Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
File: eHnrndYtUa-lAS76Gp0QxmQAxEU.mft (raw, json)
Hash identifier: ar2NdJu9bEkNblULutWHNvz+HXEVT6yQOvePXjjLWSo=
Subject key identifier: B5:51:C6:45:60:EB:1B:59:B6:51:BF:D5:73:D3:80:0C:73:3B:C4:62
Authority key identifier: 78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
Certificate issuer: /CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Certificate serial: 019DDE441A64D1F0218F835A5DD0BCC9D35C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
Manifest number: 18E9
Signing time: Thu 30 Apr 2026 12:01:38 +0000
Manifest this update: Thu 30 Apr 2026 12:01:38 +0000
Manifest next update: Fri 01 May 2026 12:01:38 +0000
Files and hashes: 1: eHnrndYtUa-lAS76Gp0QxmQAxEU.crl (hash: ba2K8NBHDsR2GF/p7ozalYjX4qQLcnZ5BHPDyr7KPak=)
2: u20Y3FANdfmda1Xtsnh_0s435JM.roa (hash: S9BpRBE4oWaa9W/9qIMquDTbVfqR1JKGeq8wj5z0rN4=)
3: w2BN5Okc8CAi7WJd5D6lCmGLa9o.roa (hash: U6ZbAgCOETb02sjUGl8fc/vrWrB/9CMYg74fhgDMPO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:44:1a:64:d1:f0:21:8f:83:5a:5d:d0:bc:c9:d3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Validity
Not Before: Apr 30 12:01:38 2026 GMT
Not After : May 1 12:01:38 2026 GMT
Subject: CN=b551c64560eb1b59b651bfd573d3800c733bc462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:db:2d:da:b5:8e:98:05:1e:9b:7c:dd:48:
42:5a:0c:36:8e:0f:1e:9f:43:a5:c4:91:a8:be:17:
73:f1:f1:da:7c:f6:7b:9b:29:8f:44:66:c9:a4:c6:
10:e7:3f:1d:ef:25:68:f2:be:a0:1d:ef:74:ea:fc:
e2:19:48:d5:80:86:a1:27:ef:3e:a6:7c:79:10:25:
fc:3d:26:5a:f5:2f:23:19:9f:e8:ca:ed:3c:49:c8:
a9:b8:e5:64:52:b9:2a:ce:4a:1e:46:32:33:c0:8e:
1a:24:9a:5a:83:4b:ff:8f:d9:a1:eb:04:71:60:da:
d2:03:5c:ec:01:1b:98:13:ce:d4:58:42:d9:a8:31:
57:13:89:b9:27:b4:bf:d0:4e:16:55:ae:f7:6d:ca:
e6:05:55:53:84:74:fb:4c:b4:55:b0:9d:f1:fe:0a:
e8:7b:dd:a2:b7:bf:1f:50:a7:66:48:5d:42:01:19:
41:46:8f:52:41:f1:38:0c:d0:48:2a:d9:f4:1d:b3:
25:05:d2:4d:17:f4:bf:68:15:2b:b5:9b:28:46:34:
7e:94:6e:83:14:13:c9:0d:94:51:18:7c:a1:a1:49:
57:fc:05:18:e6:97:28:ae:8f:dc:fe:dd:4c:f1:bb:
1d:b1:b3:57:c1:21:fc:60:b4:fa:9c:34:31:e6:cf:
af:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:51:C6:45:60:EB:1B:59:B6:51:BF:D5:73:D3:80:0C:73:3B:C4:62
X509v3 Authority Key Identifier:
keyid:78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:25:d2:64:2c:15:9b:e7:77:63:2f:ca:62:65:62:22:94:0e:
f8:81:a8:f8:43:df:6b:31:6a:31:66:e0:5f:48:0f:0a:a1:52:
e2:e6:38:d2:32:86:5d:ef:d6:16:66:fe:8d:df:ce:d6:52:ce:
00:cd:69:2d:7c:72:6e:94:15:c3:0b:10:da:a4:64:ee:7a:cd:
19:e9:06:2f:8b:f1:73:73:09:8c:3c:b1:7d:0d:c3:5b:f7:e8:
ad:27:7a:1e:95:b5:49:62:d1:46:e7:12:ec:ab:1d:7b:65:5c:
23:e4:3b:3c:67:6e:55:e6:a5:b8:1f:79:e9:99:14:27:c2:b0:
33:4f:ac:ce:82:58:24:62:35:22:88:ff:8c:76:22:65:3e:ad:
a0:ea:bb:4a:cb:e6:9e:8c:3d:b5:86:8a:65:43:22:ac:76:8e:
f2:56:f1:a3:b5:5f:27:93:92:ed:cb:d8:c5:79:85:2c:f0:14:
e5:54:25:0d:00:79:4c:69:55:dd:94:33:0d:ea:b7:59:62:df:
41:9b:b5:03:d4:51:32:3b:42:20:5a:bc:60:b3:b0:66:fe:8b:
cc:cc:dc:f1:cf:2f:0a:5f:63:dc:17:8d:18:6f:87:01:01:9a:
cc:e0:03:aa:11:50:10:86:71:73:7d:c6:9c:62:12:97:c8:c7:
92:24:98:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:59:32 2026 by rpki-client