Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
File: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft (raw, json)
Hash identifier: nfZTR2TLvYkQ27YucSqHlB6UZZxqeug2Kx96b1DVl9o=
Subject key identifier: 9A:44:69:21:EF:18:C2:8C:85:3E:01:26:68:45:CD:1A:F4:43:21:B8
Authority key identifier: 79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
Certificate issuer: /CN=79730b9ea010d832f940efb589c51889132f4c94
Certificate serial: 019D277261392AAC7E311C20C4A845EF90A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 00:01:40 +0000
Manifest this update: Thu 26 Mar 2026 00:01:40 +0000
Manifest next update: Fri 27 Mar 2026 00:01:40 +0000
Files and hashes: 1: NwdvwdgUQDYbtp-Ubv8WmZm6NA0.roa (hash: 08IB4CQ6qXGvHbqlm2iST8aQYIXZEjOYZuD8asm6wTA=)
2: eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl (hash: FA42psIiQd4Pdj6poYhYm0uVOqYfsRYfWhz41StFpVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:61:39:2a:ac:7e:31:1c:20:c4:a8:45:ef:90:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79730b9ea010d832f940efb589c51889132f4c94
Validity
Not Before: Mar 26 00:01:40 2026 GMT
Not After : Mar 27 00:01:40 2026 GMT
Subject: CN=9a446921ef18c28c853e01266845cd1af44321b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2d:99:30:98:18:6c:55:a4:2b:58:e0:29:6e:
a8:6c:e2:e7:6e:e4:47:bb:52:88:a0:5e:f8:a8:d1:
df:c9:05:d0:b5:bc:d1:af:e1:af:1a:bd:80:74:4f:
a9:3a:1c:b0:30:20:0b:33:d0:c2:3b:fc:63:80:91:
20:9a:a6:d0:27:42:61:40:ed:3c:f7:65:94:23:de:
54:a7:e3:16:6f:a3:3b:2b:f9:ce:1d:5f:f6:c1:f1:
4e:5a:d9:49:6b:de:1c:40:d6:12:91:0c:91:b3:ae:
bd:d3:54:d0:ce:67:8c:ef:46:81:45:3b:1b:26:d5:
b5:14:81:94:5e:5f:d7:4f:ec:da:9f:6d:fe:7b:cf:
08:9a:a8:83:5e:db:49:9d:c1:da:5a:dc:f2:0f:0b:
7c:ad:c4:c7:1c:9a:e5:c3:fb:f6:5a:46:04:76:72:
85:9c:63:80:f9:e4:45:cc:27:29:16:28:6e:d0:4e:
82:ef:d5:4b:a6:77:e0:d3:c1:ae:11:0d:b5:c7:1a:
bb:52:2b:ed:ff:11:05:3c:5a:12:b9:54:1e:2b:d5:
3c:fd:7f:68:a5:98:93:9f:e7:8f:dd:71:37:4b:e1:
6e:3f:09:2b:fe:43:5f:fc:a4:5a:34:02:1a:1d:0b:
e5:c2:9c:02:aa:e0:a4:74:56:72:f3:dc:d2:c0:6c:
c0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:44:69:21:EF:18:C2:8C:85:3E:01:26:68:45:CD:1A:F4:43:21:B8
X509v3 Authority Key Identifier:
keyid:79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:67:ff:8d:b4:f4:fd:35:bc:ca:06:4a:67:99:d0:26:eb:4c:
d5:68:5d:f9:f7:5f:c0:0b:91:04:79:70:30:3b:ab:c0:9a:cf:
81:73:36:b6:b1:80:f6:ec:d2:2a:a5:e6:e3:58:e9:bd:d2:35:
e1:ee:e9:10:02:3d:c5:30:af:e5:a0:e5:1e:15:c6:e0:47:a1:
f6:17:b5:b2:3c:08:c5:82:cb:63:a5:1a:17:5b:3a:66:77:de:
54:6d:97:fc:c4:e2:55:2c:c6:67:e1:49:a7:19:8f:55:9b:a2:
ad:48:7f:88:82:44:7f:4c:dc:69:29:09:a2:a7:74:8a:ff:33:
de:5b:c9:66:a9:97:22:55:e2:19:98:50:2d:1c:9a:49:a0:56:
d4:45:9d:19:50:a2:93:e3:ab:23:c4:96:40:2b:7c:82:b5:f5:
c3:b1:a6:79:41:e5:db:89:d3:1a:b0:7b:91:80:ca:f7:26:87:
0d:a9:9b:4d:ae:42:b4:e7:b2:d8:51:c5:18:55:b6:92:f3:e3:
f8:7a:0d:6b:18:37:b0:3d:72:f6:73:3d:1d:70:1f:38:cb:20:
d6:02:1c:de:bc:1a:a1:c8:a0:e5:07:5f:bd:f3:44:b6:c8:4c:
c1:84:f5:a8:ff:4a:28:fb:b7:ce:39:4f:f8:a8:df:c9:c7:e1:
74:f3:e6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:04:51 2026 by rpki-client