Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
File: eA3hbu6UewqMdXFPxdpqAlnKG5A.mft (raw, json)
Hash identifier: fgM/J8y18fnMqFRwVhRflHviLN6xerRgYe1a2m/CqJg=
Subject key identifier: 04:81:EF:58:D7:FD:33:EE:39:86:F3:12:69:DF:29:CA:31:45:85:2B
Authority key identifier: 78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
Certificate issuer: /CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Certificate serial: 019D25F21146820998B90634EF1DAA84BD4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 17:01:54 +0000
Manifest this update: Wed 25 Mar 2026 17:01:54 +0000
Manifest next update: Thu 26 Mar 2026 17:01:54 +0000
Files and hashes: 1: FZe1NTnwQLaVEwa5nKYFvYoYApc.roa (hash: LyCQTa9+bhAOhJK8DWlraV43+IT6fvhRPfMpiyuGQl4=)
2: cbfZrsYOtkfTsvATyxudQ2krwIc.roa (hash: LFDpBEhBWBZpbTCNf+xEuq+zB73JcCsNfl6NSUtgKtY=)
3: eA3hbu6UewqMdXFPxdpqAlnKG5A.crl (hash: UTkXzzd6x1JA5uHwDXjU+9g/MqwXcWQi6+uagTNql2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:11:46:82:09:98:b9:06:34:ef:1d:aa:84:bd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Validity
Not Before: Mar 25 17:01:54 2026 GMT
Not After : Mar 26 17:01:54 2026 GMT
Subject: CN=0481ef58d7fd33ee3986f31269df29ca3145852b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4e:c6:64:be:54:a1:28:a1:0f:6a:70:6a:d7:
a9:42:77:6c:0a:d6:b0:b7:9c:ea:f2:f7:95:7f:b2:
ce:ba:4b:9c:47:e2:9e:c4:5c:cf:26:58:a4:ca:be:
11:ac:3f:65:9a:89:1e:12:c8:1e:e6:25:8b:5e:d0:
32:9f:7b:45:8e:c0:0f:5c:2d:d1:18:62:1f:4e:45:
dc:fb:39:9a:6f:ad:5e:c3:4b:59:58:c6:5f:38:d6:
80:0f:ec:a1:b6:29:f5:ee:ff:f3:3a:ad:86:d7:cf:
43:e7:31:6b:9c:98:94:06:0e:11:30:c2:92:40:3e:
81:c0:6b:0a:e9:7c:65:e4:b2:63:40:e5:dc:4a:95:
1b:8c:7e:f1:76:4a:46:fb:93:fe:80:3f:b8:ee:9d:
5b:7d:3d:4c:ef:11:47:73:65:04:6c:60:fc:b8:5b:
bf:0f:97:67:51:58:c6:a8:2c:ff:d4:40:3f:67:26:
d1:90:1b:49:e5:c4:69:30:27:cd:94:ab:28:a9:75:
66:59:92:b0:e2:73:ab:1e:1f:52:e2:87:01:41:94:
f0:b4:21:58:32:b5:8d:bf:90:a6:cb:49:85:8a:a8:
94:c1:4f:6d:5a:21:26:46:89:4c:0b:37:52:53:f3:
ff:05:b1:2e:d5:7e:bc:4b:62:21:00:97:21:c7:04:
fc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:81:EF:58:D7:FD:33:EE:39:86:F3:12:69:DF:29:CA:31:45:85:2B
X509v3 Authority Key Identifier:
keyid:78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ac:65:a0:b3:c8:fc:43:4d:2d:d8:81:7e:99:de:62:39:af:
5c:85:0f:e0:7a:3b:16:df:57:0d:81:39:b2:61:ed:ab:51:69:
1f:47:64:58:45:bf:9b:18:c7:b0:9e:33:2d:9d:ae:20:dc:40:
6e:b4:50:8a:27:d2:ac:36:27:1b:cc:bf:6d:dc:9e:00:61:2f:
4f:22:4f:a8:08:08:e0:df:91:f4:b4:5c:c7:2f:3c:3f:79:c3:
bb:37:97:a2:78:79:54:7f:32:22:36:95:61:62:e2:29:29:a4:
18:3f:2f:37:21:81:74:02:5f:33:23:63:35:bd:70:22:c5:eb:
09:b0:d1:63:6c:44:20:9b:2b:fa:4d:d1:ee:81:33:23:c9:85:
bb:9c:5a:24:0f:3d:21:57:52:a5:b4:41:d2:86:91:c0:29:b6:
20:43:a4:7e:64:39:12:8b:c3:8f:c5:e8:30:08:78:44:72:b2:
c3:06:93:65:18:8a:25:25:49:a2:0d:5a:f2:de:4f:9f:3b:8a:
a9:8c:63:43:88:e7:f8:7f:7d:2a:1c:60:40:47:18:d0:04:b4:
ff:2c:83:83:0e:57:fc:cc:dd:32:d0:39:ec:0c:69:7b:4d:57:
0d:55:79:90:42:d5:38:0a:11:13:d9:67:5d:99:5b:0d:5c:33:
a8:1b:b2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:54 2026 by rpki-client