Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: TL+D0woUu4A1CNB5Nn5HFLQUptj2I5TkpjkCOLaJIzM=
Subject key identifier: E0:C1:C0:B0:5E:77:44:7C:88:62:05:64:82:A7:E7:64:86:8C:B3:0A
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 019D37F71D06827B1E6268297DACD49F4031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 05:00:34 +0000
Manifest this update: Sun 29 Mar 2026 05:00:34 +0000
Manifest next update: Mon 30 Mar 2026 05:00:34 +0000
Files and hashes: 1: 03K81b7pfVVjypqVCITF7p4JxKM.roa (hash: PP40BChMOh4s2ABeNP+SORVGIO6bgC5+kty6waeJlqk=)
2: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: zBK8exsrU2HJkabirzDg+5W3s+N5dwq7I7YKBmDQeIs=)
3: kY0iPrlp2DFcIszfKgZ7jk3A9ls.roa (hash: B98fM5TLrUnwgXpz2kR4adHMCSlg8M1bTdaWmo1lkZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:1d:06:82:7b:1e:62:68:29:7d:ac:d4:9f:40:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Mar 29 05:00:34 2026 GMT
Not After : Mar 30 05:00:34 2026 GMT
Subject: CN=e0c1c0b05e77447c8862056482a7e764868cb30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:07:fb:2f:1d:39:0f:56:5e:6b:61:12:0d:d5:
85:38:70:86:23:af:1d:59:25:7c:53:5c:b2:61:44:
3d:65:d0:08:39:25:1c:13:26:24:77:a1:64:14:f6:
0f:23:96:7e:d1:52:66:f3:8c:f4:39:15:3a:ec:11:
26:60:35:07:5c:f3:4d:59:16:90:8f:84:f7:9b:ba:
80:d2:2c:47:e2:aa:c6:76:f4:49:88:e2:b0:34:c3:
52:75:a6:38:e6:49:b9:c9:ad:a7:82:77:cc:06:5c:
cd:d8:01:58:1a:28:c2:7c:26:b4:48:2f:c1:52:f1:
19:b9:87:25:dd:ea:fa:c4:d1:a6:ea:99:37:b2:82:
09:76:8b:0d:5b:f6:93:50:40:47:f9:b4:35:08:25:
7c:2f:6b:d1:77:d8:5e:f3:c7:0b:c9:5c:e7:d1:2c:
95:7f:d3:e5:be:b4:48:cd:45:e0:f7:3f:f3:45:87:
bb:0e:a5:c6:16:8f:8f:60:94:3a:58:23:21:ee:50:
b8:c0:2b:97:ab:53:11:56:2e:2d:fe:5e:d5:4c:3a:
d7:e8:a2:8a:73:24:15:e8:35:dc:cb:d7:86:15:20:
4e:f0:9d:d7:8c:0c:9f:c3:e1:25:cb:71:7d:35:ec:
13:e8:51:cc:79:64:be:42:71:a1:10:38:e5:87:29:
e3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C1:C0:B0:5E:77:44:7C:88:62:05:64:82:A7:E7:64:86:8C:B3:0A
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:45:7f:71:45:66:1e:d5:e7:b8:a8:2a:39:00:66:60:2e:c8:
60:25:f1:db:ee:d9:7a:fe:03:a1:63:c9:21:03:8b:16:4a:2b:
56:2d:c6:1d:f4:0b:6a:c6:70:38:ba:02:6c:ba:07:19:cb:17:
54:3f:1c:66:c7:ea:1d:4f:67:b5:53:26:62:05:5f:e5:17:30:
8a:fa:b2:1e:80:60:fd:86:09:ae:7f:94:37:ec:95:ee:66:16:
d8:ee:b4:9e:f5:c0:89:06:93:37:e1:02:bd:61:af:4f:dc:f3:
77:dd:4c:6f:df:a4:22:cc:9c:b2:25:e8:7c:39:ea:59:8d:e8:
fa:c5:a3:12:52:30:01:09:f0:23:25:da:f7:71:49:72:1e:03:
95:05:11:08:f0:1c:8f:53:1c:83:57:41:53:51:c1:57:71:79:
ca:83:ab:ad:52:8b:ef:f6:ee:85:44:3b:4f:87:34:fc:88:72:
12:38:92:eb:52:01:18:25:e5:15:d4:e9:05:ab:39:22:6a:a1:
ce:41:9d:19:de:70:c5:58:3f:41:87:e5:7c:0c:32:b5:e1:ca:
c6:79:5b:d6:7e:2e:0e:24:5c:c6:6b:83:78:87:1a:f2:52:f5:
3b:31:3a:dc:92:d1:f8:15:f0:93:e0:9e:73:1a:3c:b8:0f:6a:
f4:53:4a:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039x0GgnseYmgpfazUn0AxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMWYxMzg4MmRkMDZkMDk4ZWM0OWE3NTkxMDEzMjliMWYy
MDFmMWQwHhcNMjYwMzI5MDUwMDM0WhcNMjYwMzMwMDUwMDM0WjAzMTEwLwYDVQQD
EyhlMGMxYzBiMDVlNzc0NDdjODg2MjA1NjQ4MmE3ZTc2NDg2OGNiMzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Af7Lx05D1Zea2ESDdWFOHCGI68d
WSV8U1yyYUQ9ZdAIOSUcEyYkd6FkFPYPI5Z+0VJm84z0ORU67BEmYDUHXPNNWRaQ
j4T3m7qA0ixH4qrGdvRJiOKwNMNSdaY45km5ya2ngnfMBlzN2AFYGijCfCa0SC/B
UvEZuYcl3er6xNGm6pk3soIJdosNW/aTUEBH+bQ1CCV8L2vRd9he88cLyVzn0SyV
f9PlvrRIzUXg9z/zRYe7DqXGFo+PYJQ6WCMh7lC4wCuXq1MRVi4t/l7VTDrX6KKK
cyQV6DXcy9eGFSBO8J3XjAyfw+Ely3F9NewT6FHMeWS+QnGhEDjlhynjbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODBwLBed0R8iGIFZIKn52SGjLMKMB8GA1UdIwQY
MBaAFBIfE4gt0G0JjsSadZEBMpsfIB8dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUt
MGQyNzc2NzM3NGVjLzEvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUtMGQyNzc2NzM3NGVj
LzEvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvEV/cUVm
HtXnuKgqOQBmYC7IYCXx2+7Zev4DoWPJIQOLFkorVi3GHfQLasZwOLoCbLoHGcsX
VD8cZsfqHU9ntVMmYgVf5RcwivqyHoBg/YYJrn+UN+yV7mYW2O60nvXAiQaTN+EC
vWGvT9zzd91Mb9+kIsycsiXofDnqWY3o+sWjElIwAQnwIyXa93FJch4DlQURCPAc
j1Mcg1dBU1HBV3F5yoOrrVKL7/buhUQ7T4c0/IhyEjiS61IBGCXlFdTpBas5Imqh
zkGdGd5wxVg/QYflfAwyteHKxnlb1n4uDiRcxmuDeIca8lL1OzE63JLR+BXwk+Ce
cxo8uA9q9FNKQQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:29 2026 by rpki-client