Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
File: e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft (raw, json)
Hash identifier: Yxu+CWLoecl6lwKkhwnIBcbT+WPRZ+l65pYay61ydpo=
Subject key identifier: AA:81:CE:EB:80:D4:8B:49:1F:AB:08:36:13:B1:61:90:F6:C4:12:F1
Authority key identifier: 7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
Certificate issuer: /CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Certificate serial: 019D27A940FD2424CF961BFF29BB5A801545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
Manifest number: 163A
Signing time: Thu 26 Mar 2026 01:01:36 +0000
Manifest this update: Thu 26 Mar 2026 01:01:36 +0000
Manifest next update: Fri 27 Mar 2026 01:01:36 +0000
Files and hashes: 1: RCrqoUHCiCj-_mCIijuiOb69DWo.roa (hash: N+TGC8nICgkfbZEg/ul2Bb4VOH/CDC8qHnBferdNNKE=)
2: e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl (hash: vx8me5gz1sXZ29e8TfzPxgplWO1GBNJ1T2JJO6dh2ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:40:fd:24:24:cf:96:1b:ff:29:bb:5a:80:15:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Validity
Not Before: Mar 26 01:01:36 2026 GMT
Not After : Mar 27 01:01:36 2026 GMT
Subject: CN=aa81ceeb80d48b491fab083613b16190f6c412f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:ac:45:dc:ca:c3:09:d9:01:85:e4:10:90:
87:31:94:84:29:79:62:f5:93:28:1d:d5:75:99:95:
9a:44:82:0c:0c:65:7a:dd:da:a9:ba:18:23:73:a1:
98:29:97:04:ce:d0:5d:f7:f3:02:3e:94:a0:96:fa:
57:ad:a7:12:ec:8f:7e:a6:c4:03:b1:1d:c3:32:33:
76:e4:1d:2c:42:ef:f6:11:20:27:8b:65:a2:12:5d:
a9:10:21:42:9e:c4:91:25:39:15:04:93:bf:cf:35:
0a:f0:aa:42:23:97:a0:e5:10:96:77:ce:d5:ba:e2:
c2:11:38:85:71:a6:9f:36:a3:e6:ea:a8:4a:2c:f1:
3c:6c:b7:8e:f8:f0:af:94:31:35:e5:c3:49:19:b5:
a2:51:1a:cb:94:c5:b4:72:7f:05:86:39:47:af:d7:
9c:d7:80:68:b2:f9:9b:15:95:8b:71:ad:2e:05:3b:
b1:65:b4:c5:f6:b4:90:c8:1d:d4:ae:23:88:0d:20:
2e:40:b0:b7:35:02:55:31:6b:7e:8e:c0:69:33:5b:
6b:2e:25:88:dd:6a:85:20:80:e8:04:d1:b6:41:7c:
f7:a1:a4:8a:ae:eb:61:6f:1f:c5:bf:c9:ba:16:7c:
89:15:7b:7e:71:60:9b:e0:38:48:ab:21:38:4f:b9:
ad:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:81:CE:EB:80:D4:8B:49:1F:AB:08:36:13:B1:61:90:F6:C4:12:F1
X509v3 Authority Key Identifier:
keyid:7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b2:5b:2b:02:f6:82:4a:03:5f:1b:60:07:ae:81:aa:fc:95:
96:05:83:1e:e9:82:2a:c1:25:fb:a8:be:48:0d:09:1e:98:d2:
e5:f0:1a:2d:b0:1b:12:3d:b5:85:a6:4d:a7:93:25:e4:00:88:
ab:81:65:38:c9:d5:50:f8:89:19:cf:bf:10:52:f7:dd:68:a5:
e2:5c:2f:12:84:71:94:e5:50:94:6c:15:29:04:51:2c:05:94:
36:c6:96:ac:f3:16:cc:55:58:10:c7:12:e6:6d:8a:bf:a6:ce:
01:33:cd:79:5a:ef:8f:4d:b9:b8:f5:7b:c0:63:82:e4:88:f4:
ea:ee:b7:f2:28:29:5c:6e:c5:1f:e2:2c:47:c4:f6:95:70:80:
97:16:32:e7:e8:78:5e:91:9b:34:f8:98:84:38:69:ad:fe:50:
99:6d:82:ea:78:f4:8f:19:2e:6a:86:87:6b:fc:9d:d0:d3:e0:
61:c2:bc:08:87:07:59:52:e4:c6:84:02:5d:80:2b:e3:e7:5a:
a9:3e:fb:52:a7:3a:85:8f:3a:bb:7d:24:8d:ea:36:3c:41:29:
41:24:fc:cd:38:7b:04:a6:f1:0d:95:d2:99:29:18:10:82:73:
bb:9f:87:62:a5:e0:6f:9d:5d:99:df:a3:99:d2:33:6d:2f:f6:
82:1b:80:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:10 2026 by rpki-client