Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
File: eA3hbu6UewqMdXFPxdpqAlnKG5A.mft (raw, json)
Hash identifier: 7Sefmf/oPhMJNXAIxv2jIPSu2UjsCpUYsos3D2loc3g=
Subject key identifier: A2:B1:87:32:7C:61:29:CF:63:7B:DC:46:92:C5:FD:94:4E:54:82:8D
Authority key identifier: 78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
Certificate issuer: /CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Certificate serial: 019CE448264E280610CD390EF23BFD7DB5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
Manifest number: 1866
Signing time: Thu 12 Mar 2026 23:00:59 +0000
Manifest this update: Thu 12 Mar 2026 23:00:59 +0000
Manifest next update: Fri 13 Mar 2026 23:00:59 +0000
Files and hashes: 1: FZe1NTnwQLaVEwa5nKYFvYoYApc.roa (hash: LyCQTa9+bhAOhJK8DWlraV43+IT6fvhRPfMpiyuGQl4=)
2: cbfZrsYOtkfTsvATyxudQ2krwIc.roa (hash: LFDpBEhBWBZpbTCNf+xEuq+zB73JcCsNfl6NSUtgKtY=)
3: eA3hbu6UewqMdXFPxdpqAlnKG5A.crl (hash: 7D6AwxYzE+DA+zUaNtPemrK24Rs6nGUpc1Xn4j49FO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:48:26:4e:28:06:10:cd:39:0e:f2:3b:fd:7d:b5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Validity
Not Before: Mar 12 23:00:59 2026 GMT
Not After : Mar 13 23:00:59 2026 GMT
Subject: CN=a2b187327c6129cf637bdc4692c5fd944e54828d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:88:af:bf:a6:91:bc:8a:34:c0:47:e4:82:71:
f5:a4:7f:80:ab:da:59:64:71:14:0b:3c:1e:98:61:
f4:1c:fc:bf:f5:61:0a:6c:e3:e1:8b:2f:60:59:2b:
ed:e1:77:d8:4b:ba:f5:d5:1c:6b:d0:7f:8d:b3:23:
a4:46:7c:83:2d:fb:7a:a9:31:97:67:f1:bc:d3:e0:
be:39:48:cf:3f:43:1d:10:b9:19:0c:0b:d7:d0:66:
3f:02:92:70:15:22:e2:cd:eb:6d:f7:af:eb:4b:90:
4e:aa:ad:4b:08:09:87:0f:fc:f0:4c:9c:22:04:66:
b0:d3:71:66:50:c8:07:36:6f:06:d7:57:6f:a4:7a:
f8:2e:82:33:58:3f:2a:44:c8:98:7a:db:6c:7a:f4:
98:87:c7:d8:c5:a0:55:b0:19:90:a5:7a:a3:68:e0:
7b:b6:f0:df:5f:aa:1f:35:b5:f5:b7:7b:19:6a:99:
e2:c7:25:c9:60:ba:ce:88:13:d2:12:8b:da:ee:50:
b7:a8:47:e6:94:49:5a:cb:33:5b:66:9b:06:bd:5c:
34:ba:bc:4a:f1:98:54:92:0f:28:1b:b4:06:b6:f4:
0c:a1:cd:a7:cb:d6:34:75:1c:76:73:17:0a:1b:21:
72:6f:e4:b9:53:07:2f:59:6a:c5:33:33:80:cc:64:
3d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B1:87:32:7C:61:29:CF:63:7B:DC:46:92:C5:FD:94:4E:54:82:8D
X509v3 Authority Key Identifier:
keyid:78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:9d:55:1a:d0:5e:ab:38:27:56:41:37:8e:05:28:c2:58:c2:
b1:0f:b4:b0:1c:c6:4d:d0:fa:14:a2:f5:08:db:ce:d3:e9:d0:
29:b0:da:b5:b1:df:3f:92:9c:77:a1:df:e1:eb:65:08:14:aa:
ce:14:c1:e8:f7:ed:94:b2:26:54:db:bb:2c:19:8c:00:2a:14:
a7:33:ec:cc:c0:ac:63:25:0c:0a:e9:41:36:9f:a1:34:51:a7:
47:1e:70:d9:1b:97:99:74:f2:1e:e4:5e:66:64:70:74:82:62:
a4:31:e8:38:99:64:3f:d5:69:05:52:89:ee:5d:b1:f6:6c:c1:
97:94:97:ef:0e:3c:bc:e4:34:68:14:28:0e:0d:74:75:2e:9b:
1d:fb:94:29:22:48:48:0a:ca:82:8b:5a:5d:bf:fc:83:1e:e3:
65:78:1c:0d:49:9c:2c:71:1f:a6:79:3e:b1:13:c7:e9:03:9c:
36:81:f9:64:5f:21:2d:90:96:59:a9:25:52:1f:93:d6:cd:6a:
ef:9c:e9:2e:da:bf:17:17:03:49:b2:78:11:50:37:ef:29:2d:
c6:b6:b8:d2:1a:6f:9f:e6:52:87:25:53:69:2f:63:bf:42:47:
79:de:27:92:3e:5a:26:df:c6:dc:84:f0:b4:60:5f:4c:1b:94:
e7:a7:25:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:08:49 2026 by rpki-client