Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft
File: eJiLIIHZlCID0iJIrNgF2zoT3MU.mft (raw, json)
Hash identifier: UdN2Q5g7y108oGfUrt3TbyMZSd2X3dMmyynxBAVPLJ0=
Subject key identifier: 9C:C0:D5:C6:82:1A:99:CE:F6:72:38:0E:61:FC:8A:85:52:91:F1:EB
Authority key identifier: 78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5
Certificate issuer: /CN=78988b2081d9942203d22248acd805db3a13dcc5
Certificate serial: 019D39E5BD56F1E32736F242CA9C23ECA902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft
Manifest number: 1352
Signing time: Sun 29 Mar 2026 14:00:50 +0000
Manifest this update: Sun 29 Mar 2026 14:00:50 +0000
Manifest next update: Mon 30 Mar 2026 14:00:50 +0000
Files and hashes: 1: XCzfh62vqtaLoBLmnf7KwpKjJEA.roa (hash: KTbdtDtJvNQ824N7s/PkrhI3vieli+GuTfSDO92U57s=)
2: eJiLIIHZlCID0iJIrNgF2zoT3MU.crl (hash: EkVzl9sT104G/VxzwNBwSi5o+M9bt60AHRdUaDhkTxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:bd:56:f1:e3:27:36:f2:42:ca:9c:23:ec:a9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78988b2081d9942203d22248acd805db3a13dcc5
Validity
Not Before: Mar 29 14:00:50 2026 GMT
Not After : Mar 30 14:00:50 2026 GMT
Subject: CN=9cc0d5c6821a99cef672380e61fc8a855291f1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:ee:bf:31:f8:fd:d1:52:fd:70:25:23:e5:
e6:7c:8a:7d:ca:e8:29:f6:e8:b4:86:28:b5:9e:4d:
d6:c6:87:21:b7:fa:c6:9e:ba:6a:06:2d:5c:8d:88:
79:54:d8:33:a8:5e:54:c6:29:4d:81:37:3c:b8:44:
8a:54:45:26:4a:7c:70:e1:fb:6e:a7:21:63:74:c4:
24:36:e5:7c:24:c1:94:1c:d8:5f:24:72:d8:a6:b8:
1e:85:2e:e4:9d:07:4e:81:ec:da:21:cc:18:a6:ac:
3d:7a:8b:cd:13:ea:4e:f7:6e:03:78:2a:87:27:71:
bd:e6:8c:fb:db:4c:ec:f1:66:ee:43:a1:3f:33:57:
8e:5c:30:f6:fa:65:0f:25:96:73:32:1d:46:9b:73:
bd:63:92:ee:80:40:01:86:5e:50:37:9e:0f:f4:bd:
11:c3:39:4a:e3:ee:67:e5:9e:9b:ca:a0:61:8d:fe:
e5:dc:62:ba:f8:47:86:b0:59:6d:15:3c:be:0d:bd:
51:4b:74:af:79:39:73:8f:99:67:f9:b6:28:1f:87:
c9:a5:0b:5d:df:36:b3:eb:01:2f:a1:5b:ab:49:19:
e9:de:b8:93:95:ff:5c:aa:4a:08:b4:9e:1f:48:b9:
2a:73:58:f1:91:9b:3b:a0:38:68:fc:1d:a4:50:e6:
68:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C0:D5:C6:82:1A:99:CE:F6:72:38:0E:61:FC:8A:85:52:91:F1:EB
X509v3 Authority Key Identifier:
keyid:78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:2d:21:61:c8:1c:91:5c:81:19:2f:a3:d9:81:fc:1b:1f:1f:
42:73:20:4d:37:eb:e0:bd:a6:15:a7:69:ce:ec:3a:93:ad:4f:
ba:4b:5e:52:d1:3a:8a:94:8e:a8:a8:ff:de:80:88:9e:27:14:
ad:69:af:b7:64:b6:a5:1c:bf:db:be:e7:67:88:7e:79:91:b2:
84:5f:c9:bb:6a:2b:5f:b5:81:96:94:ac:be:23:a4:be:d8:1b:
8e:80:8c:73:60:17:e6:3f:2f:22:a8:c6:a2:9c:29:13:e1:67:
f2:18:61:9a:64:bd:e5:5f:53:83:4a:85:95:c2:75:50:f1:4d:
7d:0d:b3:1d:10:1d:41:91:97:00:12:d3:1e:f2:94:b5:3b:6a:
d5:84:aa:a3:9f:5a:8d:f0:7c:29:1f:d9:41:0d:32:9f:0e:a8:
8f:fd:a1:64:15:c5:fb:78:90:46:cf:e8:c0:de:28:b4:73:e9:
94:a7:5e:bb:89:ed:ed:78:ce:0d:06:ad:45:55:a5:64:3e:ee:
f2:f6:7a:54:2a:ed:60:1a:6d:57:29:04:6a:9f:13:25:81:70:
c7:47:91:1d:c4:c9:46:f5:5f:aa:7a:61:15:ee:75:7b:8a:73:
4e:eb:86:03:7d:0b:82:fc:c3:1f:16:5d:7b:ad:e6:f1:eb:c5:
90:a3:5b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:36 2026 by rpki-client