Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
File: ezhehhZ9XMwi_YWJJWCudgtfKJg.mft (raw, json)
Hash identifier: BE6wEotX2c6JZLFSl6rZ2OegyrBhD6WLpr7RR9gZxhU=
Subject key identifier: 1C:35:86:B7:50:42:36:F0:88:2F:A8:E8:49:C6:0D:75:0F:5A:31:95
Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
Certificate issuer: /CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Certificate serial: 019D37C077A16EAB9C15A8898978834F1025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:00:53 +0000
Manifest this update: Sun 29 Mar 2026 04:00:53 +0000
Manifest next update: Mon 30 Mar 2026 04:00:53 +0000
Files and hashes: 1: Az-iHkJejR0VdZYNnzrlZuh1_DI.roa (hash: sKSrtLFKb8T7tzu/qrkRHr+dbwySR1WM0V46K4Zjtg8=)
2: QBz4vHPmaaMrots9J1TfiJn6g8U.roa (hash: 1zuHsD0Vu63nJy0iEzu4F0kzfYEsfd1yuIUMu7fViHM=)
3: dr4ERfRqn_ghQRIttdnBh9fXjas.roa (hash: uHaHOk9OGRVoN05Lx2H15zjg2EWZadYEAqhzWiPC/Ak=)
4: ezhehhZ9XMwi_YWJJWCudgtfKJg.crl (hash: gBHxidV46rS16lxScFvweTLa81vkuwpCl0c/yOQJxJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:77:a1:6e:ab:9c:15:a8:89:89:78:83:4f:10:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Validity
Not Before: Mar 29 04:00:53 2026 GMT
Not After : Mar 30 04:00:53 2026 GMT
Subject: CN=1c3586b7504236f0882fa8e849c60d750f5a3195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:8e:9c:a4:36:c2:c5:6c:3a:c3:af:40:87:
67:c5:04:23:17:75:1b:19:66:c1:bf:74:b9:67:50:
e8:ee:f6:04:b6:72:38:c3:3b:85:cd:b4:fa:6b:9d:
ba:16:8f:a7:0b:a9:7e:41:71:39:28:d6:9a:39:96:
8c:d7:2f:30:a4:ff:9e:5a:1b:cb:df:b9:69:29:80:
b5:4e:03:60:25:e6:53:7a:63:76:3d:25:de:ee:7f:
0c:34:05:61:94:59:26:a1:bb:40:ad:49:cd:29:8f:
bc:79:b4:d5:2d:78:8f:1d:df:50:70:05:40:bd:b6:
04:6d:ae:2d:f0:98:3e:9a:a8:ae:d0:6a:61:06:40:
78:85:38:70:24:9c:1f:38:45:55:78:fd:a1:50:6f:
71:58:b5:49:23:04:55:7c:b6:01:ab:68:eb:44:9d:
cb:a0:ba:2c:ac:42:a6:08:43:db:57:98:86:57:ce:
9f:4a:48:0f:ed:ac:0e:fc:cf:9d:10:c5:6a:8e:28:
8f:f4:d1:48:81:60:cb:c5:bf:80:ee:3e:7a:e9:f8:
c2:ed:60:c3:56:15:93:a7:30:10:cd:a1:f4:ff:74:
76:d0:61:7d:9c:30:80:c2:4c:7e:90:a8:b2:e1:c4:
37:05:95:c3:1f:74:27:9e:b4:41:e4:a3:89:df:b1:
44:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:35:86:B7:50:42:36:F0:88:2F:A8:E8:49:C6:0D:75:0F:5A:31:95
X509v3 Authority Key Identifier:
keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9c:0d:62:d2:dc:02:9e:bb:6f:80:f5:c6:88:99:21:27:79:
17:da:d4:80:eb:13:82:35:2d:8d:25:8b:7e:0b:b1:ac:93:39:
96:f9:12:fd:51:a3:6c:ec:91:0c:3b:f1:20:14:87:70:49:f1:
cc:fc:fb:17:e2:ed:38:6f:79:ca:22:bb:14:66:b6:60:78:4e:
0f:a1:a3:60:7e:5a:83:8c:e4:ce:a8:12:c5:d2:3a:4b:c2:6e:
90:7b:65:57:03:91:a3:19:b7:1d:40:bd:fe:98:f5:4e:40:39:
4b:23:75:a3:b7:b6:0c:a0:32:ce:44:74:ee:35:3d:44:bd:00:
31:54:46:e5:9e:be:f7:19:d9:c1:36:1a:25:f8:37:09:cc:84:
0a:f8:33:a2:ba:57:da:84:c6:c0:3b:75:c4:27:3a:b9:0e:2a:
43:1d:3d:25:25:4e:20:19:b9:00:df:19:5a:57:61:33:3b:8a:
33:28:03:c8:13:11:11:0d:34:0c:8c:5b:25:d9:7d:53:be:e4:
6d:4a:40:5d:f5:24:97:e2:70:f6:78:2e:c9:1b:28:20:af:72:
22:f0:b2:d4:29:0b:72:1c:19:25:db:a7:cb:f0:a4:58:5a:0f:
6d:b2:60:5b:23:ec:d2:95:aa:6c:e6:b4:21:35:a9:d1:de:57:
39:3d:0a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:54 2026 by rpki-client