Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
File: r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft (raw, json)
Hash identifier: 7LA52BqihFtPvvCRiR9AbR87qWvC63nMTUvwx5IDL5E=
Subject key identifier: BE:32:87:C2:64:B7:CA:73:8C:E1:D8:A5:77:E2:37:F7:10:FC:79:BB
Authority key identifier: AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
Certificate issuer: /CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Certificate serial: 019CAB34852F6F71B8746CA630FC0160262B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 21:01:11 +0000
Manifest this update: Sun 01 Mar 2026 21:01:11 +0000
Manifest next update: Mon 02 Mar 2026 21:01:11 +0000
Files and hashes: 1: L-zvgoeGr5QCNNKdFrigYiUThmw.roa (hash: 5dCIcepW4WjNJw8oLPf6dUnoQSabbeGPDqnNUHTDSio=)
2: QiAgT2HWAVS4RtCxk3EgrUcgIYg.roa (hash: KFQ1WZMAZMiBqbCBbEMvQWQem6/MoMp+dWHnCpqq7zE=)
3: r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl (hash: 9KwurdXFQOoLps8OM6J/SULjFHR6ZsyxSMAQ3EwDJ2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:85:2f:6f:71:b8:74:6c:a6:30:fc:01:60:26:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Validity
Not Before: Mar 1 21:01:11 2026 GMT
Not After : Mar 2 21:01:11 2026 GMT
Subject: CN=be3287c264b7ca738ce1d8a577e237f710fc79bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9c:3c:80:12:ca:ad:b5:8b:33:63:71:75:8d:
48:fb:63:6c:8f:a7:be:91:fe:5d:5f:b2:4f:76:ee:
ec:61:94:3a:9e:03:2d:8c:88:81:b4:a1:5f:ae:ef:
41:b2:e5:ca:93:67:42:bc:98:ab:d8:4f:41:c7:4c:
72:70:bc:42:ba:67:14:13:02:1c:ee:64:fc:27:12:
19:cb:4d:0e:48:15:8f:37:5d:18:1b:59:54:69:12:
6a:15:27:57:71:78:a9:56:81:68:cd:d3:64:f0:87:
be:47:7d:16:2b:4e:5a:b8:8a:a7:40:90:87:f5:49:
3e:8a:f2:4f:f4:48:17:3a:18:f7:0e:c3:19:97:90:
fc:ee:75:3c:90:4b:40:a6:94:7f:77:db:60:7c:ea:
8d:65:c8:dc:d1:93:fc:2a:78:5d:7e:07:77:2b:de:
3b:a2:f2:4b:9e:d1:dc:b7:27:85:8c:d6:99:63:83:
6d:52:15:88:0c:b0:bd:5c:67:17:8b:c5:0d:2f:44:
71:4c:e1:07:27:af:c4:63:cc:6c:3d:41:24:45:33:
92:b0:bd:a3:61:44:c0:67:f4:69:be:91:1c:fd:ad:
21:72:d3:e9:7a:70:1b:df:ac:b2:ce:74:b7:4c:49:
a5:6d:48:17:9e:b9:b2:dd:2f:9f:51:fb:93:93:3c:
bb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:32:87:C2:64:B7:CA:73:8C:E1:D8:A5:77:E2:37:F7:10:FC:79:BB
X509v3 Authority Key Identifier:
keyid:AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ad:64:6b:ca:cc:0a:86:5c:79:b1:d7:69:dc:55:83:c4:bd:
c5:20:85:fe:36:56:48:2d:22:69:3b:ce:21:94:d0:9e:27:b9:
93:ab:55:a6:00:c2:88:78:80:e3:94:1a:77:a9:78:0b:8e:02:
05:cc:09:7b:aa:75:71:9d:9e:65:c8:70:67:40:67:47:3e:b1:
9e:97:f9:18:de:7a:58:6a:91:31:61:41:64:0f:24:b0:65:f8:
37:6b:1d:0b:cd:4f:dd:93:66:cc:65:f2:39:62:fa:d7:14:41:
73:fc:a7:b6:41:19:13:53:4a:2d:d6:8f:59:32:33:f8:58:70:
1c:be:51:66:31:a8:b6:d1:63:32:c1:ed:a2:91:dd:36:53:79:
9f:93:9b:4e:53:0e:8e:8d:a4:4b:56:64:32:dc:44:f8:dd:b2:
f2:ed:ca:55:01:f9:94:a9:0b:38:90:83:9e:e9:97:0b:57:65:
4a:0a:b2:57:35:ad:b6:ca:3b:82:aa:ca:45:7a:84:6e:6c:a4:
99:ca:98:69:7e:71:e2:86:33:f2:b1:75:af:85:56:af:bf:f0:
3f:34:38:80:a5:5c:ac:2c:20:38:17:fe:7d:50:af:8e:46:2c:
d7:73:48:42:e3:2f:c6:80:be:f4:60:4d:d4:32:2d:c9:44:a3:
2b:87:57:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:25:34 2026 by rpki-client