Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
File: cH89q67iT8Q7hlqvo_PJwvNkv8k.mft (raw, json)
Hash identifier: sxMO3yLadCJeTHBXVv9lpMyRehfg5v2SDazYoLhqEfM=
Subject key identifier: 25:DC:AA:17:8A:CC:27:3E:4C:B4:0F:6F:F6:4C:EB:A6:17:67:2A:85
Authority key identifier: 70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
Certificate issuer: /CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Certificate serial: 019D265FA4165A97AF8C25A41DB3DE3ADA01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
Manifest number: 1819
Signing time: Wed 25 Mar 2026 19:01:35 +0000
Manifest this update: Wed 25 Mar 2026 19:01:35 +0000
Manifest next update: Thu 26 Mar 2026 19:01:35 +0000
Files and hashes: 1: YFuXlkN-MljNRVYZCMihnQz4RoU.roa (hash: ZnDgTtky6cYn6D0/F0mae8ReoG9f3tqFA2qYPiw3SoE=)
2: cH89q67iT8Q7hlqvo_PJwvNkv8k.crl (hash: OEV1MAenNbuUes1TLBszNZ0BL9w5nHBZCrMwTR7q8Sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:a4:16:5a:97:af:8c:25:a4:1d:b3:de:3a:da:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Validity
Not Before: Mar 25 19:01:35 2026 GMT
Not After : Mar 26 19:01:35 2026 GMT
Subject: CN=25dcaa178acc273e4cb40f6ff64ceba617672a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e4:10:de:93:fa:df:42:1c:8a:12:41:e5:f8:
07:26:7e:50:7f:1e:fc:f7:51:c9:11:30:10:55:7b:
74:3c:d5:62:af:aa:ea:0d:c8:14:1f:51:b4:55:53:
24:a2:41:93:85:2f:c2:60:42:e0:07:40:9e:ff:6b:
bb:2b:fb:5b:b2:74:ea:50:5b:f9:15:2b:39:2b:21:
1e:b2:14:1e:e8:d3:df:de:5a:f0:97:eb:6a:cb:a7:
32:13:03:a3:2e:a5:66:e4:40:a4:b5:cd:3b:60:b8:
73:f1:0d:87:70:5c:ec:3c:0c:1b:21:a6:08:61:b4:
69:88:f4:3f:d6:cd:8f:21:40:26:e3:3f:1b:ad:10:
f1:11:82:e3:73:ac:6a:ce:bd:5c:4f:a9:2b:45:5f:
52:84:e2:75:00:96:ed:bd:18:68:98:a5:28:e3:8f:
21:ae:e8:fe:08:00:d0:5a:8f:7e:58:a4:cc:bc:de:
f0:f5:38:33:f8:f2:a9:94:2a:9d:78:b3:6f:1f:98:
1d:5f:25:4b:24:aa:79:b4:12:e6:cd:26:0a:96:2c:
55:c8:31:b7:d6:51:0e:df:6f:cd:52:69:4c:be:29:
c0:2f:b8:3c:26:ab:3a:cb:42:e7:6c:04:1b:a3:a5:
b1:55:a1:d4:64:14:8b:96:a5:2e:a9:e4:c7:93:79:
5f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DC:AA:17:8A:CC:27:3E:4C:B4:0F:6F:F6:4C:EB:A6:17:67:2A:85
X509v3 Authority Key Identifier:
keyid:70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5d:f7:f1:24:4c:8c:8e:fd:59:e9:9e:e0:ad:34:86:72:cb:
57:30:c2:7d:3c:96:93:99:c5:fb:33:e8:55:51:f1:50:17:fc:
a7:6a:7a:84:f6:fb:3c:67:d9:14:77:4a:e3:4f:b0:1e:e3:e5:
08:ed:e3:df:bb:d0:cd:d1:28:f1:3e:62:ba:a3:f2:4b:89:ac:
4d:0b:16:95:7d:8c:2e:e3:cf:2a:e2:3f:d1:1c:4a:e5:a8:6a:
b8:cb:c0:2d:c6:6b:e4:fa:66:0c:55:f1:08:0f:7c:a8:57:f7:
50:71:b2:68:8f:4a:50:97:e1:81:28:b1:58:a4:cf:f1:3d:78:
26:46:58:8e:13:51:fb:64:1b:24:de:99:e4:00:21:43:15:7b:
75:1e:24:39:e5:9d:bd:d9:28:1f:96:80:54:5d:49:fb:4e:84:
7a:13:0b:05:05:de:4c:fc:1f:9a:34:84:ba:2f:dc:f9:a1:8e:
af:1d:6f:a3:91:5c:af:c0:5f:c0:c5:7d:14:c2:d7:eb:a1:5d:
9d:10:a6:92:26:1a:5b:a1:e7:e3:c8:53:72:b9:79:76:3d:5d:
94:3c:73:1e:3b:25:45:a8:a2:68:c5:8b:70:9c:57:6c:cb:6b:
d0:b1:d4:87:f3:d3:25:71:9b:66:81:e8:6d:c5:57:07:52:a1:
ae:09:85:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:31 2026 by rpki-client