Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.mft
File: eNd4_ldU3D4W2SJwQkviG5KB7HI.mft (raw, json)
Hash identifier: Hn8zYbuCHHzTMMItlE0pFha9TD/hayuEy0un6bhDMAY=
Subject key identifier: A8:17:07:F6:69:89:A4:19:35:E7:7F:AD:C0:CC:48:BF:AA:55:D5:E0
Authority key identifier: 78:D7:78:FE:57:54:DC:3E:16:D9:22:70:42:4B:E2:1B:92:81:EC:72
Certificate issuer: /CN=78d778fe5754dc3e16d92270424be21b9281ec72
Certificate serial: 019D28BBC2EBE3D2DC60EEB21FB724A96FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNd4_ldU3D4W2SJwQkviG5KB7HI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 06:01:26 +0000
Manifest this update: Thu 26 Mar 2026 06:01:26 +0000
Manifest next update: Fri 27 Mar 2026 06:01:26 +0000
Files and hashes: 1: eNd4_ldU3D4W2SJwQkviG5KB7HI.crl (hash: ofkihnRi3IuBlQgOe9QyKwp2ijKsm3CrcuJU7wYQFd8=)
2: tb0BdaQME7yuZvsENp8uSgAMaHM.roa (hash: qm3o/AQ7xgP+nt4WHRstJujvg/2teJkiPVnplUGx4Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNd4_ldU3D4W2SJwQkviG5KB7HI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:c2:eb:e3:d2:dc:60:ee:b2:1f:b7:24:a9:6f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d778fe5754dc3e16d92270424be21b9281ec72
Validity
Not Before: Mar 26 06:01:26 2026 GMT
Not After : Mar 27 06:01:26 2026 GMT
Subject: CN=a81707f66989a41935e77fadc0cc48bfaa55d5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a4:08:58:c4:82:91:77:f7:62:c6:e0:34:b7:
7f:da:ed:ce:35:20:95:1c:c8:06:de:f3:5d:93:3d:
81:03:a4:86:18:a4:e0:7d:b0:c1:30:a8:01:12:3c:
ef:24:b4:c7:1f:e6:06:0d:7a:24:d1:16:4e:42:55:
fc:ad:17:a7:a7:ad:1a:be:50:e7:27:dc:f2:7b:38:
e5:46:31:9a:c1:23:28:7c:c2:ac:b8:a2:a6:7f:44:
5e:ba:17:e9:51:4d:7e:86:f7:1c:c2:7d:4e:89:62:
b4:67:8b:49:6c:35:12:96:e9:6b:35:80:77:4e:7e:
48:4a:a4:ae:da:5b:5d:91:41:89:9b:72:1d:77:52:
83:69:4d:57:df:74:0c:dd:37:d1:21:02:d0:79:0d:
cc:10:07:7f:2c:2e:5f:f5:ce:4b:cd:56:8d:87:63:
87:fe:6c:ed:53:39:98:f7:26:42:5d:f2:42:0e:3f:
67:95:0c:8e:3c:69:89:aa:0a:5e:bc:69:05:76:1e:
c0:cb:cc:42:83:eb:84:fb:0d:a6:ae:2a:bb:a9:e2:
0e:1a:04:b2:a9:a0:8f:63:26:24:17:c7:8c:d8:0c:
ff:a2:12:ef:bd:4f:51:5f:b6:43:75:cc:66:97:79:
07:aa:cc:fb:bd:d6:70:1c:db:ea:ae:25:d7:7c:d2:
54:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:17:07:F6:69:89:A4:19:35:E7:7F:AD:C0:CC:48:BF:AA:55:D5:E0
X509v3 Authority Key Identifier:
keyid:78:D7:78:FE:57:54:DC:3E:16:D9:22:70:42:4B:E2:1B:92:81:EC:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNd4_ldU3D4W2SJwQkviG5KB7HI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e8:16:b4:bc:47:d0:e3:8a:12:9a:2d:0d:fc:5f:39:8d:ab:
87:69:6f:80:ec:d1:7b:d1:4c:aa:72:b3:59:e4:d9:60:d7:4b:
44:15:b6:e2:12:60:37:19:fc:32:b1:17:3f:ec:73:ff:1b:98:
3f:16:6f:51:4b:21:aa:96:86:53:60:ec:5a:87:19:da:6b:b0:
2c:af:77:3e:53:a0:b1:b1:c5:20:61:ca:8a:a4:db:a7:d5:7d:
5f:11:46:b4:fd:c2:7e:9c:44:74:81:c2:a8:85:c9:f5:de:9b:
67:e1:3a:e4:6f:87:7d:87:91:05:7d:55:a9:da:c3:dc:e6:ff:
16:b2:7a:7d:b0:e0:3c:90:a5:b7:ae:f8:61:3d:a9:dd:51:70:
3f:c0:82:99:ee:45:b5:0a:e5:1f:49:38:74:cc:fc:80:0c:51:
ca:b6:d6:d8:b3:7c:9b:57:b7:b4:95:7e:42:17:99:6a:13:5e:
2a:16:f9:05:1b:df:14:63:65:56:5b:2d:4b:77:95:a8:2c:81:
4a:74:d4:e2:3c:f3:c3:ea:af:da:60:93:76:ea:db:ef:a5:45:
50:ff:8f:66:0b:dc:92:ed:f0:e1:1d:5a:43:f0:fb:dd:a5:22:
a3:aa:0c:78:2c:c3:2b:a5:36:f2:ee:d7:02:cf:d2:23:5d:91:
53:9f:6b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:55:10 2026 by rpki-client