Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
File: EHbBYnj8gh4e75Mv3qmz3WPKayE.mft (raw, json)
Hash identifier: jy4xAWYZxSPtbLTFSOyygfPrqJ9YHHjvdunJClNtmn8=
Subject key identifier: 63:E1:B6:F7:ED:6B:98:41:31:54:8D:7E:B7:E0:FB:2D:95:27:24:65
Authority key identifier: 10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
Certificate issuer: /CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Certificate serial: 019D37F7831E0B2757922E539A788C32F80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
Manifest number: 08C8
Signing time: Sun 29 Mar 2026 05:01:00 +0000
Manifest this update: Sun 29 Mar 2026 05:01:00 +0000
Manifest next update: Mon 30 Mar 2026 05:01:00 +0000
Files and hashes: 1: EHbBYnj8gh4e75Mv3qmz3WPKayE.crl (hash: CdFo3lkJP19zBUjmZdGWPM8y1nYj4fCThkH+pu4uvd4=)
2: q7k3Jgi45VhxVB2FaU-fxYdycok.roa (hash: aUl7kjDi6eCHksQ88LJAOR22rf6+FmaVUEOAmzpORAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:83:1e:0b:27:57:92:2e:53:9a:78:8c:32:f8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Validity
Not Before: Mar 29 05:01:00 2026 GMT
Not After : Mar 30 05:01:00 2026 GMT
Subject: CN=63e1b6f7ed6b984131548d7eb7e0fb2d95272465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2f:4f:a8:7c:da:b8:c0:b4:73:3f:ec:eb:f2:
94:ab:94:64:4b:39:a2:a1:9c:b0:06:cf:af:d5:71:
af:32:bf:0f:26:c8:78:c4:dc:22:ff:88:b6:20:69:
23:cd:89:21:6a:b7:45:9f:37:c7:b5:16:fc:7f:61:
61:d7:0f:c8:50:ec:1e:e9:ff:14:50:ca:b1:36:a0:
21:ef:c5:64:f4:52:cd:1f:f8:f6:66:7e:19:e9:11:
46:20:d5:fb:e3:09:38:3e:27:e1:0b:8e:82:ff:8f:
06:e0:76:cd:4f:fe:ae:1e:95:1d:16:f4:6b:eb:41:
cb:89:11:f3:38:a6:bf:92:03:3f:c3:84:cf:48:aa:
9d:88:08:81:0f:21:e6:d3:e6:70:5a:af:33:10:cb:
5a:ec:00:43:c3:b7:05:3f:f2:5f:6e:53:01:0d:cd:
74:db:47:f1:3e:e7:11:82:35:c5:59:e5:3c:5a:e6:
5b:a5:5f:5c:57:3d:82:bb:99:91:f0:1b:c5:b2:ef:
05:34:c5:12:d6:5f:42:9a:27:03:b1:f1:dd:77:37:
35:f8:9d:30:6e:2b:f2:73:f2:53:58:85:65:45:99:
c1:98:12:51:12:7d:2e:0d:f4:de:84:e6:41:d3:cb:
d4:c4:ec:da:ee:9c:a5:1b:d9:4c:ca:21:11:27:16:
9e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E1:B6:F7:ED:6B:98:41:31:54:8D:7E:B7:E0:FB:2D:95:27:24:65
X509v3 Authority Key Identifier:
keyid:10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:0d:c4:59:90:0b:d8:06:79:7d:77:16:80:35:3d:3a:32:53:
56:32:60:dc:59:05:28:ee:4b:a4:8e:10:04:dd:9b:a8:07:15:
14:5a:d1:16:99:73:89:2b:94:83:08:e3:4a:85:5d:37:f6:8d:
f8:4c:2a:f8:0b:a0:4b:1c:3e:fe:92:3f:55:54:b4:17:05:f6:
ab:54:ee:f4:c5:d8:f0:9d:df:96:af:54:9f:7c:95:92:b8:01:
32:39:1b:b5:b2:1e:51:56:7a:4c:fb:a4:63:51:bd:17:7c:9d:
44:0f:8e:78:51:a1:30:dc:14:aa:43:47:0a:30:f7:e8:78:63:
d0:dd:5b:cb:69:a7:62:8d:d5:f9:e4:7d:92:57:ec:63:a0:cf:
bd:6e:3a:30:3c:bb:6b:08:d0:14:7d:15:69:52:5b:65:3c:ba:
be:ea:83:c1:d8:92:51:65:0c:5c:93:b5:ae:55:5d:4f:eb:8f:
26:63:34:3b:cb:e7:bf:22:c7:6b:9c:51:a6:9d:b9:dc:17:3d:
50:e2:90:dd:56:99:4c:c4:c2:0e:d3:7a:c5:ee:a2:cb:ec:c5:
b5:1c:79:9b:40:21:0b:d5:25:41:1a:a5:97:4b:c1:99:5c:74:
4f:55:67:5f:07:26:79:13:cb:65:2a:0d:7f:90:79:31:52:74:
85:52:03:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:26 2026 by rpki-client