Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
File: eIehaWWHX29TvMMfDkk6lhVOt7k.mft (raw, json)
Hash identifier: gtLtXgSNE1Q9BK3jFgHUDJXGHrU8PMynqDxfDmbPnAI=
Subject key identifier: 7E:54:B0:BE:99:A9:12:80:34:80:AB:DE:BA:2A:49:0E:8A:EF:94:CE
Authority key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
Certificate issuer: /CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Certificate serial: 019CE2596009E3353029A0C779B1F1D21998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
Manifest number: 1581
Signing time: Thu 12 Mar 2026 14:00:33 +0000
Manifest this update: Thu 12 Mar 2026 14:00:33 +0000
Manifest next update: Fri 13 Mar 2026 14:00:33 +0000
Files and hashes: 1: MJofjdkMEmgx2BydUOl_6hfgSP0.roa (hash: SYQp19hNRf4PycQPpMlkNy2V7oY/RHobHYkQy5EY5Uk=)
2: e3rUNCM0Xf2LeGKAo_m6z686FVs.roa (hash: /zRO4TdqdR87Zu84kUd28IeKppEjdoIpNzsSQ/9y0kI=)
3: eIehaWWHX29TvMMfDkk6lhVOt7k.crl (hash: ymTVQIiP1qaburhrtxMsLeIr1myZ7fkWRtvdTIKDn+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:59:60:09:e3:35:30:29:a0:c7:79:b1:f1:d2:19:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Validity
Not Before: Mar 12 14:00:33 2026 GMT
Not After : Mar 13 14:00:33 2026 GMT
Subject: CN=7e54b0be99a912803480abdeba2a490e8aef94ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:22:a9:be:ef:cd:7c:b2:04:c4:04:6d:bb:
84:4a:67:48:69:e1:ca:65:81:5c:48:e3:ad:60:6c:
54:18:de:6f:d7:54:ff:67:a5:7d:de:c4:fb:2e:6b:
b6:1c:c1:a8:56:4c:d8:97:8c:36:95:5e:ba:38:a6:
ae:aa:6d:9d:fd:d1:cb:97:25:17:40:4c:69:f1:7c:
77:c3:9e:cb:20:6c:1b:1e:6b:58:58:6c:98:e1:3b:
0d:f0:76:d3:f8:34:8b:c7:ca:19:8c:61:84:01:9e:
7e:70:ec:cf:5a:e2:57:81:36:37:65:8f:9d:cf:f4:
69:80:93:3a:63:37:35:01:03:22:6b:a9:af:43:f1:
6b:f9:0f:08:4b:93:68:87:da:8d:9b:d7:df:7c:0a:
d1:27:e4:47:43:af:4a:31:a9:77:0e:f5:37:cc:1f:
15:9d:67:93:07:f5:06:21:5c:5a:ba:2b:ca:80:9d:
ba:0f:ef:ce:e5:35:f5:f3:1d:94:a4:8d:d5:69:c3:
58:a0:ba:95:51:a5:53:0d:f5:da:c2:e1:7f:02:cf:
fd:42:db:f5:b8:3e:08:4b:e3:59:e5:3a:1d:30:47:
43:fc:ed:a3:de:e8:c4:30:cd:c1:c7:ae:f0:dd:78:
fb:6b:26:59:74:40:c3:e5:0d:d8:5c:af:be:4b:a1:
d2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:54:B0:BE:99:A9:12:80:34:80:AB:DE:BA:2A:49:0E:8A:EF:94:CE
X509v3 Authority Key Identifier:
keyid:78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:3f:cf:74:42:07:dd:cd:3c:0a:b6:91:85:a4:d5:27:95:39:
2f:11:6f:25:e1:e3:13:86:f2:9d:d9:79:4d:ea:80:e9:34:c7:
f6:56:81:40:9a:16:74:46:44:dc:ed:34:06:db:74:8b:de:69:
be:9e:dc:99:e1:e5:0b:5b:6c:f9:71:fe:b4:de:95:38:43:fd:
23:b7:a9:2a:60:e9:7a:b6:8d:01:31:a4:c2:10:e4:a5:f7:63:
81:e9:0f:71:a9:bf:00:f9:32:be:7b:a1:14:75:fe:8d:05:32:
8e:2f:85:56:91:97:fc:bd:c0:dc:fa:ed:cb:a0:6b:af:3e:cc:
29:e2:08:7a:57:c0:39:d0:ba:23:6f:31:9b:45:9f:5c:93:2a:
d9:eb:9c:6d:61:2f:a6:4c:bf:f5:f8:5f:14:3b:3f:9c:ca:87:
c6:52:0a:6f:9d:23:50:4e:b2:99:b2:ac:a8:8d:0b:4e:25:4d:
b3:39:87:c9:c0:73:52:86:c0:74:f2:c2:67:0f:55:98:b5:dc:
50:d4:1d:4d:54:90:57:c8:22:95:0e:69:76:c6:67:37:23:c8:
66:7c:b8:b7:15:63:44:25:66:12:8d:61:45:9d:99:83:b1:b7:
68:b1:43:59:1a:a7:a6:ff:03:61:c9:5b:f6:19:49:47:4b:c6:
16:36:45:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 16:34:18 2026 by rpki-client