae:5f:fc:d3:2c:d8:ff:5f:dc:
61:ad:f5:a4:72:5a:21:e2:02:5b:6a:1b:70:2c:e2:
d4:3a:dd:dd:5c:68:b5:4d:01:9e:ab:53:ea:3b:8f:
04:57:83:cb:cd:28:11:14:57:31:90:49:d1:73:c8:
87:91:d8:ef:88:2b:b9:38:f0:d0:5f:36:9f:6c:82:
58:f7:70:45:ec:9e:7a:17:5c:ca:04:d6:ea:ca:57:
d4:6d:0d:d3:2f:3d:e5:8c:3f:58:61:72:f6:12:dd:
38:02:7d:2d:45:0d:0c:f7:a1:00:8d:0d:58:fb:a5:
8f:eb:1c:e8:be:6e:e6:11:34:b5:e8:ef:50:83:06:
c3:fc:c9:3c:41:33:9a:08:61:ca:0b:08:bc:53:4c:
94:65:b0:f1:4c:6b:8e:e2:e5:26:85:5c:ac:2d:6f:
1a:70:8a:35:78:95:f4:eb:53:55:97:28:17:ee:dd:
01:14:c9:87:b3:7a:cc:51:51:f8:ae:1c:49:33:e6:
46:7f:6d:f8:f2:94:ae:1a:f5:25:1f:5c:47:14:c7:
59:7a:4b:e2:c8:37:60:f8:da:0a:a3:9c:0b:8d:2e:
95:59:18:4c:a8:6f:cf:d9:cd:6a:68:fa:86:ee:98:
67:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9F:5E:44:4B:5A:08:E1:6D:40:87:85:86:8C:20:56:5B:51:51:3E
X509v3 Authority Key Identifier:
keyid:78:7D:10:F2:2E:5F:FA:4B:20:F7:D5:B7:82:8C:55:B9:50:9A:97:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:fb:8e:f5:79:10:0c:32:93:1f:2c:56:3d:4b:c9:09:34:27:
3e:a6:a5:25:aa:bf:89:4d:db:fd:de:bd:02:fa:61:6f:d5:66:
b2:42:02:9f:79:4e:67:84:09:2d:d0:6a:82:28:6c:2e:e5:1e:
2b:0c:08:27:44:9e:ca:75:63:ed:21:79:ec:85:69:79:88:38:
4c:17:bb:60:cc:12:c7:f3:47:07:4d:71:37:3b:94:cf:9c:97:
b5:ba:4c:04:44:0c:e1:b0:fe:b2:55:1d:37:5a:ec:d4:8d:8e:
74:51:26:13:13:85:d0:7d:29:44:9c:8b:d4:90:1e:2e:04:e5:
17:38:9a:bb:ad:9b:ff:c1:17:be:92:48:bc:fe:71:bf:8b:13:
fb:2e:51:7f:f7:ab:cf:c9:32:7d:4d:80:1c:2a:f7:3f:3e:8e:
d2:4f:22:f9:16:94:84:0c:a8:8f:86:56:19:d7:95:92:21:ae:
aa:28:1a:cb:64:00:e9:b4:5f:33:77:72:fc:a6:8d:98:88:68:
1b:65:68:b7:07:49:12:7b:11:24:72:31:4b:01:fb:fc:65:bf:
9b:29:6c:7a:c2:c4:e5:e8:84:d8:9b:5a:5a:a3:5c:96:fb:84:
85:db:2d:d6:2a:31:cf:5f:71:e9:cf:17:9b:b1:10:08:19:0c:
b4:fa:90:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:00 2026 by rpki-client