Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
File: eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json)
Hash identifier: sgAHqoItaiqC7TqsMq/otW9aTSmvPiLl4ljWbHwFiwk=
Subject key identifier: 78:DF:44:C4:31:41:3A:60:60:24:90:C6:CD:55:B3:8F:E8:21:88:F2
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Certificate issuer: /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial: 019D2CCFD31A38BE47B7FAB06C043771873B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
Manifest number: 124B
Signing time: Fri 27 Mar 2026 01:01:50 +0000
Manifest this update: Fri 27 Mar 2026 01:01:50 +0000
Manifest next update: Sat 28 Mar 2026 01:01:50 +0000
Files and hashes: 1: Ovz5_uXaopmCFA2hM3c3dActUxA.roa (hash: c9mXjNhTNI7nbpo+Q8eDzbpgYffEF1OmRMytYW5lsxc=)
2: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: IhRgTr7K08WRB81Osl1vAsKQvR6zPMQvPRBLNAr687w=)
3: iiLRQTaQQ6IVIkbg2il6ZXlFwVQ.roa (hash: tutx4i5TMPBaqEME1ocqA/S91MUf42k0v3h4figQjcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:cf:d3:1a:38:be:47:b7:fa:b0:6c:04:37:71:87:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Validity
Not Before: Mar 27 01:01:50 2026 GMT
Not After : Mar 28 01:01:50 2026 GMT
Subject: CN=78df44c431413a60602490c6cd55b38fe82188f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:d6:d8:8d:00:c1:e1:e7:77:54:58:65:a2:
0b:61:83:59:f9:3c:51:53:98:e8:2a:a3:e2:d0:0d:
f7:3d:f8:41:16:7d:83:19:84:11:3f:74:9f:10:b0:
ad:39:17:1f:78:3d:c4:26:81:8d:ff:8b:8c:f5:70:
24:22:73:ef:6b:7a:35:60:d1:bd:b1:c4:de:e8:7a:
e2:c3:28:fb:aa:84:a7:05:b5:85:30:b2:b8:f3:60:
2d:c6:02:71:b4:d1:d2:ed:af:e4:11:c2:9a:2c:ec:
92:52:b1:5d:ff:0b:d6:6b:d5:80:3b:04:1e:b5:ea:
43:37:59:53:18:b1:df:46:b0:ff:a3:82:2d:19:10:
17:d1:ec:65:32:fa:55:aa:ba:8b:c3:d4:7f:d0:9a:
cd:a4:6c:e5:ea:d3:0a:6d:ec:75:8e:6b:8e:5c:ef:
d6:5e:e8:1d:b0:22:70:b5:09:01:87:d6:1a:9c:88:
b2:42:84:18:71:a9:48:f7:3b:40:f5:1e:cb:63:0a:
2f:2b:f6:52:b2:c3:1e:fc:d2:76:50:9f:83:4b:fd:
3a:e3:a3:8c:6f:b9:86:56:96:65:51:cf:fd:98:a7:
bb:61:e3:36:43:a1:ca:5c:a7:9f:c0:13:59:22:ad:
8c:03:fe:4c:19:2e:ff:f7:79:c3:d2:40:a3:d8:2c:
3d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DF:44:C4:31:41:3A:60:60:24:90:C6:CD:55:B3:8F:E8:21:88:F2
X509v3 Authority Key Identifier:
keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9f:1c:c8:1a:40:9e:69:70:2e:ce:2e:9f:a3:bc:bb:62:bf:
d0:56:b8:f6:5d:9b:6f:73:07:4b:df:cb:f9:3c:e3:c2:54:23:
49:eb:72:07:5c:a7:b7:6b:b0:81:33:84:41:3a:a2:93:3a:e7:
79:28:07:8d:90:f3:75:ae:2f:c4:0c:83:e9:d5:ca:b5:34:d7:
22:98:8b:77:60:3d:c7:16:0f:1a:78:c2:b6:d5:7e:b1:70:f0:
be:e7:ed:e3:2b:5f:e6:9b:73:86:e5:22:44:c7:40:19:8c:25:
d1:fd:c5:08:aa:64:94:95:2a:c2:b9:48:cb:57:06:6f:35:7d:
d9:af:80:6b:eb:99:00:f9:21:49:2b:92:6c:ca:2a:2a:da:b3:
ac:32:0b:03:2e:e9:4a:df:59:8d:a2:f4:a5:2d:7c:33:3a:96:
16:cc:c6:26:be:84:0c:58:b3:37:b3:dc:67:e4:ed:e5:12:02:
6b:fe:b1:a3:9e:cc:c1:4f:d1:60:9e:22:4b:67:5d:c1:9c:72:
07:8b:19:7a:cb:04:87:7c:d5:a1:89:1a:24:a4:5e:1b:8c:35:
d4:4d:5d:ba:05:0b:11:51:3e:60:de:73:a6:c5:b5:71:21:f0:
07:26:f6:60:53:ff:af:ec:b3:09:11:e6:4e:80:7f:73:3a:4c:
99:d6:25:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:09:36 2026 by rpki-client