Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
File: enBAB-ITXIsSeANbp2QrmRWURLE.mft (raw, json)
Hash identifier: VWdm63U8BtIHuH9AMxvNW8ZzIV7AtboUlRFRtEwTAWQ=
Subject key identifier: 21:4C:67:A5:05:26:21:AC:3A:FF:EE:E8:EC:1A:26:5F:F8:15:7A:64
Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
Certificate issuer: /CN=7a704007e2135c8b1278035ba7642b99159444b1
Certificate serial: 019CE44770B05DCD5615F06A8395916140B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
Manifest number: 1860
Signing time: Thu 12 Mar 2026 23:00:12 +0000
Manifest this update: Thu 12 Mar 2026 23:00:12 +0000
Manifest next update: Fri 13 Mar 2026 23:00:12 +0000
Files and hashes: 1: enBAB-ITXIsSeANbp2QrmRWURLE.crl (hash: nvC+AfhfS3hgi2LX6AEbQMMAawp2AybewHHv82KKm10=)
2: n2RXCHmE2mIVVK86mWjjYTONVEY.roa (hash: vfexF/zKDf9M5bj3mCjRl7MbjkVTZHBSgi+Kjne7g2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 23:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:47:70:b0:5d:cd:56:15:f0:6a:83:95:91:61:40:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1
Validity
Not Before: Mar 12 23:00:12 2026 GMT
Not After : Mar 13 23:00:12 2026 GMT
Subject: CN=214c67a5052621ac3affeee8ec1a265ff8157a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:fd:db:fc:65:f0:7b:17:33:94:db:97:40:
66:6b:60:b3:3a:42:87:2f:0c:32:f8:c7:ec:ec:a6:
53:08:50:f4:26:17:02:4d:b9:f5:f7:5a:3f:38:1b:
21:c4:04:24:95:69:7e:b3:68:99:74:da:5b:10:c7:
db:c2:8f:ea:8e:1d:86:e7:3a:fe:d1:31:e0:e7:08:
84:6a:03:18:92:93:0e:6b:19:a3:fd:e5:72:36:58:
e8:c7:c7:56:15:76:bb:7e:a8:fe:45:f2:cf:de:d6:
c0:a4:90:ca:48:9c:c0:97:72:5d:f8:9f:9b:97:ba:
3c:5a:63:24:e3:20:89:19:ac:09:ce:d8:17:3e:e0:
ea:b6:0d:4c:af:e2:55:1d:e2:95:fb:fc:e6:90:eb:
cd:ce:1b:ae:0a:3e:5f:18:d4:61:5b:35:4d:ee:a4:
21:ec:e0:ef:98:23:3d:4d:5d:65:c9:ae:d4:88:8f:
79:93:a0:b6:fa:24:ee:7f:8d:a7:87:7a:9c:1b:4a:
c2:04:05:44:96:5a:c4:57:1d:7e:02:c4:5b:ee:28:
b3:f0:fe:5e:c8:64:9c:6b:d5:bc:db:25:c3:4c:0f:
1b:8e:58:93:b3:b4:ba:f1:0a:27:9e:f9:e2:55:cf:
c0:99:b8:a4:1c:d5:2b:66:ec:8d:f6:1b:10:e8:13:
7f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4C:67:A5:05:26:21:AC:3A:FF:EE:E8:EC:1A:26:5F:F8:15:7A:64
X509v3 Authority Key Identifier:
keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:93:43:60:65:f4:ef:57:43:e9:4a:a7:af:dc:73:05:1d:31:
df:9c:a3:e6:c3:1a:1a:7f:8b:5c:83:3b:d1:16:5f:01:9a:82:
66:d0:a5:7b:30:8b:3c:81:89:6f:14:ed:67:c2:b1:ad:12:13:
e8:8d:0f:4a:5e:2d:6d:1a:ed:0e:8d:8f:d7:41:a4:ac:af:53:
2e:fc:33:eb:5c:83:e2:ca:8b:13:62:83:94:3d:6c:44:18:70:
2c:17:4c:de:e4:6c:c5:cd:fb:d5:49:00:d4:41:d0:6f:6f:a6:
51:d1:ff:38:66:8b:06:75:30:9f:e4:c3:f3:ac:3d:a1:c4:f5:
19:0f:e9:b3:a0:73:bd:05:25:3f:8c:ad:ad:07:30:96:ab:76:
8a:c4:22:81:45:53:bf:2a:4e:f0:7a:78:19:3d:9d:3d:7b:76:
e8:aa:1e:b9:2d:4e:55:d4:e5:34:9d:c8:4c:41:ba:07:b6:26:
b3:dd:de:4e:de:a7:bb:be:33:e1:da:05:cb:cd:0e:ec:67:10:
af:92:4b:a0:c4:76:d0:11:80:f2:df:54:38:a1:cd:09:f6:53:
a6:05:a5:a1:cd:11:e7:33:e5:38:aa:b9:04:df:c6:c2:97:df:
32:34:45:d7:0c:4c:97:19:e6:4e:55:1c:25:d6:fa:29:63:bc:
7d:1d:64:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:24:35 2026 by rpki-client