Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
File: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json)
Hash identifier: aWhpSfFvbHqDMnP2mjF7+WWmTT94wu4nYEGoMURi8ok=
Subject key identifier: 1B:EE:CA:44:6B:D0:46:20:FD:3A:15:1E:25:F9:EF:A8:2C:1B:D7:8A
Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Certificate serial: 019D390A3A43AB49615176BE2160E9536DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
Manifest number: 0FC8
Signing time: Sun 29 Mar 2026 10:01:04 +0000
Manifest this update: Sun 29 Mar 2026 10:01:04 +0000
Manifest next update: Mon 30 Mar 2026 10:01:04 +0000
Files and hashes: 1: U0fRXYHgtW5Lj2ILWS5wUzrlnN4.roa (hash: rlb8IZvmVYRTy9dDl5LBuhuMRpChfmFYGPXw/aHFukE=)
2: Zu2YCOMNdF6aNceeKzP2XiSPhlU.roa (hash: cnBeGVbEPlV3dfTfeIQYswJCwcZDweKXTvgV5NLGKQU=)
3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: +y7oIcuRsNk/QlIlrzT391JCjAZAUyj3XW3qJF3+uvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:3a:43:ab:49:61:51:76:be:21:60:e9:53:6d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Validity
Not Before: Mar 29 10:01:04 2026 GMT
Not After : Mar 30 10:01:04 2026 GMT
Subject: CN=1beeca446bd04620fd3a151e25f9efa82c1bd78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4f:32:bb:b7:ef:ff:d6:b0:47:49:05:9b:63:
7f:85:8f:19:9b:d2:e8:31:46:25:b8:d8:89:17:7c:
0d:6c:d0:15:b4:be:c2:c1:7b:5b:33:11:33:13:3b:
ea:38:12:32:31:9a:ce:2c:ef:3a:51:9e:25:63:db:
86:18:c1:51:6d:9a:8b:71:ab:6e:25:4b:af:52:cb:
2f:4d:91:36:fc:d8:97:b0:ed:c5:f0:90:dd:cf:15:
1e:67:ab:53:81:ee:ea:16:61:4b:47:51:e7:30:b1:
e6:ad:97:0f:97:08:3d:3a:6e:d9:d5:97:87:5c:8d:
cd:e4:1d:ae:8e:b0:94:3f:3b:be:bc:c4:ed:46:99:
da:6a:b6:ee:94:6f:0d:09:af:df:dd:db:7e:bb:42:
c0:90:d0:f7:eb:8c:7e:98:13:4a:96:81:08:9e:a6:
fa:81:12:23:47:78:31:f2:b7:ec:4f:b6:7a:9a:2d:
f6:32:71:8a:92:37:8d:a0:7a:ce:e9:fa:2f:95:20:
3c:d0:ce:5e:3f:80:74:20:14:45:20:7a:3e:ba:10:
db:ce:b9:8f:fc:a3:c0:2a:ff:94:18:c2:e5:99:89:
1e:1c:7b:20:88:3d:57:3f:91:5f:0a:f9:ef:c8:ae:
81:ea:a2:67:7f:5f:ff:8d:8c:fc:5c:3e:8c:81:90:
a4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EE:CA:44:6B:D0:46:20:FD:3A:15:1E:25:F9:EF:A8:2C:1B:D7:8A
X509v3 Authority Key Identifier:
keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6f:d7:25:9d:8a:80:15:d9:5e:6e:23:88:98:30:1e:50:b2:
7e:c3:2b:47:8d:b3:ea:42:ac:29:c3:4c:f8:52:8f:02:86:aa:
a3:fa:f7:c8:7c:c6:39:c4:a0:a8:c9:ac:d5:39:2a:50:a8:a8:
f5:a3:a0:bf:47:b3:e1:5c:55:4c:d0:67:55:6b:a0:de:ac:26:
97:33:46:c5:eb:8f:d2:10:aa:ce:ec:03:5c:f6:66:df:c6:23:
dc:4e:ab:ed:6c:78:ed:62:d2:dd:f0:be:6d:a3:af:8a:05:8e:
35:d9:af:96:0b:aa:1f:89:b8:7d:70:73:1e:3f:df:46:d2:32:
3a:f2:34:39:06:f7:ca:48:7c:ef:00:7c:0e:3c:2f:71:6d:66:
12:3a:d8:67:e9:4d:d7:87:3e:96:a0:e5:e9:f4:54:8d:2b:51:
25:f3:da:b7:d8:54:93:ca:64:69:b1:3a:41:d6:74:a6:c9:e4:
77:0e:51:0d:fe:86:7c:b0:97:d8:ed:26:c3:bc:9f:d2:eb:30:
b0:93:ab:87:01:be:bd:9c:91:34:e4:3f:1b:73:6a:6b:b5:20:
78:3c:1f:0d:96:4f:87:c4:27:49:e4:b7:b2:74:de:52:39:72:
0e:fe:91:7c:c3:6b:87:2f:2d:c7:51:1d:7b:f3:e5:7e:12:00:
a4:be:3d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:56 2026 by rpki-client