Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
File: ehJ9Y84cnzVXOQryH8BhBypSX04.mft (raw, json)
Hash identifier: wW0ryoULRkSYvrs9uEqM3iAgGauMsR3ZZzI7EXy9u14=
Subject key identifier: 39:F2:D3:A5:C8:F9:0B:CC:4C:A3:6D:F6:CE:70:BE:AD:73:09:44:27
Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Certificate serial: 019D28F31138C992D9A7F73220A3A04D5C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
Manifest number: 03DE
Signing time: Thu 26 Mar 2026 07:01:51 +0000
Manifest this update: Thu 26 Mar 2026 07:01:51 +0000
Manifest next update: Fri 27 Mar 2026 07:01:51 +0000
Files and hashes: 1: ehJ9Y84cnzVXOQryH8BhBypSX04.crl (hash: Mfu3x7YnT9KNlFUYvi4Of3gIbHDsG5r9MMxn6uF109Q=)
2: mryfSMsiVc0yv4FSUpt7qiqcwh4.roa (hash: 0IMb7oddMwh/zy5T4EnTss9mtPc9VXAUaEOcmqL1xfU=)
3: o_rtVjzkw0KDuX61bKwdi27cJvI.roa (hash: /gFVliPW+JCCvNfNfgkacSugBlyQGtqR4HbJDxkhEjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:11:38:c9:92:d9:a7:f7:32:20:a3:a0:4d:5c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Validity
Not Before: Mar 26 07:01:51 2026 GMT
Not After : Mar 27 07:01:51 2026 GMT
Subject: CN=39f2d3a5c8f90bcc4ca36df6ce70bead73094427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:26:4a:52:f3:9e:71:97:50:0c:d9:f2:43:23:
14:1c:ec:73:e3:c3:64:d5:5e:49:9f:8c:1d:74:72:
a9:51:ea:71:76:74:79:fb:67:8a:60:db:da:de:3d:
4d:0a:86:fc:64:bb:09:40:ba:7c:a2:d0:08:90:38:
81:ad:35:af:62:0b:c3:ee:5c:78:ba:c0:31:46:fb:
9a:b4:e3:a0:57:d9:27:88:19:17:b1:48:f9:5f:2d:
41:a7:62:fe:a0:f2:8f:db:49:56:7e:3f:e3:9a:e6:
d3:bf:e5:25:cf:df:53:51:16:54:25:1c:4b:23:6c:
dc:be:89:45:a4:7b:fb:5d:ca:c1:f4:e1:00:d8:fc:
23:34:77:73:5c:b7:a9:f8:4d:02:38:a7:15:1b:67:
c4:61:dd:b4:7f:02:93:3d:68:82:7c:60:d6:7e:58:
98:e5:50:08:78:e1:22:b1:f2:d8:54:dc:23:c7:0e:
07:02:7d:ac:02:6d:02:8d:58:a0:ce:38:b8:da:70:
90:0f:ab:1d:e1:af:8f:80:4a:dc:34:e8:89:c1:90:
6a:60:1c:e1:e6:5e:10:59:e8:94:25:da:11:20:00:
28:cb:86:c1:e6:70:fe:8b:77:06:6e:84:7b:be:02:
4d:cd:90:4a:ae:5f:e1:60:ae:c6:d1:dd:32:d1:70:
f4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F2:D3:A5:C8:F9:0B:CC:4C:A3:6D:F6:CE:70:BE:AD:73:09:44:27
X509v3 Authority Key Identifier:
keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:02:e2:4b:00:7f:5e:fd:db:a9:15:b9:5d:28:fb:9b:b4:1d:
a3:8f:21:38:fd:99:da:3e:ea:9e:18:9b:2e:5b:5b:df:09:a6:
04:e3:b1:23:d0:df:3a:b3:4c:b5:53:00:7d:c5:f7:b4:37:bb:
13:cd:ab:de:a7:c1:59:5b:7e:16:61:51:16:62:12:07:05:d2:
90:ae:e6:ce:8b:cb:51:1a:a7:07:31:66:46:e0:74:10:16:49:
32:bd:f6:e1:f5:66:e7:3f:18:f5:b5:af:64:9b:c7:e3:1e:6c:
f6:6e:72:35:89:d5:66:37:f9:b8:1e:7d:91:e5:35:29:c7:2e:
6c:23:f7:0d:83:c4:96:57:a7:1b:bf:4e:60:dd:d5:6d:4c:da:
ad:d0:0c:d7:a9:fc:b0:4c:45:7c:64:ed:57:85:0a:15:c5:37:
56:ec:78:11:4a:d6:8e:87:51:0e:3b:75:22:35:c1:f6:5d:36:
ec:8c:b3:f0:fa:ab:63:34:f5:9a:39:ef:22:ea:5d:bc:4c:35:
84:21:05:ba:f0:24:8a:57:69:0c:5d:45:0a:f6:bf:25:a9:49:
b8:5a:0d:24:12:65:39:d8:df:18:9f:98:11:81:8f:4c:59:29:
e2:40:f2:6b:4a:62:12:26:72:b2:ef:7c:01:c6:59:5d:81:fc:
38:7f:56:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:28:54 2026 by rpki-client