Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
File: enBAB-ITXIsSeANbp2QrmRWURLE.mft (raw, json)
Hash identifier: qMnH97nGq+iwGV4K2J3HshoecEB3m1Vi3KixTdN8nc8=
Subject key identifier: A1:E7:EF:88:09:29:31:8C:DE:5E:ED:BA:4B:6B:C9:B8:6A:2F:70:D9
Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
Certificate issuer: /CN=7a704007e2135c8b1278035ba7642b99159444b1
Certificate serial: 019CAE35954412D03E4C5806A6CDA53E8251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 11:01:12 +0000
Manifest this update: Mon 02 Mar 2026 11:01:12 +0000
Manifest next update: Tue 03 Mar 2026 11:01:12 +0000
Files and hashes: 1: enBAB-ITXIsSeANbp2QrmRWURLE.crl (hash: f+QC4bSz0MJmMeaVzXiSdUk2y9+qa7jAdQl602UXCKg=)
2: n2RXCHmE2mIVVK86mWjjYTONVEY.roa (hash: vfexF/zKDf9M5bj3mCjRl7MbjkVTZHBSgi+Kjne7g2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:95:44:12:d0:3e:4c:58:06:a6:cd:a5:3e:82:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1
Validity
Not Before: Mar 2 11:01:12 2026 GMT
Not After : Mar 3 11:01:12 2026 GMT
Subject: CN=a1e7ef880929318cde5eedba4b6bc9b86a2f70d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b6:86:e8:94:4b:54:ed:84:4b:f3:f9:6f:bf:
56:6d:3c:68:98:39:17:c3:15:88:9b:38:70:24:f6:
80:87:cc:bd:f3:0b:db:cc:22:6d:c9:02:31:22:d8:
4b:63:55:9a:de:12:0f:59:0f:6a:55:e8:d9:b0:44:
54:36:8e:38:ae:2e:16:ce:f5:bb:42:c9:68:e3:3c:
79:64:52:77:dd:3f:d1:5e:cd:15:c1:91:44:dc:5e:
ab:5e:98:8e:59:99:b3:be:1b:f9:8d:98:44:60:a0:
e2:12:4c:df:8b:30:8e:0d:f8:70:2d:bf:1b:9b:f0:
83:3a:08:07:eb:6c:34:a3:bc:3f:f9:20:e1:23:f6:
24:2d:d9:16:88:2a:1c:13:af:c8:ca:31:97:1b:a0:
ad:c8:31:7b:93:0d:61:aa:03:81:e3:8c:14:cc:1f:
64:3d:cb:3c:48:34:41:76:c9:d0:ab:1d:e3:1c:f5:
bb:d9:0a:eb:03:b1:ea:78:9d:99:fc:f1:bf:90:5a:
e6:0b:2a:73:b3:a5:7d:59:12:1c:97:65:1c:37:4d:
70:ac:a0:94:66:f0:7d:f3:aa:05:90:5a:13:df:9e:
ff:8d:d5:05:6f:3c:40:da:c2:92:26:0a:f8:46:b9:
c5:1f:26:ee:b1:2a:76:89:82:62:c3:5a:c2:8e:0c:
8a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E7:EF:88:09:29:31:8C:DE:5E:ED:BA:4B:6B:C9:B8:6A:2F:70:D9
X509v3 Authority Key Identifier:
keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:96:05:bc:e4:41:fb:34:bc:0a:a2:a3:38:75:b9:95:5d:c3:
5f:58:fa:de:35:64:05:7f:48:d8:77:2a:c3:52:dd:00:66:a2:
d5:a9:50:2a:67:3d:4b:64:a6:10:ff:de:1c:08:9a:bf:8d:0d:
ef:ad:40:e0:57:79:ad:a1:39:0c:97:12:e9:dd:b2:4b:7b:24:
b7:5d:fe:b6:ce:ad:94:ca:eb:62:9f:40:ba:e6:9f:67:e7:20:
62:de:4d:cd:aa:49:a7:f3:0a:35:a8:ba:a6:9e:58:07:0d:9a:
4a:1d:b5:cd:f8:cb:22:49:02:be:da:12:e5:1e:8d:67:60:fb:
20:e0:bb:2c:3b:79:38:85:81:ab:5f:78:44:f1:ed:ee:aa:2f:
a4:4d:26:21:b4:51:f6:cf:8b:ae:bc:55:32:23:fa:bd:20:17:
f8:16:97:f5:84:2d:dc:66:2b:b3:59:db:34:fb:0b:b4:1c:f9:
11:51:5f:bc:a9:3e:99:ed:b2:55:6f:df:a1:df:a2:d5:a0:c2:
74:18:30:89:8a:7c:d0:1c:1e:6f:13:6d:1c:4f:1b:75:15:f7:
f8:2a:d7:56:e0:7f:36:7d:8a:04:9a:3e:b1:70:50:e7:18:2c:
62:c1:12:55:39:97:74:24:89:83:04:a7:c7:35:f9:76:98:47:
68:8b:99:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:58:39 2026 by rpki-client