Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/50e340-982e-4f6d-a271-bf89b9aa9202/1/eHwL6eYlPfv2gjHGdH_MzFDdp9M.mft
File: eHwL6eYlPfv2gjHGdH_MzFDdp9M.mft (raw, json)
Hash identifier: 0H5gZ5uGJdNmKtqViw4rciFDaVYqOHk1fDDAatAdUKc=
Subject key identifier: 56:E5:9A:E4:2A:0C:C1:B3:25:28:B2:C4:5C:0D:1E:61:93:FE:D6:DA
Authority key identifier: 78:7C:0B:E9:E6:25:3D:FB:F6:82:31:C6:74:7F:CC:CC:50:DD:A7:D3
Certificate issuer: /CN=787c0be9e6253dfbf68231c6747fcccc50dda7d3
Certificate serial: 019D39099D3312C9E2CE3DF0B1964FBA1647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHwL6eYlPfv2gjHGdH_MzFDdp9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/50e340-982e-4f6d-a271-bf89b9aa9202/1/eHwL6eYlPfv2gjHGdH_MzFDdp9M.mft
Manifest number: 3C
Signing time: Sun 29 Mar 2026 10:00:24 +0000
Manifest this update: Sun 29 Mar 2026 10:00:24 +0000
Manifest next update: Mon 30 Mar 2026 10:00:24 +0000
Files and hashes: 1: eHwL6eYlPfv2gjHGdH_MzFDdp9M.crl (hash: 6rJgepU47L49sdSKZdwz5uP1xIYhNrhGfDBZzkwyiJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/50e340-982e-4f6d-a271-bf89b9aa9202/1/eHwL6eYlPfv2gjHGdH_MzFDdp9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/50e340-982e-4f6d-a271-bf89b9aa9202/1/eHwL6eYlPfv2gjHGdH_MzFDdp9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHwL6eYlPfv2gjHGdH_MzFDdp9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:9d:33:12:c9:e2:ce:3d:f0:b1:96:4f:ba:16:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787c0be9e6253dfbf68231c6747fcccc50dda7d3
Validity
Not Before: Mar 29 10:00:24 2026 GMT
Not After : Mar 30 10:00:24 2026 GMT
Subject: CN=56e59ae42a0cc1b32528b2c45c0d1e6193fed6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:35:3d:0c:5c:c7:e8:c0:13:7c:f4:be:f1:8c:
2d:85:ac:a7:6b:15:7c:98:4d:a0:fd:3c:c2:87:a1:
b3:95:76:6f:ab:16:5b:72:ab:c4:8a:33:97:51:2f:
e3:4f:94:a3:4c:ad:e1:be:8d:9c:f8:6b:f3:ed:a8:
3a:5e:d9:8e:fb:a2:d5:9a:a5:d3:ef:fe:80:9a:20:
df:85:ed:36:95:8c:70:10:3c:02:e9:ba:ef:42:98:
97:3c:7d:b2:44:93:fa:eb:c8:41:97:5c:59:37:ef:
67:c2:dc:7f:f9:d8:a4:ef:2b:b9:9d:d4:81:73:06:
15:bd:de:ef:e3:31:29:db:9f:33:7a:83:7c:e3:4f:
9b:79:c7:9d:a2:1c:61:61:74:f3:8c:2b:cb:a9:a0:
d7:1e:69:f2:7b:ce:4b:54:12:3b:91:0b:05:a2:ba:
a8:fa:e9:82:e2:52:43:22:b3:03:ad:e2:a3:19:55:
67:3d:a3:3a:6a:5b:62:91:b0:d4:bf:72:af:6d:ae:
27:de:be:67:de:6a:43:3e:26:87:20:8c:03:ef:fe:
3f:04:f6:09:72:89:50:2e:88:65:27:10:53:4a:7c:
e8:d5:bf:7c:bb:dc:4d:a0:f1:20:67:8a:0e:19:86:
cb:2d:ad:d9:3b:5d:ed:f3:df:fc:6d:63:bb:34:c7:
d1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E5:9A:E4:2A:0C:C1:B3:25:28:B2:C4:5C:0D:1E:61:93:FE:D6:DA
X509v3 Authority Key Identifier:
keyid:78:7C:0B:E9:E6:25:3D:FB:F6:82:31:C6:74:7F:CC:CC:50:DD:A7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHwL6eYlPfv2gjHGdH_MzFDdp9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/50e340-982e-4f6d-a271-bf89b9aa9202/1/eHwL6eYlPfv2gjHGdH_MzFDdp9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/50e340-982e-4f6d-a271-bf89b9aa9202/1/eHwL6eYlPfv2gjHGdH_MzFDdp9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:3f:66:e2:c3:ed:3d:b3:bc:91:d6:2e:6d:97:8e:fa:13:87:
1e:83:7b:b7:24:35:5a:6e:59:36:74:de:a4:dd:33:a8:46:f3:
46:ee:21:06:82:de:ec:54:e3:f7:8a:cb:2b:b2:72:28:99:37:
ec:63:41:d9:78:47:94:7b:d7:58:99:b7:3f:bd:d5:36:0f:50:
31:69:d8:cd:c6:72:25:13:88:82:5c:4d:dc:71:47:80:3f:ea:
f5:f0:2e:71:78:a0:00:44:d8:a6:79:d7:4d:f8:4b:4a:e9:b9:
5a:38:15:cd:1d:6e:4f:c7:05:42:5b:eb:13:26:c3:99:8f:0b:
5d:9c:ef:6c:ec:2d:2b:bd:74:ec:ab:c9:28:a2:c9:f2:b3:2b:
d1:e2:bd:b9:d3:78:6f:cd:d0:47:d9:c5:58:9d:79:8a:f6:ab:
95:74:95:b0:22:b7:07:e2:40:c1:07:95:a4:4a:0e:b2:79:65:
0b:6b:30:51:ce:5e:d0:cc:d4:d2:76:58:e9:44:68:fa:02:ff:
a3:6f:4b:94:94:a9:77:7a:ad:3a:64:c1:28:57:80:77:65:c7:
f0:ff:de:29:a4:ad:65:46:1f:cf:3c:9e:b8:ee:27:2a:ca:bb:
55:d0:46:2b:7c:ab:78:4e:87:b4:87:45:9a:02:a9:8b:67:43:
08:a4:6d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:39 2026 by rpki-client