Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
File: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft (raw, json)
Hash identifier: Nd/HFbo9nOvysZ7fU7QTd1PZL0CAOIFQ2gQ2PJ6J7Ug=
Subject key identifier: CA:04:51:F4:B8:3F:52:42:DA:37:2B:A9:2B:A5:A2:0D:5E:12:E0:F4
Authority key identifier: F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
Certificate issuer: /CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Certificate serial: 019D389C3EE006544D361B3352F7EC2B180E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 08:00:56 +0000
Manifest this update: Sun 29 Mar 2026 08:00:56 +0000
Manifest next update: Mon 30 Mar 2026 08:00:56 +0000
Files and hashes: 1: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl (hash: F8/962hAoWVQL76ZYLqFwYEtzw7PMDwke26YJ/H4wDo=)
2: 5335TVWq-TAy75K-3w-T_kbzaH0.roa (hash: 9SO05Pcou3qWF6g88dlB6s3gfpWtXt6YbpW1v8iIrjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:3e:e0:06:54:4d:36:1b:33:52:f7:ec:2b:18:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Validity
Not Before: Mar 29 08:00:56 2026 GMT
Not After : Mar 30 08:00:56 2026 GMT
Subject: CN=ca0451f4b83f5242da372ba92ba5a20d5e12e0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c2:d6:29:7e:60:b5:5b:a2:a2:f4:5e:73:54:
0a:ec:69:2c:8f:75:e2:40:54:93:ca:b3:d9:a0:3c:
36:1e:5c:d7:15:fa:c0:36:7c:62:a3:29:c8:3d:cf:
6e:02:ff:ef:ef:1f:9c:ab:8f:db:25:e2:63:85:4e:
2d:1b:c7:58:8c:8c:ec:32:29:53:03:8f:e7:52:94:
cb:f1:e0:41:a2:25:1d:8b:da:1f:19:1a:19:70:fa:
8e:f9:95:7b:d3:38:4b:97:6f:a4:64:5e:4d:c3:10:
42:9a:b7:d2:98:c9:ed:1c:da:b9:73:ea:44:97:8a:
30:93:c1:b0:3e:22:d1:fe:83:59:29:2b:a1:41:82:
ea:3d:43:7b:b1:4b:8d:79:92:a9:06:8c:70:33:4b:
0e:ff:1f:25:68:e0:d5:25:1e:7c:aa:85:7b:bc:24:
f5:61:5f:bb:11:2a:c6:28:a2:d7:80:ce:2c:87:64:
72:ee:b5:37:48:14:94:47:b2:cb:a2:19:24:00:ad:
45:7b:39:88:8b:64:47:85:2c:92:fd:53:0e:12:7b:
a9:8c:17:af:39:0f:94:70:61:b5:33:e3:3d:fa:19:
35:59:43:36:67:74:fb:74:6c:58:7f:a0:26:1e:99:
02:a2:b9:1e:86:66:a8:07:60:20:96:36:34:6e:05:
88:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:04:51:F4:B8:3F:52:42:DA:37:2B:A9:2B:A5:A2:0D:5E:12:E0:F4
X509v3 Authority Key Identifier:
keyid:F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:40:a9:67:8f:1b:f8:ba:7e:a3:6c:93:52:a8:48:14:f5:04:
ab:0f:bd:04:67:6b:c0:ef:3d:b8:ec:e4:7e:6b:d0:14:4c:75:
1d:1f:02:27:03:de:50:dc:b8:b9:ce:f6:23:82:52:3e:2b:a5:
2a:d5:19:ed:13:01:6c:d2:1a:1a:3e:76:85:5a:27:ef:11:92:
dc:d1:7f:ae:33:b9:66:66:6e:56:36:2c:90:9f:61:1a:a5:d7:
1a:23:b9:df:44:55:c8:99:a9:73:9e:65:7d:e1:15:cd:d5:37:
90:d7:12:08:f1:fe:cb:e6:ae:61:73:c7:70:36:ce:3b:6a:0c:
46:f4:e0:7d:71:9f:ab:5d:9e:76:1d:b2:44:ee:69:a5:43:3f:
24:35:62:d1:76:f0:a1:44:56:ac:bd:1c:ba:25:a6:34:ae:93:
64:cb:fc:6f:d2:00:ee:94:c7:ca:28:b3:3b:3c:67:94:4a:c6:
78:62:54:36:9c:53:20:c9:23:9a:ab:1f:8f:6b:77:a8:bc:a6:
36:4c:1d:58:4c:0c:54:72:b5:39:d1:c5:c0:79:1f:4b:4c:bc:
cf:78:06:7d:2a:6a:92:87:d1:8e:55:83:e0:58:44:1e:77:4c:
5a:4d:49:45:48:af:ae:b6:5b:7d:c4:48:48:b0:6e:6d:5e:06:
a5:19:4b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:39 2026 by rpki-client