Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
File: eHl3C__BTZzftXTshmyq8TVy9Fw.mft (raw, json)
Hash identifier: OwvIonQ47yYCTZlzus7OgHhX22KdPQiDfLy4DfpWT8E=
Subject key identifier: 66:B8:95:65:69:D5:25:67:AD:C8:CE:63:0F:1F:A0:E0:A0:84:7F:C5
Authority key identifier: 78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
Certificate issuer: /CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Certificate serial: 019D397816F083420FF56CC9CF504C12647B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
Manifest number: 1550
Signing time: Sun 29 Mar 2026 12:01:04 +0000
Manifest this update: Sun 29 Mar 2026 12:01:04 +0000
Manifest next update: Mon 30 Mar 2026 12:01:04 +0000
Files and hashes: 1: eHl3C__BTZzftXTshmyq8TVy9Fw.crl (hash: suA6y3RVCKQaeE85UtWcvDWs343CJD2kYV7l2/BlxjU=)
2: haFw3q9tFoad6JUgiF-KPVOV4eM.roa (hash: e1I2SrRGxtbgkFSgcz9jLZjRjE847NKvzw0g1roFc00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:16:f0:83:42:0f:f5:6c:c9:cf:50:4c:12:64:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Validity
Not Before: Mar 29 12:01:04 2026 GMT
Not After : Mar 30 12:01:04 2026 GMT
Subject: CN=66b8956569d52567adc8ce630f1fa0e0a0847fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fa:cc:d3:3b:4b:3c:76:63:fe:9e:39:1a:be:
82:5f:43:1e:6e:d6:7c:b2:18:9f:18:63:39:6f:89:
3f:78:d5:09:8b:b2:08:03:65:68:82:9d:af:47:bb:
03:1e:bd:30:30:d8:cf:35:6b:11:04:48:fa:f5:87:
9c:c0:3b:e0:8f:1b:30:c4:7c:40:e1:81:a0:ee:41:
63:ee:4d:93:58:87:4f:4c:bc:02:9d:ac:48:05:52:
b8:0d:aa:09:7c:4f:84:a1:e5:e7:0d:2f:6d:78:cc:
ea:fe:f1:8d:0c:90:63:11:74:63:07:86:10:2d:62:
39:7b:ab:34:00:bb:f0:1d:78:7d:57:c2:cf:9c:c5:
45:83:3b:a9:9f:64:bc:df:f9:21:b9:ae:3b:12:88:
98:85:4f:02:85:90:f0:6e:69:a5:eb:3f:28:7d:85:
33:dd:2a:98:de:aa:44:e8:c5:1c:b2:a3:23:e2:f2:
83:ea:9d:64:d3:6d:a5:6d:6c:7e:1f:c2:fc:d3:d8:
4d:fc:1e:9d:bc:6f:4b:b5:e7:cc:3a:13:a4:3c:44:
05:89:bb:67:20:75:20:5f:63:22:94:8e:bc:1d:0b:
c4:03:80:4d:db:84:b5:15:e8:14:1c:c1:65:06:12:
f0:f9:a4:fe:82:02:8a:39:b9:4c:77:82:50:0b:af:
78:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B8:95:65:69:D5:25:67:AD:C8:CE:63:0F:1F:A0:E0:A0:84:7F:C5
X509v3 Authority Key Identifier:
keyid:78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:04:85:c5:94:24:48:fd:a8:61:3d:f8:7a:e9:bb:69:52:25:
fd:95:a1:08:75:46:9d:30:cd:f1:fb:79:30:55:05:09:5a:57:
ba:2b:59:e2:e4:1b:ac:4a:d3:3a:09:04:4d:fd:e2:f9:5e:9a:
61:cf:52:3c:71:24:af:8a:2e:b3:14:5a:3a:a0:42:d5:22:86:
63:4e:cb:83:54:aa:47:36:c6:43:fa:fe:4d:90:d6:2e:1d:88:
28:b5:2c:ab:d6:ba:c0:dc:03:b6:ce:ee:af:19:58:cd:d8:d7:
94:16:d8:21:e9:6e:ce:c0:40:f0:ea:80:49:91:49:5e:9a:9d:
76:f4:85:b6:16:87:d3:cb:25:7b:06:f2:0b:f2:f8:53:6b:fe:
7f:08:8d:98:ec:c9:6a:b9:0a:c5:80:6e:08:d0:c7:05:cc:40:
8f:c3:69:09:bb:c2:8f:e0:c5:78:b3:ea:eb:42:2a:3d:fe:cc:
1c:5b:f8:82:78:52:4b:4a:51:9c:6d:7a:db:e5:d7:98:94:35:
c8:b0:2e:ec:9a:e0:31:4c:2c:f6:df:21:0a:ee:72:f3:86:71:
d5:8a:5c:79:6f:fd:49:ce:3d:ef:a0:93:cf:53:7a:81:38:e6:
5b:64:ed:c2:8e:5b:03:cc:fa:19:f5:f1:d8:cf:0b:8f:42:ad:
01:c3:7c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:48 2026 by rpki-client