
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
File: eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft (raw, json)
Hash identifier: +apezDXH2InEC2hQXspzjGc8GlXSuXq0Td6KUrJuFFE=
Subject key identifier: E8:F7:9C:40:DB:F3:FC:1E:01:7A:77:ED:B4:FE:43:D9:02:DE:E2:2C
Authority key identifier: 78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8
Certificate issuer: /CN=78024d480b37705fa0091b5774174e80fdd8add8
Certificate serial: 019D382E11B4DDFF9F39139D5C531730C659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
Manifest number: 117C
Signing time: Sun 29 Mar 2026 06:00:36 +0000
Manifest this update: Sun 29 Mar 2026 06:00:36 +0000
Manifest next update: Mon 30 Mar 2026 06:00:36 +0000
Files and hashes: 1: LT7GFR0jf0xcBNNPyycF_GViPzE.roa (hash: oFSEPnzKQMXkquMCR19L9olzLlP6zAcGwbhD6Y2o3Lc=)
2: eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl (hash: /aR5c0xlZAkgGc+IusFrlzBb632owcth6sMb45iT1As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:11:b4:dd:ff:9f:39:13:9d:5c:53:17:30:c6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78024d480b37705fa0091b5774174e80fdd8add8
Validity
Not Before: Mar 29 06:00:36 2026 GMT
Not After : Mar 30 06:00:36 2026 GMT
Subject: CN=e8f79c40dbf3fc1e017a77edb4fe43d902dee22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ea:8d:a8:c4:b5:15:3a:89:34:23:87:43:75:
c1:a7:91:09:a2:af:3c:df:e5:3f:ea:ab:0e:3d:0b:
9c:98:eb:57:f1:51:2f:9d:68:f5:f7:c9:d7:96:36:
ac:4e:ee:55:40:0a:cb:01:0d:44:f5:22:3e:8b:df:
83:01:b0:42:4a:85:52:99:f4:a1:60:c1:f9:18:56:
b1:15:8e:db:22:f5:77:b0:8a:ec:85:5a:c9:97:e1:
3d:22:39:17:bb:57:6e:45:5c:28:e3:4c:2b:e3:f0:
90:47:5f:6c:ff:e3:ec:54:6d:c5:b8:d7:1d:f4:dc:
bd:88:0a:19:93:fa:b1:7d:d1:f5:1c:06:f0:ac:25:
3c:3c:d3:90:5e:cd:86:86:ce:4c:4a:08:28:79:0c:
af:fa:bd:ff:36:c3:32:ef:3b:68:0d:e8:d7:1f:58:
67:d4:b4:ec:0f:2f:71:c6:5e:21:0e:67:2b:10:65:
e7:3c:1c:0a:bb:0e:af:c5:89:89:d7:2e:1d:00:1b:
41:93:cc:52:5f:3c:40:a6:80:86:de:39:f8:b2:7f:
d0:81:64:0e:e4:65:78:e8:c8:41:0b:1d:49:b6:42:
78:b5:33:de:b1:4a:85:94:bd:f9:a2:a7:33:39:0d:
42:80:4e:66:f8:f7:8d:99:99:9f:4a:f5:e4:ef:c3:
48:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F7:9C:40:DB:F3:FC:1E:01:7A:77:ED:B4:FE:43:D9:02:DE:E2:2C
X509v3 Authority Key Identifier:
keyid:78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:35:ea:d5:eb:fc:97:e1:90:28:30:08:7d:c9:eb:3a:4a:3e:
00:f7:9e:85:27:15:da:b8:5e:f7:a0:18:a5:fa:c6:a2:4c:8c:
7f:49:69:89:14:82:32:6c:4c:55:5c:f1:63:4f:fe:4a:4a:64:
1c:a1:89:95:a9:51:8d:9b:6b:e4:71:00:be:3c:9b:51:57:c9:
50:fe:9c:da:f8:ab:fa:2e:75:ba:7e:2d:44:27:4f:83:ef:b2:
65:66:c7:b6:e8:24:ad:9d:69:55:2d:b7:66:87:ad:b3:7e:07:
08:74:29:88:33:a7:0d:68:f3:4c:e2:cd:7c:5e:cc:59:cf:8e:
7e:8e:46:25:7e:44:75:f5:83:21:89:e7:5f:19:7d:66:d7:d3:
81:27:38:07:c2:c9:fe:71:7d:f9:74:e4:9e:c8:65:bc:1b:a8:
f2:06:24:a3:43:6f:8d:a5:5e:9c:7f:61:c5:15:94:61:13:89:
c8:de:d8:1e:95:87:8c:f9:c1:83:03:de:7a:3f:ab:85:f0:89:
ac:d5:a8:6d:27:1a:6d:68:71:e2:99:94:bb:34:28:b6:0d:23:
3c:ae:7b:c3:88:25:e5:e7:37:21:78:47:4d:9a:22:82:21:07:
bb:c8:a9:5b:94:4f:2c:81:f1:9a:14:40:cf:e3:04:d8:82:86:
71:e0:4d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:01 2026 by rpki-client