Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
File: ebUTSxH5QJEfD_MVyUjapT9zLuA.mft (raw, json)
Hash identifier: LbgSxjgaOxcVHuL8Vgu8qjFLcWX/XRDb+fFNWbTiV4g=
Subject key identifier: 9C:F8:8B:63:6D:98:F5:75:FE:6A:5B:20:3A:6F:7E:C8:95:41:8D:6F
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Certificate issuer: /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial: 019D3488557CFEBE548CB6BA05193DCDF01E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
Manifest number: 18A5
Signing time: Sat 28 Mar 2026 13:00:43 +0000
Manifest this update: Sat 28 Mar 2026 13:00:43 +0000
Manifest next update: Sun 29 Mar 2026 13:00:43 +0000
Files and hashes: 1: NcDn26l6X1jaA0rTBfljUSQkQrA.roa (hash: DBP3tSVruTN+BPgGFJB1Pkmv6KFos1kOIWJAln1+ovw=)
2: ebUTSxH5QJEfD_MVyUjapT9zLuA.crl (hash: hQgICcGZf82k1qBNdUQvwa8ENNAjSk/TTCRUPWoBgXs=)
3: et0olEFrB1y2vEuy1NWpl0biftA.roa (hash: o7zVoM3aaUFP3OzR2+EuOIiIDki9aymtbkBZVSrLD3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:88:55:7c:fe:be:54:8c:b6:ba:05:19:3d:cd:f0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
Validity
Not Before: Mar 28 13:00:43 2026 GMT
Not After : Mar 29 13:00:43 2026 GMT
Subject: CN=9cf88b636d98f575fe6a5b203a6f7ec895418d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:51:a7:a3:63:16:08:0c:d2:e8:f4:f8:3c:87:
65:ef:38:63:8b:4d:6c:86:6b:85:4a:fa:c7:a1:8b:
d9:cd:18:2c:35:23:47:1c:ae:c3:a1:22:bc:52:14:
25:b8:f7:fa:bc:9a:f5:b3:59:57:1a:7c:a2:22:b0:
7c:d6:36:96:c2:ea:39:c1:e8:a2:65:f1:f4:df:22:
b5:d5:5a:61:9e:34:6e:59:7f:03:dc:02:d1:55:cb:
46:72:15:62:89:55:a3:17:a8:9f:9d:f0:09:25:27:
3b:51:9a:30:65:c6:85:e4:66:18:9a:16:8f:25:25:
70:dd:e0:f3:d9:08:d5:0d:d7:7a:8d:bf:c0:9d:f8:
a6:f2:28:02:a7:bc:76:c0:53:15:74:4f:f5:20:b7:
11:1e:9b:45:3b:c8:12:ce:8e:21:89:da:c5:33:1f:
8b:36:e3:a8:b0:dd:2c:c3:18:62:b2:86:88:94:50:
99:d4:36:ef:82:da:a9:ee:32:3e:cb:08:a4:8b:95:
18:2e:f5:8a:40:e7:d9:b1:14:69:3a:bb:ef:5a:2d:
00:95:af:95:59:a2:1c:a2:96:c7:a3:6d:a1:31:8e:
a2:0e:39:e6:d4:11:40:13:1b:ab:3c:51:eb:df:b3:
5f:01:a8:b4:43:9e:44:d9:c1:35:38:58:1e:c1:f3:
4d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F8:8B:63:6D:98:F5:75:FE:6A:5B:20:3A:6F:7E:C8:95:41:8D:6F
X509v3 Authority Key Identifier:
keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a3:5e:6f:9f:1c:dd:98:93:c8:36:cb:a8:87:61:d2:e5:a2:
91:ec:39:05:1c:67:4a:f4:6d:9f:f5:4a:38:08:80:7a:01:eb:
1d:13:26:bf:b4:ca:87:fb:8f:38:53:d2:4c:0f:19:b8:f5:b8:
ae:c1:9f:c2:57:d0:cf:6d:0c:f0:80:60:6d:fc:8a:dd:55:d0:
cc:18:38:7c:a7:cc:4f:55:3b:c5:86:c4:cc:e7:4c:68:43:5e:
18:71:65:81:51:26:e4:83:db:ed:91:42:8e:b8:c5:46:4b:74:
d4:b5:a1:ac:e3:29:6f:c9:ed:01:93:f5:a5:12:18:6f:72:9e:
47:41:4f:36:5d:08:d2:42:e6:56:d7:a3:f0:e8:99:d0:7e:de:
14:0d:68:e2:c5:4a:29:3b:6e:fe:d7:6c:9c:e0:4e:1e:f7:a7:
51:12:f2:be:aa:a3:79:c5:c1:f8:cf:7c:d7:56:2c:3e:a9:17:
81:73:71:34:3a:e5:37:09:12:0c:16:e8:e3:8b:27:ec:7d:37:
7c:43:c4:6b:69:a7:35:70:f2:c3:82:46:67:f9:11:a8:d7:7c:
de:dd:5e:72:59:63:dd:4b:b2:79:71:63:e1:ac:fa:f8:75:b0:
0f:fc:8b:b1:3b:c1:e6:23:ec:8e:1a:84:0a:d3:be:3e:bf:d7:
05:12:82:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 16:50:56 2026 by rpki-client