Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
File: eh_3AnJudbOmjxGC5H_7zcrlFeU.mft (raw, json)
Hash identifier: 2f5JwknyTYtqIsI9yJRpyKjpiJLXu3GehCmokwKva8c=
Subject key identifier: 3F:67:E8:5A:AB:B5:23:C0:44:B7:D4:0D:97:E1:D8:93:0A:6D:18:CF
Authority key identifier: 7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
Certificate issuer: /CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Certificate serial: 019D38D2EDF1E2CEF5A7090C442565B175D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
Manifest number: 1738
Signing time: Sun 29 Mar 2026 09:00:40 +0000
Manifest this update: Sun 29 Mar 2026 09:00:40 +0000
Manifest next update: Mon 30 Mar 2026 09:00:40 +0000
Files and hashes: 1: MwbZOqIggyrSHU4PZ4grNgTv7Vg.roa (hash: PMNvYA3uE+IknWsNwKXqnO+LeFyIQwpnp1UXQEbVx60=)
2: eh_3AnJudbOmjxGC5H_7zcrlFeU.crl (hash: YSiSlAsAySQbxhcVJjdJeJRbrmsu5CNWDEDXdI64Ef8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ed:f1:e2:ce:f5:a7:09:0c:44:25:65:b1:75:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Validity
Not Before: Mar 29 09:00:40 2026 GMT
Not After : Mar 30 09:00:40 2026 GMT
Subject: CN=3f67e85aabb523c044b7d40d97e1d8930a6d18cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f3:3d:05:81:ec:3a:40:85:7d:9d:44:a6:c7:
80:58:09:81:9c:7e:be:a7:14:22:b2:68:3e:1c:b7:
21:7e:de:d0:66:49:dc:55:4d:cb:8d:98:4f:a6:c2:
5c:32:6c:8f:4b:65:cf:fc:f4:04:0d:7f:3a:32:92:
c8:25:37:a9:9d:86:85:94:be:b6:f0:9d:cc:9d:05:
ee:8f:80:d5:ee:fb:cf:71:44:3e:f8:ee:42:56:fd:
1e:b6:6e:81:d4:99:8b:c8:b2:e1:42:04:9a:0d:22:
58:f1:30:a3:5c:bf:7a:73:b0:c4:c1:49:f2:4b:10:
4f:32:2b:8f:ee:2d:ff:0e:46:a8:b4:e0:56:ff:af:
c0:47:9d:16:e4:00:0f:fa:ed:ce:10:92:21:0b:99:
6a:ea:59:51:a1:fe:dd:18:b3:5e:69:21:40:c8:7f:
5f:10:ba:e8:ef:b7:8a:d2:4c:8a:de:ae:2b:8d:fc:
8c:0d:8d:66:88:d2:0c:53:21:7d:62:63:6b:ff:e2:
35:aa:ac:3a:5c:47:ba:fe:55:39:34:c3:fb:3f:ab:
87:ce:8b:92:eb:08:89:b7:71:a3:45:f2:97:8f:38:
72:7f:d1:33:36:77:cc:b3:f4:01:bd:ef:46:29:a9:
c4:b8:31:ff:53:b9:d4:44:3b:68:8f:9c:65:e9:00:
ec:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:67:E8:5A:AB:B5:23:C0:44:B7:D4:0D:97:E1:D8:93:0A:6D:18:CF
X509v3 Authority Key Identifier:
keyid:7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:c6:3a:ec:39:c1:7f:88:0f:05:73:8d:3d:13:a1:1f:fd:5f:
89:c6:bf:c9:10:33:ea:3a:8b:59:67:f4:1d:5b:d8:df:5e:6c:
7b:d9:ca:cb:f9:02:59:12:0b:5f:8a:14:8d:88:44:72:71:9e:
71:90:d1:e7:dc:77:4b:e3:32:69:f6:75:eb:70:f0:cf:2c:aa:
b6:7f:df:7a:3c:91:f9:45:d9:91:ec:bc:8f:56:5b:31:9a:2c:
89:45:af:66:e6:07:2a:5b:bb:7e:0c:78:19:10:67:2b:74:0f:
d5:43:43:25:15:b1:b3:9b:c8:a0:46:6f:2a:3b:d2:5e:a7:e0:
f4:e5:3b:fc:a0:78:ec:1e:0d:1f:81:50:3b:b8:b4:41:e2:fa:
14:af:21:92:4b:20:11:88:c3:21:ed:b0:40:c7:21:ff:29:0d:
b8:99:a1:d3:c2:34:3f:1c:7b:5f:70:86:dc:00:91:b3:bb:50:
31:5c:ae:56:e5:25:a2:6d:dc:82:12:15:5c:12:50:ce:e4:e7:
18:2f:16:19:57:80:66:c1:01:56:67:15:af:2d:6e:c1:2a:40:
10:dc:92:01:32:0e:cf:f4:93:cc:93:21:3b:2a:df:ed:b9:57:
b1:52:bd:26:90:a2:8f:ee:22:85:6c:9e:2b:69:5e:75:5d:68:
63:94:2a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:39 2026 by rpki-client