Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: g4esZ6QVtIqpPYhUmlUY/EMrqhbb4vVpno2fnIqMSbk=
Subject key identifier: 0B:F3:F9:2B:E4:9E:3B:11:98:4B:9C:2D:C7:6B:4E:E4:4A:C7:10:4C
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 019E31176DE0D6C59FBFB086ABE1DA06FB84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 18A3
Signing time: Sat 16 May 2026 14:01:19 +0000
Manifest this update: Sat 16 May 2026 14:01:19 +0000
Manifest next update: Sun 17 May 2026 14:01:19 +0000
Files and hashes: 1: 03K81b7pfVVjypqVCITF7p4JxKM.roa (hash: PP40BChMOh4s2ABeNP+SORVGIO6bgC5+kty6waeJlqk=)
2: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: JcG7z0Htz4bUuZNivJyS8Ip9xHe85Pwt4X8pUU1PyZQ=)
3: kY0iPrlp2DFcIszfKgZ7jk3A9ls.roa (hash: B98fM5TLrUnwgXpz2kR4adHMCSlg8M1bTdaWmo1lkZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:6d:e0:d6:c5:9f:bf:b0:86:ab:e1:da:06:fb:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: May 16 14:01:19 2026 GMT
Not After : May 17 14:01:19 2026 GMT
Subject: CN=0bf3f92be49e3b11984b9c2dc76b4ee44ac7104c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:c6:b6:49:99:72:61:f2:ad:af:c4:3a:bd:
1a:e8:e8:1a:17:05:59:8e:8f:99:fa:20:c6:33:42:
db:dc:a3:63:a1:07:05:87:f2:6c:a4:d2:36:b6:87:
a1:49:f6:18:be:97:8b:df:a0:40:b9:47:f0:8f:a1:
3e:db:4a:7c:c2:e2:22:66:18:ed:b2:5f:b6:0a:ee:
6b:96:83:19:47:62:fe:f6:a4:16:25:49:87:c5:78:
34:33:e0:fd:1a:e2:09:ac:ca:82:95:73:76:3c:7b:
e0:9a:04:d1:4d:2b:b2:f5:75:fc:09:ce:65:16:01:
42:be:c6:b9:30:cd:83:89:6d:0c:76:93:93:e5:93:
5f:92:71:34:86:d7:8e:42:51:7a:ff:59:a5:fb:1b:
d3:b9:37:0b:61:11:d4:31:28:e4:c0:3c:57:5a:8c:
06:9c:aa:9d:c7:07:e3:2e:e1:94:e3:dd:d9:9b:49:
af:30:53:ee:6c:40:35:21:17:16:69:10:91:e8:42:
0a:77:d8:14:53:0f:0b:b1:94:d1:49:b8:f4:50:d6:
8d:ee:37:f2:2f:3f:5a:4e:db:af:f4:d1:92:a6:82:
3b:71:54:94:16:0c:4a:1f:af:94:75:d2:b7:8f:be:
40:84:91:1e:d8:21:63:74:be:6e:7f:43:db:9e:fd:
a5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F3:F9:2B:E4:9E:3B:11:98:4B:9C:2D:C7:6B:4E:E4:4A:C7:10:4C
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:07:a2:36:3f:e9:c7:3c:92:f4:99:88:20:c1:50:7a:20:5c:
6b:f5:5d:8c:b7:ed:6f:73:26:f0:d8:f4:e0:f9:94:2a:c1:2a:
10:be:11:cd:9d:d9:e7:b0:bf:03:fd:3e:05:7e:bb:67:b2:20:
da:0c:58:01:0b:e2:e4:a0:df:9c:56:2a:6a:fe:88:e7:4a:a6:
27:cf:50:88:74:e7:44:d0:a1:2a:d6:27:94:60:45:6a:f6:b1:
a4:85:d5:7f:bd:65:73:f5:2e:8a:80:f4:f3:02:3d:d1:8e:69:
30:88:b2:57:2d:74:4a:b7:2e:b9:61:34:16:51:41:96:be:64:
fe:89:af:7f:bb:a5:79:4a:00:49:f9:a5:80:8d:ae:8d:e4:94:
13:d2:ed:0d:d9:f9:d3:15:46:32:df:52:a8:92:7c:71:fd:9b:
0c:33:8a:91:ae:58:36:62:14:68:bc:71:51:47:fb:fc:39:18:
dd:1e:db:28:26:5f:55:20:f2:34:84:33:32:32:fc:80:ff:79:
37:63:08:97:ff:ba:70:3e:79:49:fd:ff:07:22:33:62:ca:d5:
6a:a6:3c:9f:ca:6b:18:ab:59:07:c9:7d:04:ef:e4:6d:e4:15:
89:c1:0a:ab:f5:9b:f1:20:6c:af:12:ff:29:68:ad:74:a5:5a:
3f:a9:4f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:02:07 2026 by rpki-client