Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
File: eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft (raw, json)
Hash identifier: notvUEXC1e0R47YEY2vK0X/4+eMG2Ji4j0GC9hSiMEQ=
Subject key identifier: 1B:CF:3D:3A:FD:72:D6:B5:CC:73:57:0E:F5:75:EE:51:8C:26:11:FF
Authority key identifier: 78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5
Certificate issuer: /CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5
Certificate serial: 019D38D32998DF06C384F6385C9819A9BEE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 09:00:55 +0000
Manifest this update: Sun 29 Mar 2026 09:00:55 +0000
Manifest next update: Mon 30 Mar 2026 09:00:55 +0000
Files and hashes: 1: eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl (hash: Yf9PpsHQWz8vaPOwDByy+stANwWUVgq5ALz1nshqOeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:29:98:df:06:c3:84:f6:38:5c:98:19:a9:be:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5
Validity
Not Before: Mar 29 09:00:55 2026 GMT
Not After : Mar 30 09:00:55 2026 GMT
Subject: CN=1bcf3d3afd72d6b5cc73570ef575ee518c2611ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:35:0b:32:4d:36:78:23:88:67:05:ec:c0:34:
78:c8:51:4b:ee:50:5d:66:0d:63:43:b3:4f:6c:19:
b6:46:9f:61:9a:5e:50:aa:16:42:b9:7d:87:39:1c:
c0:7e:f1:7c:d0:ee:68:cf:6c:ff:70:6e:c2:58:d8:
dc:a3:0e:08:cf:1f:a8:bf:d1:24:3a:af:93:34:dd:
2b:bd:48:40:af:95:25:e9:74:56:6c:eb:88:24:88:
9e:0e:2f:f7:f6:fa:cb:0e:2a:cb:99:bc:2c:f9:17:
d2:35:ea:34:06:34:4d:93:c0:7e:a0:45:87:3e:03:
2e:b8:e0:cc:a6:a6:a0:37:e7:ca:2b:17:e4:a2:0d:
08:16:69:47:17:76:6b:55:33:41:20:93:8b:4d:b9:
7e:3c:f6:2d:8d:b7:7b:ab:37:8e:a8:0e:fe:86:02:
0d:62:4f:a1:09:77:6b:62:ee:b4:45:09:1e:a0:06:
ce:9f:9b:17:f1:93:1f:ae:33:4b:b2:7e:a1:5a:5e:
38:72:4c:e3:85:71:b0:f6:15:ea:dc:2b:be:3f:df:
d7:bf:d5:aa:30:93:cb:a7:e8:36:f6:cc:25:8f:c5:
56:be:45:d7:02:f4:f6:98:6d:63:b4:fb:fd:ec:a4:
56:aa:69:e2:a4:36:da:a8:a0:78:38:6f:76:dc:37:
72:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CF:3D:3A:FD:72:D6:B5:CC:73:57:0E:F5:75:EE:51:8C:26:11:FF
X509v3 Authority Key Identifier:
keyid:78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:81:74:47:de:01:d6:d1:54:1b:e2:9c:15:69:24:37:a1:0f:
26:7a:14:2b:1d:55:af:d3:d0:c0:ed:34:79:bc:ea:ab:89:d3:
bb:07:67:67:f2:80:6a:dc:e1:5c:b1:9d:0a:86:9a:d4:99:70:
3a:04:c1:39:ec:dc:e1:15:58:3c:cd:d2:a9:fc:f6:bb:f2:99:
af:7e:8e:d5:4e:67:27:75:59:1a:c2:92:36:a6:0b:ae:91:64:
a5:17:7f:77:0e:43:5a:f6:ce:47:60:e8:94:db:da:ff:10:8f:
5c:78:f1:04:ec:94:5e:5c:6f:b4:6b:e3:b7:0d:b6:89:86:d3:
14:24:24:b0:9e:c1:94:fb:be:52:d1:27:22:66:20:5d:7a:3c:
9d:ec:f0:ff:cc:26:83:8d:b7:1f:d6:40:35:a4:84:31:79:c8:
20:f2:64:4b:37:8e:d3:e7:d9:fc:ad:5e:7a:5e:80:51:60:c4:
a9:58:91:28:3e:69:98:94:11:98:a2:8e:57:4b:c6:07:8c:55:
e8:e4:d1:ef:3b:4f:f1:86:59:49:1d:81:e1:61:23:da:c7:b4:
bf:37:fd:9f:28:e2:99:d3:28:af:c0:07:fc:04:cb:e5:ad:14:
45:43:bb:9e:c3:67:fe:bb:7b:1e:45:48:7e:14:01:4e:92:0e:
6e:a5:3b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:02 2026 by rpki-client