Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
File: enBAB-ITXIsSeANbp2QrmRWURLE.mft (raw, json)
Hash identifier: H+HOc9gjOvvf/v+ZVMQM/I+kcCOLTz1VWpRoIaR08c4=
Subject key identifier: CF:4C:91:C5:0E:3B:FD:B5:89:64:52:DB:F6:1B:C8:24:34:A7:4B:4D
Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
Certificate issuer: /CN=7a704007e2135c8b1278035ba7642b99159444b1
Certificate serial: 019CAC46E686A20DE5F8678E28546F51E416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 02:00:53 +0000
Manifest this update: Mon 02 Mar 2026 02:00:53 +0000
Manifest next update: Tue 03 Mar 2026 02:00:53 +0000
Files and hashes: 1: enBAB-ITXIsSeANbp2QrmRWURLE.crl (hash: WUsPoSuoPTKXPiUWaERU39//PNVK8HIDAaNcEV8dhhU=)
2: n2RXCHmE2mIVVK86mWjjYTONVEY.roa (hash: vfexF/zKDf9M5bj3mCjRl7MbjkVTZHBSgi+Kjne7g2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:e6:86:a2:0d:e5:f8:67:8e:28:54:6f:51:e4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1
Validity
Not Before: Mar 2 02:00:53 2026 GMT
Not After : Mar 3 02:00:53 2026 GMT
Subject: CN=cf4c91c50e3bfdb5896452dbf61bc82434a74b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:14:2e:d9:e5:71:bb:d3:47:2a:3b:85:99:1f:
c6:b3:89:58:04:c7:f3:0b:16:c6:e3:eb:53:27:59:
4f:b3:bd:40:7b:ef:7f:b1:2c:17:e5:08:1a:38:44:
96:b4:f2:49:44:7e:9e:93:96:ee:18:f6:f4:da:e4:
45:a8:df:4f:f7:82:a4:dc:10:6c:bc:2a:99:c7:d2:
0f:f7:50:84:73:c8:09:9e:1c:97:ea:69:c7:e3:0e:
2b:57:d9:28:01:67:e9:7f:a4:21:65:bb:d8:72:4d:
23:97:d6:f5:02:3a:a8:c6:14:ee:17:a8:ff:42:3a:
1f:3a:83:e3:97:77:b5:e9:af:02:0b:95:2b:79:c8:
5c:b6:8d:55:cd:9d:04:28:03:23:94:d6:2d:a5:0b:
33:5b:23:02:e4:df:6d:9d:82:cc:ba:3d:76:b1:ff:
83:02:9a:ab:74:86:16:de:b1:99:cc:62:14:64:d7:
47:f8:ed:d4:ad:8f:64:67:fd:b9:c5:cf:cf:cd:84:
e8:e8:e9:d3:a5:82:3f:bc:4a:00:95:7e:78:55:94:
7e:55:4c:f1:c6:00:2e:39:5d:dd:ea:8c:f8:65:c1:
be:e3:57:85:6a:ba:21:70:b7:9a:d7:71:d8:fc:88:
4b:b5:3f:3c:90:0b:6b:4a:88:ff:f7:12:95:c6:65:
0f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4C:91:C5:0E:3B:FD:B5:89:64:52:DB:F6:1B:C8:24:34:A7:4B:4D
X509v3 Authority Key Identifier:
keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:82:db:c0:43:55:f3:62:0b:9f:2e:12:02:ce:4d:51:4a:4f:
ca:55:f2:8d:2a:66:5d:96:52:71:29:02:1d:fe:2c:d8:8b:c7:
57:be:d4:fd:2b:34:99:87:cd:f2:31:2c:a1:49:a7:bb:8e:8e:
ae:b3:2d:94:b6:f1:c5:23:9f:09:1f:eb:09:12:a4:f2:70:6e:
27:0b:64:cc:05:94:9f:7f:a3:f9:e7:4e:83:9f:28:21:d8:18:
05:88:4b:42:be:09:37:04:e3:e0:53:56:0b:56:b6:fb:e4:b0:
49:eb:c8:ae:55:8f:7a:c9:e3:b6:73:72:31:a2:66:21:ae:28:
98:61:09:4e:af:d6:45:23:ea:09:73:cc:50:ec:bc:34:4e:d4:
d0:95:54:c7:f5:b9:52:42:c8:3a:d1:42:12:c3:87:89:fc:e8:
1a:b3:b0:95:69:19:b4:0a:b1:2c:53:3a:ea:2c:73:a8:23:6f:
66:8e:0f:16:c2:c5:c9:dc:4d:62:94:93:f3:88:a2:e0:54:ec:
1f:ba:80:d9:dd:79:c8:3b:6e:2a:a5:b6:28:c0:ed:be:bb:07:
cb:63:c0:ca:90:22:e3:bd:0a:8b:01:59:26:ef:02:37:3b:d3:
55:1d:18:bb:9b:10:2b:e2:0a:69:1d:30:de:f5:47:89:a0:28:
45:74:53:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:54:53 2026 by rpki-client