Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
File: eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json)
Hash identifier: nZkrA2EZJ1Y770pBg/IeMZFVhw8mXfu3CDekCYELLGY=
Subject key identifier: C3:18:F5:C3:34:16:5A:E1:6A:6A:94:BE:A0:7B:56:86:BE:B8:6D:01
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Certificate issuer: /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial: 019D0FD73F0BA7F58D32AF81CB7FDF56FFD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
Manifest number: 123C
Signing time: Sat 21 Mar 2026 10:00:57 +0000
Manifest this update: Sat 21 Mar 2026 10:00:57 +0000
Manifest next update: Sun 22 Mar 2026 10:00:57 +0000
Files and hashes: 1: Ovz5_uXaopmCFA2hM3c3dActUxA.roa (hash: c9mXjNhTNI7nbpo+Q8eDzbpgYffEF1OmRMytYW5lsxc=)
2: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: bnGWh2ScObxYziQnSmDS9tIsvXnyUZvsBuMG4I3ha+U=)
3: iiLRQTaQQ6IVIkbg2il6ZXlFwVQ.roa (hash: tutx4i5TMPBaqEME1ocqA/S91MUf42k0v3h4figQjcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0f:d7:3f:0b:a7:f5:8d:32:af:81:cb:7f:df:56:ff:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Validity
Not Before: Mar 21 10:00:57 2026 GMT
Not After : Mar 22 10:00:57 2026 GMT
Subject: CN=c318f5c334165ae16a6a94bea07b5686beb86d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:ed:01:72:24:31:a1:81:3f:d7:f2:b9:4c:
40:c2:d9:de:71:06:67:0d:e1:7b:c4:50:5a:58:7e:
5a:82:1e:1b:1c:51:e3:02:17:ac:72:41:3a:d3:66:
93:e2:c7:7a:12:b6:ee:ae:bf:95:67:e8:df:ed:c2:
87:f5:d0:90:88:d2:b7:6e:4f:3e:2f:b3:4a:29:af:
57:05:95:f6:93:c6:fa:6d:07:25:b1:a2:df:c7:67:
c9:2c:22:89:96:c2:16:55:ae:8e:ea:48:60:42:56:
7e:b8:56:2b:9a:70:cc:fe:f0:78:34:ba:fc:ac:52:
20:9c:51:63:d0:70:48:d9:f3:8a:52:13:b6:0e:a1:
1c:94:06:0a:56:b8:85:83:50:40:3f:7c:07:fb:40:
d7:b2:e5:23:e1:05:90:8b:d7:ee:21:57:5f:e3:61:
82:5f:16:31:d4:08:52:f0:c8:53:42:cb:6b:6b:4d:
c6:16:91:47:6a:23:12:2a:68:72:af:40:fb:c8:20:
32:a2:e8:ef:db:31:b9:58:92:99:4f:dd:26:56:f2:
69:a6:2e:e8:86:0d:93:4c:fa:01:8c:a1:0f:cd:3f:
02:dd:08:57:bb:ee:a8:30:0e:ca:11:45:8c:92:a7:
22:db:be:8d:20:5d:6f:2c:55:20:5b:91:dc:0a:eb:
7f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:18:F5:C3:34:16:5A:E1:6A:6A:94:BE:A0:7B:56:86:BE:B8:6D:01
X509v3 Authority Key Identifier:
keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c8:2d:92:da:41:b1:91:58:59:f0:a1:3d:e5:31:76:59:cc:
e4:68:e8:4d:9a:fa:00:96:86:3b:c6:62:b6:1e:c2:89:48:0d:
81:ea:4f:2e:fc:97:c9:fd:d2:df:55:dd:7c:5c:b3:2e:6e:87:
21:b3:f8:3f:8b:a2:5a:d4:34:d7:a7:18:58:39:b6:01:8e:0b:
f0:18:0c:f6:8e:b0:97:a6:2e:24:6e:71:ce:01:9e:77:1b:26:
78:70:24:36:23:bb:62:53:55:f5:02:fc:05:6c:f3:5d:0b:53:
31:6d:61:80:3b:61:c5:3c:25:c6:e8:2f:6c:36:2e:19:84:ee:
32:d0:8b:db:6f:b5:4f:9b:5f:a8:47:ed:9b:2d:1d:c7:cb:7e:
ac:e4:34:87:e7:18:27:74:d1:96:a3:97:b8:39:1b:63:99:45:
f4:94:0b:33:03:50:bf:69:9c:d1:93:a0:bd:b4:c2:ca:6d:09:
ad:de:96:67:7d:f3:c2:67:59:dc:ea:72:72:c3:e2:6b:0c:5a:
df:37:f6:85:58:e5:94:cb:d5:b9:d7:e6:3d:d9:b7:96:ab:75:
02:74:8b:f8:4e:98:ca:df:11:a1:0f:f0:ca:08:e1:54:ee:09:
f6:0b:82:a3:29:61:ab:cd:59:8b:d3:7d:d1:07:2e:a2:a6:4d:
e5:f5:bc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 18:51:24 2026 by rpki-client