Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
File: ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft (raw, json)
Hash identifier: etl/gYxIBvzqU8G00WZeG132VST7KBpwZAS4+NXGxco=
Subject key identifier: 1C:44:C3:98:50:8B:17:88:21:5D:7F:15:DD:8A:DE:1B:5E:81:AB:03
Authority key identifier: 79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
Certificate issuer: /CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Certificate serial: 019D39E5B88B7A20AA1C1C612AD483C42C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
Manifest number: 187E
Signing time: Sun 29 Mar 2026 14:00:49 +0000
Manifest this update: Sun 29 Mar 2026 14:00:49 +0000
Manifest next update: Mon 30 Mar 2026 14:00:49 +0000
Files and hashes: 1: DHHjGMt7-3BtKh8jbUtHgjtd7Zk.roa (hash: AGrA4B/DyddJdpJQ+MaOxYEeNzNiJWqbWYvLiR+2oDU=)
2: ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl (hash: WkVTICdKou+iOuyrOfmK8vLlvsrDcwBWQONdRfTAHnU=)
3: ynu8tUDUEPguQB0iGrynuoA2iPw.roa (hash: johc23xrqxWrSzPXwvlfoLCZ1FTv0QQ+G+sZUcEYX8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:b8:8b:7a:20:aa:1c:1c:61:2a:d4:83:c4:2c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Validity
Not Before: Mar 29 14:00:49 2026 GMT
Not After : Mar 30 14:00:49 2026 GMT
Subject: CN=1c44c398508b1788215d7f15dd8ade1b5e81ab03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:27:4e:ed:ec:fc:de:ac:04:b2:a5:90:a9:dc:
d1:2c:80:c4:9a:ec:30:d1:81:e8:fa:1c:de:e8:1d:
b8:57:58:29:dd:02:12:eb:99:03:4c:58:f3:ae:f6:
f0:cc:f9:fe:0c:dd:ff:7c:c9:5f:c7:e8:a0:b6:9a:
d9:9b:08:bb:ac:8b:ee:e5:19:4b:c5:8a:bd:c7:a9:
ec:c6:fa:56:be:62:06:f6:c0:fc:ba:0d:25:20:02:
bc:4a:c0:6f:db:41:d4:90:ba:c2:e6:02:21:a8:2c:
a8:9f:e0:e6:f7:f9:0b:46:62:98:fb:6e:95:74:03:
9d:5a:08:b3:32:0c:46:be:d5:02:73:88:e4:15:76:
16:64:fc:ef:a0:ee:64:3a:62:e0:06:2e:52:cf:44:
30:5f:87:02:d7:de:8c:9f:ec:21:0f:d1:f3:35:2e:
53:9e:9c:58:1e:65:32:9a:b1:02:0e:77:b6:50:47:
5f:80:60:4c:55:af:1f:40:e9:24:9b:27:02:2e:09:
3b:47:35:7a:63:06:d2:52:74:71:80:7a:6a:4a:0a:
6b:46:72:6d:5b:6d:09:f5:0d:b4:54:a9:79:e4:71:
f5:7a:7e:ed:65:05:77:0d:15:b6:8b:7f:3a:bd:c2:
4e:e7:3d:02:89:65:c6:30:7f:3c:60:98:9f:dc:2b:
d9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:44:C3:98:50:8B:17:88:21:5D:7F:15:DD:8A:DE:1B:5E:81:AB:03
X509v3 Authority Key Identifier:
keyid:79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b2:5a:6d:f1:78:67:00:c5:cf:d7:6e:7f:6b:f3:02:e3:c5:
da:fe:a8:29:99:f3:d0:ed:92:fe:58:85:a6:58:53:35:e4:e2:
79:e1:67:75:f0:b4:66:19:3e:9c:37:fc:b3:fe:fb:90:89:b9:
72:c6:2c:f8:b2:71:f9:b9:9f:e0:b5:10:8b:41:e1:5f:dd:76:
09:a2:ec:1c:22:f3:58:f1:99:db:01:40:8d:28:3d:5e:30:44:
f2:e1:96:c6:f9:08:ca:49:24:47:87:83:d3:51:9d:a3:9d:2a:
a4:01:96:f1:92:40:43:40:62:3f:35:63:f7:53:ec:8d:6c:79:
36:1a:50:bb:fb:c0:90:5f:0f:c7:b1:eb:ea:06:84:ed:65:4f:
2b:7c:97:86:a5:c7:bf:26:7b:c7:1d:a9:92:e9:4e:c8:76:b3:
b3:a7:1b:15:93:43:0f:f1:b4:ee:5c:24:3d:85:61:cd:e8:b6:
f3:b2:6d:97:ec:d1:3e:36:94:37:b7:fa:46:d2:e9:a9:3e:fa:
73:d9:62:0d:b4:ac:74:65:eb:47:72:81:96:c2:53:cc:23:5b:
76:cf:ff:5e:77:bf:30:7c:77:7b:85:a2:aa:c9:89:f7:ce:e3:
b5:a6:79:c1:97:ba:8a:56:05:fd:a0:2a:67:8a:2a:22:1e:bb:
bb:4b:55:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:17:23 2026 by rpki-client