Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
File: eHl3C__BTZzftXTshmyq8TVy9Fw.mft (raw, json)
Hash identifier: ATiheLH+nGPpAoLBHa81oiQD0JkzHM4JOMqKJRpCePk=
Subject key identifier: 0C:70:3E:C0:7A:AF:2F:F3:2F:F5:A5:81:93:32:88:87:C2:80:CD:C3
Authority key identifier: 78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
Certificate issuer: /CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Certificate serial: 019D2816C0FD45365882DF7BE1DA0B8335CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
Manifest number: 1547
Signing time: Thu 26 Mar 2026 03:01:12 +0000
Manifest this update: Thu 26 Mar 2026 03:01:12 +0000
Manifest next update: Fri 27 Mar 2026 03:01:12 +0000
Files and hashes: 1: eHl3C__BTZzftXTshmyq8TVy9Fw.crl (hash: YyN2+g30Oa9sQQeRrIQ+fCYbJZv1q/TiMbRu41wku5c=)
2: haFw3q9tFoad6JUgiF-KPVOV4eM.roa (hash: e1I2SrRGxtbgkFSgcz9jLZjRjE847NKvzw0g1roFc00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:c0:fd:45:36:58:82:df:7b:e1:da:0b:83:35:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Validity
Not Before: Mar 26 03:01:12 2026 GMT
Not After : Mar 27 03:01:12 2026 GMT
Subject: CN=0c703ec07aaf2ff32ff5a58193328887c280cdc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:c3:61:84:8a:65:3d:41:f6:57:49:6d:02:
15:45:e5:1d:f5:0f:34:23:05:d4:76:b5:88:04:a2:
74:e3:12:ba:26:e3:d1:57:14:aa:f3:ca:28:9d:77:
d1:63:6b:0d:54:83:7b:d1:b0:05:1f:f2:53:71:e3:
4e:c4:a8:fb:5b:22:22:d3:1c:69:d4:2d:91:63:d3:
8c:2d:86:97:50:31:92:41:04:44:95:54:75:e6:3d:
db:7d:64:59:1f:a4:70:e6:16:11:60:2b:84:42:d6:
90:4a:5b:a6:db:79:c6:cb:49:3a:cc:51:5c:3a:a2:
a8:b6:08:11:87:0d:7f:1d:3b:5c:a5:bc:51:1f:f2:
ab:5d:13:8d:4f:f7:e5:12:39:26:aa:42:65:a9:f1:
62:88:fc:62:15:f7:f4:c1:48:3f:56:9b:a3:c8:04:
c1:2d:09:ce:a8:a1:ef:33:ca:21:a6:2e:c7:0a:03:
a7:e4:e6:1b:45:d5:7a:27:a7:63:42:6d:b4:f7:99:
5d:c7:24:fa:33:7f:3f:b2:b3:33:c3:63:83:50:3d:
47:de:a1:69:f4:47:3f:bd:7a:a9:d5:18:3d:1f:b9:
33:06:7d:09:6b:8d:3c:c7:fa:8e:0a:bc:9a:e2:80:
19:66:ba:e2:53:13:c1:a0:d9:dd:5d:7a:6f:ab:b3:
f5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:70:3E:C0:7A:AF:2F:F3:2F:F5:A5:81:93:32:88:87:C2:80:CD:C3
X509v3 Authority Key Identifier:
keyid:78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:5d:05:c5:a2:28:b9:b2:fd:f4:aa:e5:3e:ee:53:17:3f:ed:
4e:07:21:d3:44:0f:ab:71:a7:74:70:3d:1d:3a:22:18:51:23:
78:7f:48:5b:7f:72:df:f2:01:39:5d:a3:93:f6:e4:8f:52:b5:
b5:6a:9b:9a:c4:72:6f:00:58:16:7c:3d:2e:e4:a9:b6:ce:b8:
7b:62:09:ea:42:c1:f7:7a:12:34:9b:ac:1b:67:70:cd:09:15:
5b:0d:d5:24:58:01:18:03:73:a2:98:83:21:20:1c:41:45:03:
d2:72:e4:0a:57:55:c2:14:31:5e:12:db:00:bb:76:f7:5c:eb:
0b:c1:1b:20:cf:10:0e:7d:4e:23:2a:ab:f4:0f:ed:ed:a8:53:
f7:b3:cb:a0:f2:01:d6:9c:56:4c:a3:0d:13:e5:10:92:16:5f:
3f:cb:05:9f:4d:3b:52:9c:99:02:06:b0:0e:2e:12:e3:6d:a4:
80:28:7a:86:b6:67:0e:24:5d:fa:d6:fc:2e:26:17:13:5d:c0:
9c:b4:37:29:3d:9a:3a:6b:e3:d4:0b:70:66:7b:cc:76:a2:00:
95:1c:14:73:a1:9c:31:07:93:66:49:a7:fc:fa:16:54:8d:5f:
52:19:d8:e7:82:f0:f5:1d:f7:26:90:17:8d:7d:41:34:87:b3:
2c:03:a4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:29:57 2026 by rpki-client