Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
File: ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft (raw, json)
Hash identifier: dgqZzzmswIEqandc9+HC5lKjlSgomOlcVxO9Jpu1Z2I=
Subject key identifier: 78:88:1C:A9:07:09:F6:28:62:82:DC:81:88:8D:4E:F0:E6:9B:25:83
Authority key identifier: 7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
Certificate issuer: /CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Certificate serial: 019D3909880703D29AA35D8D7C368CB924A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 10:00:19 +0000
Manifest this update: Sun 29 Mar 2026 10:00:19 +0000
Manifest next update: Mon 30 Mar 2026 10:00:19 +0000
Files and hashes: 1: Bi1pDCNkHaQHAemnse3wWLypO7k.roa (hash: lAsWeGFXffMfinXBeg3+QU6P9EnW1X8Od5LyXs53FsY=)
2: ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl (hash: f81wWUb9zTptklg7WtdOHDSBoPQi6WBfXmUJgiwUj3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:88:07:03:d2:9a:a3:5d:8d:7c:36:8c:b9:24:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Validity
Not Before: Mar 29 10:00:19 2026 GMT
Not After : Mar 30 10:00:19 2026 GMT
Subject: CN=78881ca90709f6286282dc81888d4ef0e69b2583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:71:33:34:75:5b:e7:31:96:2a:83:10:22:93:
d0:b9:7d:5b:65:6c:8e:31:7c:d3:dc:2a:27:fa:a8:
0f:42:b5:9e:c3:7f:07:86:e2:21:63:b5:66:b9:e9:
cc:39:e9:be:de:f0:ab:91:9b:cd:0a:94:90:13:b1:
c2:97:c1:29:95:31:d1:62:fe:90:e9:99:c9:30:bf:
50:71:39:82:ed:f5:b1:40:d1:db:4d:4d:e9:ca:a9:
51:7c:31:a5:ee:47:d3:61:e4:39:bc:e5:c5:3f:28:
db:06:38:c0:d0:26:54:89:0c:ad:1c:07:7b:0b:6d:
73:8d:e6:c0:38:f5:58:73:47:4a:fe:66:10:6f:56:
12:bc:4f:c8:f2:43:a3:be:5c:e7:a3:1b:0c:0c:1a:
5b:40:8c:2d:98:35:f9:39:dd:e0:b9:4a:fa:98:d6:
cd:03:dd:18:bd:62:48:3f:19:b8:88:74:1e:4f:80:
85:26:ee:03:be:05:07:52:d1:a2:32:18:0c:d5:41:
3c:e9:5a:92:50:15:a5:17:1e:6d:55:27:53:e2:8f:
c1:3a:fc:af:8b:03:e0:be:f7:07:e0:3c:92:96:5e:
d4:88:17:78:b7:63:78:91:f4:84:ba:53:d5:04:3d:
18:7a:db:31:aa:6f:b7:6a:52:bc:fb:2f:74:90:64:
38:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:88:1C:A9:07:09:F6:28:62:82:DC:81:88:8D:4E:F0:E6:9B:25:83
X509v3 Authority Key Identifier:
keyid:7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d2:f3:07:3c:aa:ad:f6:ec:15:7a:32:16:a0:3f:d0:91:7c:
40:59:2c:55:18:3f:f3:c4:1f:ba:08:23:da:86:1d:b8:02:4b:
ac:13:50:8a:28:0d:72:3c:b6:6b:46:6b:32:b1:3e:15:46:55:
50:19:7a:37:eb:16:f1:c0:0b:5e:d1:7f:3a:97:ad:ee:ae:f7:
ee:63:de:3e:81:21:05:db:1f:ec:7e:60:6d:35:cd:d0:a5:ad:
21:b1:5a:96:42:d6:79:e2:d6:00:d0:90:6a:87:10:d8:4c:86:
e5:d2:54:3f:df:bb:e6:b7:e0:b9:d4:22:fb:f9:ff:c8:9a:3a:
1c:09:ee:04:bf:54:77:09:4d:20:ff:db:0f:fe:f1:74:e5:f0:
11:c2:87:fd:96:37:73:b2:9c:58:89:12:12:5c:97:8a:b2:5a:
40:ed:51:d9:55:9a:0e:93:9f:c5:78:7c:81:e6:99:cc:8c:18:
2b:7d:fa:9f:04:27:af:00:1c:cb:e2:cf:1c:c1:a6:88:ab:c2:
c6:67:45:c5:ba:da:34:91:e9:39:00:db:55:c9:fc:51:93:72:
55:30:2e:4f:52:51:fe:a9:03:b0:f4:65:19:66:cc:2b:e9:b6:
93:49:5b:00:79:07:96:93:ca:c4:d1:f8:26:f1:5d:e1:e5:67:
62:2c:21:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CYgHA9Kao12NfDaMuSSjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMThmY2FhYzZjODQwOWYyNGQzZmE5MGRmOGUzMDIxOGVl
OWMzZmYwHhcNMjYwMzI5MTAwMDE5WhcNMjYwMzMwMTAwMDE5WjAzMTEwLwYDVQQD
Eyg3ODg4MWNhOTA3MDlmNjI4NjI4MmRjODE4ODhkNGVmMGU2OWIyNTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnEzNHVb5zGWKoMQIpPQuX1bZWyO
MXzT3Con+qgPQrWew38HhuIhY7VmuenMOem+3vCrkZvNCpSQE7HCl8EplTHRYv6Q
6ZnJML9QcTmC7fWxQNHbTU3pyqlRfDGl7kfTYeQ5vOXFPyjbBjjA0CZUiQytHAd7
C21zjebAOPVYc0dK/mYQb1YSvE/I8kOjvlznoxsMDBpbQIwtmDX5Od3guUr6mNbN
A90YvWJIPxm4iHQeT4CFJu4DvgUHUtGiMhgM1UE86VqSUBWlFx5tVSdT4o/BOvyv
iwPgvvcH4DySll7UiBd4t2N4kfSEulPVBD0Yetsxqm+3alK8+y90kGQ4RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHiIHKkHCfYoYoLcgYiNTvDmmyWDMB8GA1UdIwQY
MBaAFHoY/KrGyECfJNP6kN+OMCGO6cP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWhqOHFzYklRSjhrMF9xUTM0NHdJWTdwd184LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC81OGE4NmMtYjg4Mi00MmZmLWI3NDMt
YzQxYjhhYTJkZjk1LzEvZWhqOHFzYklRSjhrMF9xUTM0NHdJWTdwd184Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC81OGE4NmMtYjg4Mi00MmZmLWI3NDMtYzQxYjhhYTJkZjk1
LzEvZWhqOHFzYklRSjhrMF9xUTM0NHdJWTdwd184LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtdLzBzyq
rfbsFXoyFqA/0JF8QFksVRg/88Qfuggj2oYduAJLrBNQiigNcjy2a0ZrMrE+FUZV
UBl6N+sW8cALXtF/Opet7q737mPePoEhBdsf7H5gbTXN0KWtIbFalkLWeeLWANCQ
aocQ2EyG5dJUP9+75rfgudQi+/n/yJo6HAnuBL9UdwlNIP/bD/7xdOXwEcKH/ZY3
c7KcWIkSElyXirJaQO1R2VWaDpOfxXh8geaZzIwYK336nwQnrwAcy+LPHMGmiKvC
xmdFxbraNJHpOQDbVcn8UZNyVTAuT1JR/qkDsPRlGWbMK+m2k0lbAHkHlpPKxNH4
JvFd4eVnYiwhdQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:26 2026 by rpki-client