Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
File: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft (raw, json)
Hash identifier: Z6XPxm4x8EhCT5W3Rh/607zTg8T32solxCIIvpRA7Gc=
Subject key identifier: 23:BE:67:99:A5:45:D7:9B:75:AF:C4:AC:C9:FC:20:78:B3:BE:4D:C9
Authority key identifier: F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
Certificate issuer: /CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Certificate serial: 019D2929A6E8F0FEC7BC72EE07F0D7F170B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 08:01:28 +0000
Manifest this update: Thu 26 Mar 2026 08:01:28 +0000
Manifest next update: Fri 27 Mar 2026 08:01:28 +0000
Files and hashes: 1: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl (hash: XDsq4ZQvLQlH4GvrTX5wtBAcaLRtbC3aPOcrBGi1TjA=)
2: 5335TVWq-TAy75K-3w-T_kbzaH0.roa (hash: 9SO05Pcou3qWF6g88dlB6s3gfpWtXt6YbpW1v8iIrjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:a6:e8:f0:fe:c7:bc:72:ee:07:f0:d7:f1:70:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Validity
Not Before: Mar 26 08:01:28 2026 GMT
Not After : Mar 27 08:01:28 2026 GMT
Subject: CN=23be6799a545d79b75afc4acc9fc2078b3be4dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:78:4c:80:4b:09:e0:38:49:c0:5f:e5:44:
88:ed:7d:1c:97:ff:18:f2:f2:dc:b0:59:32:bb:55:
14:ef:b8:0d:17:15:c8:b2:25:94:6a:66:19:0b:32:
b3:18:21:4c:1b:7f:ab:8a:59:67:b6:1c:ba:1d:92:
43:00:94:89:de:43:00:20:b5:20:59:34:89:2b:f9:
02:02:14:cf:d4:52:41:51:9b:2c:53:09:97:ed:00:
a7:45:f0:a1:c7:d4:e8:fb:7e:25:a4:ca:26:02:a1:
5f:3e:42:d4:30:de:20:80:2d:49:9e:14:b2:b1:55:
cd:1d:99:89:37:0b:7d:16:ff:09:14:c8:03:e9:b4:
79:89:30:44:d9:bb:b1:79:3d:37:46:84:96:37:84:
de:63:26:54:15:0f:b6:d9:cf:0d:05:bd:fd:f7:49:
07:9d:85:06:17:00:f0:71:fa:59:e9:dd:67:1f:ac:
29:09:b0:32:79:e9:c2:c5:20:b8:44:1c:3a:66:9c:
5f:4e:4a:7b:5d:b5:dc:65:62:39:7c:1b:aa:d0:08:
37:ed:31:aa:b1:c0:d6:bb:45:23:b0:f5:82:ea:c8:
46:72:1d:70:a4:d2:25:1e:7e:65:d7:69:3c:41:f8:
9f:40:4a:2c:66:1e:29:68:ae:77:4f:94:a4:da:14:
98:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BE:67:99:A5:45:D7:9B:75:AF:C4:AC:C9:FC:20:78:B3:BE:4D:C9
X509v3 Authority Key Identifier:
keyid:F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:03:36:fb:3f:b6:62:ea:b1:52:4b:63:d6:af:bd:bd:8d:19:
8a:b6:6c:5b:60:74:a9:05:09:d3:6c:85:96:af:81:a4:4b:65:
d0:28:32:c1:1d:a9:41:a8:42:c4:8f:e1:c3:c4:15:95:98:e1:
be:4f:67:91:28:39:7b:6d:1f:5a:6e:a9:5f:d8:1a:fa:e6:30:
a6:c7:90:c0:7d:35:72:60:1d:32:3b:f9:a1:e6:fd:9b:4c:7d:
26:26:4a:6d:8f:91:05:14:f2:c1:9c:2d:6f:81:57:89:22:52:
3e:d2:32:90:e8:35:82:29:26:c5:10:8f:bd:64:18:c8:58:84:
6c:4a:68:38:35:41:94:f8:f0:40:e5:4e:60:90:a1:f7:bf:a8:
4a:04:4c:e9:32:64:70:98:f5:34:35:70:fb:3d:79:ba:e9:2b:
1a:40:a5:e5:c1:db:5d:6e:5e:f9:cd:0b:0c:89:b6:41:26:29:
03:d9:3c:0c:6d:02:82:37:a2:cc:80:05:21:7d:6a:61:a3:c4:
1b:3e:8e:ca:f2:f1:aa:4b:9a:a0:3c:f7:45:2a:85:3a:ea:30:
62:06:68:ad:d6:50:b7:aa:81:06:b8:73:c0:fb:ea:1e:d6:40:
e9:b3:bb:ee:17:ec:d7:6a:64:1c:47:fa:01:4b:42:29:31:02:
2c:e0:8c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:34 2026 by rpki-client