Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
File: eLHb4vrypuffpXTOVRkJYwFfHFM.mft (raw, json)
Hash identifier: FpDIG2gAO8/65GPJ3Y43L/rKuJtIaYy62agUgIX6oew=
Subject key identifier: 61:6D:83:FA:1C:9C:C3:FF:E4:E0:15:11:8A:60:7A:7E:57:BF:C8:A4
Authority key identifier: 78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
Certificate issuer: /CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Certificate serial: 019D37C0D44080A60E663A72BC2371177F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
Manifest number: 187D
Signing time: Sun 29 Mar 2026 04:01:17 +0000
Manifest this update: Sun 29 Mar 2026 04:01:17 +0000
Manifest next update: Mon 30 Mar 2026 04:01:17 +0000
Files and hashes: 1: W0Nemhp4tNTnXPX1F7AWpLPz30I.roa (hash: q0w1RLWAwP0/SOoIQT2u4GQdyaJkPP+XShI2e/oMlPc=)
2: WCLjKmeCgQtKXh-2kHar0wTFzVQ.roa (hash: zRn4amqc3pIfm/L+/ojA95gE8hnWdpUc7Yqxx7Eldy0=)
3: eLHb4vrypuffpXTOVRkJYwFfHFM.crl (hash: m+kvZutLeDFavbxvsBURtyhwYyhuvmjnJ3qHTmE6Rgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:d4:40:80:a6:0e:66:3a:72:bc:23:71:17:7f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Validity
Not Before: Mar 29 04:01:17 2026 GMT
Not After : Mar 30 04:01:17 2026 GMT
Subject: CN=616d83fa1c9cc3ffe4e015118a607a7e57bfc8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:89:45:9c:b2:21:ee:eb:96:44:1d:b1:b5:
dd:2d:6e:2a:9d:f1:c9:9d:ed:f0:d2:d7:37:a8:ac:
34:31:81:60:39:76:f0:f0:1c:42:b7:c9:1d:a9:94:
69:f1:50:fa:74:91:55:39:b5:46:6d:1f:98:b0:a8:
bb:0f:4c:8b:f6:99:1c:78:f9:a7:d6:94:93:b8:2b:
65:68:d1:b7:53:a1:f1:95:91:62:44:b1:47:b4:cb:
66:86:27:15:9f:0f:7d:90:8b:17:0d:b7:16:f8:48:
45:5d:55:46:a5:68:e1:cf:f6:da:94:34:bf:ff:05:
f2:e9:c3:fe:39:5c:97:5f:22:78:a0:76:4a:56:42:
2c:15:71:9b:2f:2c:4d:58:51:f2:1d:e8:0d:05:6a:
1a:9c:35:c6:52:ac:7c:b4:a2:71:a6:4c:40:8a:4d:
fd:10:29:16:04:06:76:3d:49:74:ee:c9:c1:c2:65:
56:dc:82:66:c9:01:ba:0c:7d:07:b9:50:d1:c9:09:
11:03:30:0f:f7:52:70:95:f1:d7:c9:2e:6e:f8:56:
e5:f6:69:09:c8:f6:07:c4:49:a3:00:55:73:28:2c:
16:43:8c:8b:b7:2f:89:ad:56:2f:d0:4a:b4:e6:1f:
bf:f6:97:2c:3c:52:48:aa:fe:07:92:06:00:b0:a6:
6a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6D:83:FA:1C:9C:C3:FF:E4:E0:15:11:8A:60:7A:7E:57:BF:C8:A4
X509v3 Authority Key Identifier:
keyid:78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0f:35:91:d7:0f:94:54:5f:a9:78:86:11:c8:1a:1c:f5:71:
9c:6a:01:de:b0:29:82:31:59:85:ee:23:c3:70:50:13:e3:0a:
cf:bf:74:c8:f3:69:b6:6e:5f:58:19:f8:c9:14:82:4b:0a:6c:
8f:39:ca:03:9a:18:ff:3c:d2:eb:b9:0b:16:3c:f4:61:c9:ec:
1c:31:8d:0e:6e:4d:84:0e:0a:64:cf:54:1a:90:15:34:48:79:
ad:d3:82:01:cf:f5:2f:95:20:3d:f5:ef:a6:8c:15:b8:be:9c:
7d:ce:78:a2:e5:a7:9f:69:eb:01:73:ce:b3:d9:06:2c:00:93:
1d:74:93:a5:e6:bf:f3:82:4f:7c:90:84:28:28:f5:35:1a:85:
dd:e0:2f:d3:29:c2:55:fc:3b:19:3d:5c:b9:04:6a:8c:88:d4:
04:ba:fb:f9:26:8a:99:2a:26:d5:c8:a8:84:b2:ab:d5:3c:23:
d0:42:20:6b:46:4a:3c:29:60:4c:a1:0a:d4:af:50:94:ff:75:
1d:c6:d8:a2:4f:07:fe:1d:f0:39:63:b1:ab:63:18:b9:d2:73:
47:de:48:fb:02:96:a2:d5:8c:c6:c1:04:51:3b:06:2d:c1:6c:
c8:73:a0:f0:05:be:06:d9:0b:e3:d4:c1:72:21:e0:61:f4:1f:
7d:c3:c0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:52 2026 by rpki-client