Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
File: elsD4kg77RNDh7_DBHoTmJ_epB8.mft (raw, json)
Hash identifier: JWD23z3TMJrikhGRlvkV20Kus+99jA6PQj0uUbACG1o=
Subject key identifier: 73:F9:AF:EC:74:EA:18:C8:56:E7:BC:3F:C1:24:54:54:7C:9C:86:67
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Certificate issuer: /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial: 019D19B5D4044A86E4B7099DC4954694B0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
Manifest number: 08D8
Signing time: Mon 23 Mar 2026 08:00:39 +0000
Manifest this update: Mon 23 Mar 2026 08:00:39 +0000
Manifest next update: Tue 24 Mar 2026 08:00:39 +0000
Files and hashes: 1: 1jLJCus46gm-AStfLL9q2M5Ho3g.roa (hash: XrU3m/+eSwJdl/VMMh61KI+6fAsJ3/LwxcvviYIdgKo=)
2: QdrNcN-oAM5Z8NA93nywrdwjlpY.roa (hash: dR7J85RI6taLvzWRGM0v5+kdTnGBa4MyfOc9jNOLw3w=)
3: elsD4kg77RNDh7_DBHoTmJ_epB8.crl (hash: Qm1CI6SqwTuMbvUjSu77Gdm9jOPCwCXVfH3sBkupBf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:19:b5:d4:04:4a:86:e4:b7:09:9d:c4:95:46:94:b0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Validity
Not Before: Mar 23 08:00:39 2026 GMT
Not After : Mar 24 08:00:39 2026 GMT
Subject: CN=73f9afec74ea18c856e7bc3fc12454547c9c8667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:dd:0f:26:6e:cc:f9:cf:37:94:90:81:9e:
1c:61:f7:b0:dc:69:8b:91:e9:66:52:71:d5:b3:3d:
f9:fc:be:f9:f0:ac:56:e2:8a:ee:e0:eb:75:1c:3b:
5f:30:66:86:eb:5a:07:47:93:07:2e:f7:55:a1:61:
91:02:a1:cf:f0:65:9c:43:4c:a4:07:12:67:68:42:
5a:cd:f8:4d:e0:98:b5:34:fb:5b:98:14:cb:b7:b0:
d6:7b:32:1a:bb:fb:15:6f:82:10:e3:c3:cf:d8:6c:
55:2b:4b:3e:db:c0:38:41:0f:04:6b:5c:ca:e6:1d:
74:cb:8d:5d:f2:3b:93:7f:db:17:14:30:a2:c8:af:
d2:9b:49:e3:23:67:f4:bd:36:8a:e3:35:a0:94:fb:
b7:0a:9c:63:e8:b4:08:a3:4a:9d:91:88:af:12:e2:
9d:fa:53:d5:36:ae:8e:f3:a6:fc:90:7b:81:ee:a5:
e1:2a:bf:58:d2:b1:e1:68:d2:69:a2:b8:30:d9:6f:
91:eb:7d:0b:77:62:52:16:55:a8:f8:a6:c0:4d:85:
a4:1e:41:58:6e:22:28:e8:18:49:6a:b0:5a:17:61:
86:d4:5b:18:c8:40:e4:c6:d6:02:3c:50:0c:a3:2b:
c9:20:aa:e1:f7:1c:69:75:73:6d:fb:5d:45:94:0b:
4d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F9:AF:EC:74:EA:18:C8:56:E7:BC:3F:C1:24:54:54:7C:9C:86:67
X509v3 Authority Key Identifier:
keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:51:40:8c:2e:4d:29:89:51:5d:97:15:63:a9:3d:0a:d9:60:
f1:14:3f:52:07:d7:09:90:54:a8:38:4f:79:60:d7:5e:ce:16:
e1:46:82:db:f0:af:49:4a:94:aa:8e:c6:ff:73:9e:88:9a:89:
ac:54:41:96:7d:18:c3:d8:4a:e1:c5:0d:71:72:d3:aa:1d:84:
86:29:89:8f:30:0a:eb:7c:c3:85:15:47:a7:cf:a3:d6:91:75:
23:bc:7d:26:ce:2d:64:a2:a3:85:4f:82:0a:26:83:65:f9:74:
93:c3:0b:e4:6d:50:17:1d:00:82:3a:11:60:ff:22:f1:91:66:
4a:9d:83:7c:01:67:5a:fd:78:fa:9c:47:bf:e4:6c:23:51:0c:
92:54:c5:d3:74:61:28:9f:9d:b7:16:b7:d5:f7:73:bf:39:3c:
31:66:4f:fd:ab:84:22:0c:10:fd:53:ad:84:39:92:04:34:12:
8f:45:78:aa:d7:a2:26:6c:a9:f6:b1:e4:10:69:4a:f5:75:f2:
5f:17:ce:ae:3c:df:d9:e2:15:35:a6:18:d3:c1:43:88:0e:a9:
5c:48:3d:92:7b:a8:59:59:08:34:e4:e6:a6:80:cb:e7:03:9a:
de:44:9a:3e:9d:ac:fb:28:b1:0c:2f:4c:5c:9f:ca:90:eb:f6:
dd:dc:89:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 15:24:57 2026 by rpki-client