Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
File: eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft (raw, json)
Hash identifier: 0au1QNm0Y2dK2xS+8oeOE9JctE6LZ3iSwkGyARhh8So=
Subject key identifier: 67:9E:54:3F:93:6D:2B:30:6B:8B:9C:5F:9E:85:07:E9:63:9F:05:2E
Authority key identifier: 78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F
Certificate issuer: /CN=78d32c121735449f1538ff0036f4abd0600a825f
Certificate serial: 019D37C0FA091D0493A46EB7A0674FE1D5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
Manifest number: 0434
Signing time: Sun 29 Mar 2026 04:01:26 +0000
Manifest this update: Sun 29 Mar 2026 04:01:26 +0000
Manifest next update: Mon 30 Mar 2026 04:01:26 +0000
Files and hashes: 1: 8NrxfJaCOnAAkLXNQJ1IZ-JOwSI.roa (hash: slewiApnTMdXf2TymBJD1AvESrA5YBZngXCsDqMecns=)
2: eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl (hash: DcNOppMZ5gPThOe8uee4dV0cW4XT2gwO+Zegaeyyi4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:fa:09:1d:04:93:a4:6e:b7:a0:67:4f:e1:d5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d32c121735449f1538ff0036f4abd0600a825f
Validity
Not Before: Mar 29 04:01:26 2026 GMT
Not After : Mar 30 04:01:26 2026 GMT
Subject: CN=679e543f936d2b306b8b9c5f9e8507e9639f052e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:e5:24:d4:84:c5:12:1c:38:a4:94:e7:f3:
50:bf:3d:16:6d:48:ef:91:52:09:b8:4f:9d:e2:e3:
54:cc:67:fe:73:88:36:10:89:2b:65:36:f3:ac:ce:
4d:b4:db:e0:07:0f:e3:15:2a:d8:5a:54:5f:a1:12:
89:83:2b:92:19:0c:2d:90:3a:2d:5a:cc:dc:6d:ae:
3a:9e:2e:d8:1a:39:96:18:86:a7:3a:c2:a8:b2:71:
c5:e8:73:9c:05:10:12:1b:c6:28:10:f6:5f:34:43:
4a:32:f1:91:32:62:f1:0d:05:c7:2e:cc:3f:27:5e:
b6:af:64:2d:b9:3f:24:2f:ef:55:43:ee:c8:58:d8:
90:25:d6:4d:99:e2:42:ff:60:9e:ca:84:14:d4:79:
94:02:91:c5:f7:6a:52:a7:e0:6d:ad:36:d7:33:af:
5c:b6:8f:4a:b3:de:8a:00:32:be:88:24:e5:d0:20:
f8:9d:cc:70:62:08:73:3a:71:57:14:33:4d:b9:47:
85:52:0d:ed:f2:de:69:12:ba:96:11:35:54:30:11:
ef:b8:fa:81:8c:92:17:a4:db:53:df:2b:b5:9f:77:
21:fb:98:a2:6b:6a:f9:b0:d6:85:44:63:5b:9d:75:
ba:2f:98:5c:8d:b7:c6:7b:1a:cf:f6:bf:22:2a:ee:
5c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9E:54:3F:93:6D:2B:30:6B:8B:9C:5F:9E:85:07:E9:63:9F:05:2E
X509v3 Authority Key Identifier:
keyid:78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c7:34:c8:48:4e:08:76:d5:78:7a:e4:76:a5:5b:00:d1:79:
e1:d8:35:00:d9:eb:a8:64:01:d3:19:e2:69:c5:52:03:84:e3:
ae:08:c7:24:c1:3d:39:09:a1:57:ba:d3:d3:ee:42:b4:3f:36:
51:8c:3f:6a:69:72:ec:6d:17:c2:35:b7:90:d0:7e:ec:9e:da:
91:dc:c1:6a:0d:76:91:e7:6b:8e:67:2d:9b:b6:29:ef:83:ce:
f5:8f:1a:e1:22:36:08:f5:de:97:73:94:aa:bc:ed:94:ac:bc:
76:6b:e7:e4:ee:49:7c:26:ee:f3:7c:78:81:f1:1c:b6:41:9d:
c0:08:f0:db:ef:20:d7:bf:84:a4:95:03:62:af:3c:1a:cc:73:
2d:de:c4:8f:6d:91:f4:5e:2a:59:4b:e4:b2:74:1f:dc:9c:25:
33:08:37:01:be:71:e4:94:ea:02:2f:e2:7f:99:65:73:5f:a4:
fd:a2:a3:b5:5f:ec:29:c6:37:8d:c5:4a:bc:35:1c:0f:a0:4c:
1b:e1:8c:33:65:8f:c5:03:84:1f:e4:d8:8d:03:fa:b2:b2:82:
ad:a8:67:f6:cd:c4:6b:83:f3:bb:7e:c4:9f:1a:57:ff:b1:7d:
63:b0:2e:17:90:1a:49:72:f6:36:e8:64:bc:94:35:ef:59:f6:
d0:ae:3f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:07 2026 by rpki-client