Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
File: eA3hbu6UewqMdXFPxdpqAlnKG5A.mft (raw, json)
Hash identifier: XZLFhBlPbTaDWOqmApD1AR9JSdvGsQlN8n/jKx2ckk8=
Subject key identifier: C3:5C:D2:C0:D6:33:B8:5A:88:F5:07:F3:8E:FE:B3:20:9D:0C:59:DA
Authority key identifier: 78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
Certificate issuer: /CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Certificate serial: 019DCFE3B61A055FEE08A5BAD3F330E9CF74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
Manifest number: 18E0
Signing time: Mon 27 Apr 2026 17:01:40 +0000
Manifest this update: Mon 27 Apr 2026 17:01:40 +0000
Manifest next update: Tue 28 Apr 2026 17:01:40 +0000
Files and hashes: 1: FZe1NTnwQLaVEwa5nKYFvYoYApc.roa (hash: LyCQTa9+bhAOhJK8DWlraV43+IT6fvhRPfMpiyuGQl4=)
2: cbfZrsYOtkfTsvATyxudQ2krwIc.roa (hash: LFDpBEhBWBZpbTCNf+xEuq+zB73JcCsNfl6NSUtgKtY=)
3: eA3hbu6UewqMdXFPxdpqAlnKG5A.crl (hash: NWnpaUbUnlSpzGMCvAXW3ZaJBAt2ADOm5n5shpXbdDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:b6:1a:05:5f:ee:08:a5:ba:d3:f3:30:e9:cf:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Validity
Not Before: Apr 27 17:01:40 2026 GMT
Not After : Apr 28 17:01:40 2026 GMT
Subject: CN=c35cd2c0d633b85a88f507f38efeb3209d0c59da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a8:d2:21:dd:f1:94:97:7f:d4:58:16:f7:ee:
f6:14:91:93:bd:38:9d:e5:0c:98:b3:9c:77:66:33:
77:09:10:c1:2a:a3:53:1e:87:5e:d0:fe:99:d6:92:
a3:c7:70:c0:3f:ed:f4:fc:5e:e2:7f:02:b4:9b:55:
9d:71:02:0f:dd:67:61:7a:dc:39:fb:d5:b7:ab:e2:
e4:1d:62:cd:33:7b:26:62:e6:94:8b:dc:52:b8:ab:
38:c9:97:8a:02:97:27:ac:cc:a0:46:13:b9:63:a5:
e3:47:83:36:91:f5:87:b3:8f:11:b3:41:34:ba:7f:
88:49:96:b4:44:28:8f:e8:34:3e:f6:50:a2:2c:a3:
72:0f:38:e2:a2:7c:25:16:4f:b0:dd:2a:c5:f1:ee:
71:6b:78:ee:39:70:32:36:17:c3:9f:e0:f6:46:03:
e8:ec:2a:a8:ae:84:b3:21:48:a9:da:b9:c6:ef:ad:
89:e6:12:d3:0b:45:c5:95:df:13:b3:8f:12:3d:38:
9f:77:bd:5e:e8:2d:a5:7e:5f:7e:e9:23:7c:02:c3:
ef:03:36:69:23:59:36:ed:34:8b:e5:40:2d:79:4a:
c8:43:89:7b:94:21:90:f5:09:0d:14:0e:0e:0b:f6:
1a:70:c1:c8:71:4e:2e:90:a4:77:5b:c6:a3:13:7d:
21:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5C:D2:C0:D6:33:B8:5A:88:F5:07:F3:8E:FE:B3:20:9D:0C:59:DA
X509v3 Authority Key Identifier:
keyid:78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:19:2b:b2:a0:be:e2:62:7b:af:cd:ee:6a:c4:ef:70:62:15:
fe:eb:16:2f:d3:d2:8e:bb:d3:95:d7:39:ac:ce:e9:32:64:0e:
89:c2:72:1c:76:65:8a:7c:a8:ea:72:94:0f:0b:d7:e1:ca:67:
f3:9c:3f:13:7d:a1:7e:64:42:03:d3:87:39:ac:d4:04:cd:8f:
bd:89:cb:d1:c9:6c:a6:b7:9d:5f:fb:87:05:43:7e:f9:f1:f2:
bf:21:f6:e7:a8:f6:99:ba:d6:e3:04:31:a8:b8:9f:1a:b3:57:
2a:97:a6:81:e8:3d:08:4c:92:7d:92:ab:a6:8e:61:39:1c:47:
07:6f:f1:c4:d4:a9:09:d3:f2:6b:4d:bc:26:c2:81:48:9c:b4:
98:2b:3b:12:65:eb:1e:c6:3e:2c:47:d0:37:08:12:44:42:64:
8f:f2:b4:a7:17:d0:9e:77:1f:01:e5:90:f6:da:52:19:6e:21:
6f:ff:63:43:80:d9:41:71:ee:f3:48:cb:56:39:89:a6:2f:19:
07:e9:9e:50:85:40:71:13:03:c9:ea:00:1f:f0:3d:89:bc:23:
49:63:b3:4a:f5:df:cb:5a:c1:e0:3b:3f:9d:05:9e:7f:bc:dd:
8d:a1:c2:83:48:97:4e:e3:a1:66:24:b3:d7:7a:fd:11:68:ce:
7d:f3:85:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:36:49 2026 by rpki-client