Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.mft
File: eBC14tQZE_koo06ZYbf8iWSFAEY.mft (raw, json)
Hash identifier: HjhrTXVqCikoZ0xPDyJFgbkOS7lFtum8EdEyXSvyloU=
Subject key identifier: F3:93:B7:A3:28:4E:EA:FB:EA:93:C5:0F:12:1F:1D:05:8C:C6:E2:CD
Authority key identifier: 78:10:B5:E2:D4:19:13:F9:28:A3:4E:99:61:B7:FC:89:64:85:00:46
Certificate issuer: /CN=7810b5e2d41913f928a34e9961b7fc8964850046
Certificate serial: 019D3865596374D32B2F08172BBC908B105A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBC14tQZE_koo06ZYbf8iWSFAEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.mft
Manifest number: 01DF
Signing time: Sun 29 Mar 2026 07:00:59 +0000
Manifest this update: Sun 29 Mar 2026 07:00:59 +0000
Manifest next update: Mon 30 Mar 2026 07:00:59 +0000
Files and hashes: 1: bZ6TxPdDApP9_3CEqUXc2k8imCI.roa (hash: liE84q2Y1cQq3HAr1HpbOeLVvLrmd4qM5vRMAbTtCkw=)
2: eBC14tQZE_koo06ZYbf8iWSFAEY.crl (hash: nVhja5eIUagHiu8rdT5Px40H8Zzfpag0UN6xsG4B+Gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eBC14tQZE_koo06ZYbf8iWSFAEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:59:63:74:d3:2b:2f:08:17:2b:bc:90:8b:10:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7810b5e2d41913f928a34e9961b7fc8964850046
Validity
Not Before: Mar 29 07:00:59 2026 GMT
Not After : Mar 30 07:00:59 2026 GMT
Subject: CN=f393b7a3284eeafbea93c50f121f1d058cc6e2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4b:3a:f1:72:8b:71:fa:95:83:1f:2b:b8:55:
16:ce:0f:35:61:41:e7:71:2a:c1:0a:53:c6:bb:5e:
4a:ee:36:5d:19:5c:cc:45:2d:83:20:1f:3a:59:50:
af:de:80:aa:f3:1f:b9:e5:44:ae:32:d1:58:85:b1:
70:dc:4f:73:42:92:e1:f2:50:ee:4a:00:69:08:78:
ef:e1:a9:1b:77:67:75:90:b4:be:b6:5d:71:ef:ff:
bc:ea:6e:99:19:37:1c:ef:c6:b0:37:a3:b3:bc:cd:
dd:f8:af:22:cb:b8:1a:ae:91:e5:ea:e5:c5:3f:85:
bf:c5:38:6f:7e:72:21:61:a7:80:1b:72:c6:12:a7:
f7:8a:95:51:f9:b5:c3:de:3a:5a:9a:aa:43:cf:66:
0d:66:d2:29:5f:62:b4:12:f3:ed:55:8a:fd:11:f8:
9b:fb:7d:9e:30:20:8d:e1:74:fc:ad:38:dc:b7:84:
7b:ee:89:b4:3b:cb:35:ff:34:e3:8f:f0:f4:d0:1d:
ff:63:22:9c:91:30:a8:5f:73:bf:a5:4f:0b:7a:0c:
b2:45:45:d0:41:cf:12:8a:0e:ef:14:6d:a5:77:72:
e4:8d:28:66:03:39:d4:c8:c0:af:90:a9:a3:50:91:
17:c0:8f:d6:59:eb:fd:75:84:4a:2d:ed:71:56:79:
db:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:93:B7:A3:28:4E:EA:FB:EA:93:C5:0F:12:1F:1D:05:8C:C6:E2:CD
X509v3 Authority Key Identifier:
keyid:78:10:B5:E2:D4:19:13:F9:28:A3:4E:99:61:B7:FC:89:64:85:00:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBC14tQZE_koo06ZYbf8iWSFAEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:78:57:8e:a9:25:3a:cd:f8:7c:61:5c:78:53:f4:b3:51:9e:
49:c3:dc:13:a0:7b:1f:95:2d:2c:47:9a:98:c1:ff:bf:2b:af:
79:59:95:93:7c:10:e0:36:97:25:ed:0e:f0:d8:8c:30:96:ab:
32:0a:73:16:41:57:42:59:f2:81:38:cd:eb:3a:37:c2:97:39:
14:16:15:ba:23:73:65:ff:0c:6b:f0:26:fc:db:32:ba:12:a9:
31:b1:71:49:a5:c5:5e:22:d4:23:4e:19:80:ec:25:a3:7b:25:
3a:d8:c3:22:f0:ac:0d:31:fc:85:79:60:77:41:c1:9f:b3:84:
3e:71:db:38:92:92:d1:82:32:e6:45:48:a7:56:31:c1:64:20:
39:db:7e:b8:c5:4d:8d:b7:65:4a:90:b3:e0:c3:8c:7f:21:cd:
ea:70:53:a4:13:76:ed:b7:91:6f:9e:3e:d8:da:13:e1:cd:b5:
fc:03:ba:e7:0c:cd:d6:72:30:88:da:ec:86:73:74:4c:12:22:
d8:3b:9f:08:75:b9:69:5d:69:9e:ce:87:74:01:38:4d:de:77:
fa:c7:a8:6b:f5:5a:cf:04:e4:09:b0:7d:dd:19:c6:30:ca:81:
11:91:88:8d:6a:92:fd:f7:fa:ec:1c:74:d5:6f:c1:9f:8b:65:
f8:0b:bf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:12 2026 by rpki-client