Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
File: eOe6jAiFO-VUxZTe0VammD66EFU.mft (raw, json)
Hash identifier: /4VycpPhd0NYIRvQSWGNzEMndYz97yKkBeewxaJOV7U=
Subject key identifier: CA:9C:BB:78:B6:D8:91:55:D3:CF:37:94:AA:7E:55:53:65:25:87:01
Authority key identifier: 78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55
Certificate issuer: /CN=78e7ba8c08853be554c594ded156a6983eba1055
Certificate serial: 019D371B8EB618E5627308B7A99155590C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
Manifest number: 152C
Signing time: Sun 29 Mar 2026 01:00:45 +0000
Manifest this update: Sun 29 Mar 2026 01:00:45 +0000
Manifest next update: Mon 30 Mar 2026 01:00:45 +0000
Files and hashes: 1: eFIkHLGyOWtI88D-W07OWbj9UaI.roa (hash: yGXkgrRDM12DJQ8ZdY8dTLzVgsSMaN3SFaLy13WWzIM=)
2: eOe6jAiFO-VUxZTe0VammD66EFU.crl (hash: lduHzj4KI+Zr6J39MDFSKSe9efRov5hrqGZFyU6pby0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:8e:b6:18:e5:62:73:08:b7:a9:91:55:59:0c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78e7ba8c08853be554c594ded156a6983eba1055
Validity
Not Before: Mar 29 01:00:45 2026 GMT
Not After : Mar 30 01:00:45 2026 GMT
Subject: CN=ca9cbb78b6d89155d3cf3794aa7e555365258701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:00:47:f2:ff:5d:8f:d6:04:a7:ca:51:0e:0b:
b0:b0:a2:86:fd:ba:4c:17:ca:65:a3:21:55:07:17:
14:32:fa:d7:76:f3:66:58:98:00:56:77:a1:fb:ce:
aa:11:a3:93:ac:5a:4f:bd:09:60:ff:81:e3:c6:b5:
5b:10:d6:7e:5a:e6:c0:4c:6e:0c:61:fb:4f:7c:d0:
8b:a9:bf:2d:3f:9c:a6:85:b1:97:54:ec:29:92:47:
06:89:d1:5f:39:83:3b:89:fb:a5:7d:16:b0:9f:79:
03:ac:f8:3d:a6:05:ad:66:bb:db:84:57:f2:1a:ef:
2d:26:2c:7a:33:04:72:b4:dc:d8:a8:06:73:a2:4c:
ad:c4:42:43:f6:6d:03:b9:23:6a:6f:4b:4f:82:9b:
9c:e5:ef:fa:8c:7c:4e:cd:d2:df:0c:c9:5c:3a:d1:
2b:9b:ad:15:4d:f6:0c:05:7e:f8:07:d2:1c:33:aa:
c2:58:5f:29:a7:c6:e3:aa:00:91:e7:2b:00:06:f8:
6b:c7:7c:92:66:53:f3:ad:6b:fd:59:81:f6:db:a9:
38:85:b5:3d:2e:db:70:54:b2:29:ea:08:8a:b5:07:
d2:73:9d:32:70:22:b0:85:2d:a7:ec:b8:fc:6c:e9:
0b:43:80:a4:c8:d6:57:66:92:11:f7:e8:da:72:2d:
91:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9C:BB:78:B6:D8:91:55:D3:CF:37:94:AA:7E:55:53:65:25:87:01
X509v3 Authority Key Identifier:
keyid:78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:69:77:32:31:d1:11:11:2a:43:91:f0:3e:63:cf:9c:15:6e:
00:39:53:4c:0b:6c:0d:8a:5b:9f:cb:de:95:d1:8a:aa:de:a6:
03:8c:df:bd:34:0d:a4:9f:4d:52:55:42:bb:0e:66:14:62:45:
5f:66:99:d7:80:67:6e:a7:f8:da:d3:82:2f:95:6a:91:f8:2e:
fb:64:00:25:b0:46:9b:90:7a:f6:c5:dc:39:7b:ac:85:4a:dd:
80:81:85:01:ba:f7:4a:55:8d:f5:50:ad:94:61:0a:d1:8d:b0:
3b:45:86:9a:62:5e:c8:46:dd:be:21:54:61:99:24:64:ca:31:
c3:16:c2:21:ad:05:03:ee:40:1d:c9:c1:0f:5d:5a:30:14:4d:
dc:27:0d:4f:d4:cd:c4:82:c3:98:35:fe:f0:9e:6e:4d:07:2b:
03:d5:51:6a:47:42:73:8b:8b:5a:ea:1d:41:3b:1e:e9:ee:35:
c4:e9:6e:d2:32:75:82:c2:ca:b4:6e:c1:7b:7e:6d:90:5b:85:
84:0f:2a:a8:09:d7:4d:2d:d0:20:df:9f:5e:25:c9:32:57:c4:
93:85:c4:7f:6b:18:96:1e:b1:58:17:19:77:d4:03:8d:bb:88:
18:9c:63:bc:4a:c6:d6:eb:14:cc:10:40:82:aa:1b:bb:5b:c8:
e2:1b:4c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:14 2026 by rpki-client