Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
File: elsD4kg77RNDh7_DBHoTmJ_epB8.mft (raw, json)
Hash identifier: YjZKR26r5tlDWrhQwgaaWE96iQBSXy6qL1H3R1+8saI=
Subject key identifier: 9E:82:87:C9:9B:5A:94:63:3B:70:14:F7:04:E0:94:DD:3B:04:5A:F4
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Certificate issuer: /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial: 019CA9B39CC7B5F8058CC0B51EEB193B4F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
Manifest number: 089E
Signing time: Sun 01 Mar 2026 14:00:46 +0000
Manifest this update: Sun 01 Mar 2026 14:00:46 +0000
Manifest next update: Mon 02 Mar 2026 14:00:46 +0000
Files and hashes: 1: 1jLJCus46gm-AStfLL9q2M5Ho3g.roa (hash: XrU3m/+eSwJdl/VMMh61KI+6fAsJ3/LwxcvviYIdgKo=)
2: QdrNcN-oAM5Z8NA93nywrdwjlpY.roa (hash: dR7J85RI6taLvzWRGM0v5+kdTnGBa4MyfOc9jNOLw3w=)
3: elsD4kg77RNDh7_DBHoTmJ_epB8.crl (hash: CjT5N9UVOschAJRLvTMmhwcsjbBFTh5EUmMVPbeIQAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:9c:c7:b5:f8:05:8c:c0:b5:1e:eb:19:3b:4f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Validity
Not Before: Mar 1 14:00:46 2026 GMT
Not After : Mar 2 14:00:46 2026 GMT
Subject: CN=9e8287c99b5a94633b7014f704e094dd3b045af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:8b:06:c9:6a:d4:30:48:fb:44:96:56:fe:
4f:5b:5e:5b:c4:76:c3:65:b6:05:8e:25:e4:d8:b8:
37:14:3d:88:48:52:7c:6c:e2:9e:57:7f:54:35:d6:
85:86:78:4c:84:97:23:f6:9e:13:0f:38:d3:42:63:
f0:c4:f2:65:6a:35:99:61:5c:1b:a1:71:e6:f5:6d:
83:44:27:65:d9:1a:3d:60:b2:e5:50:1a:90:05:f2:
93:10:e5:c6:07:8f:e9:45:22:37:ce:4d:f5:e9:2c:
ac:9c:35:12:a1:8f:03:61:16:1f:fa:c5:cc:89:80:
f6:a8:07:b3:38:65:fa:7d:39:71:2f:c0:b8:1a:a7:
8c:74:30:34:d5:61:ef:6b:50:b6:7e:09:0e:dc:db:
f4:b0:92:09:0e:7d:bf:fe:2c:a2:bc:9d:a3:93:28:
9b:8a:c8:22:09:f7:25:39:2f:c9:95:f7:45:45:39:
93:d8:a3:68:58:e4:8b:b2:97:48:da:2c:5b:80:66:
5f:72:2c:49:f2:10:08:06:ee:2b:e2:05:9d:96:0f:
3c:88:62:a7:45:96:0e:39:c9:cc:b5:7a:80:bb:82:
06:b9:ab:ac:92:7c:70:9d:fc:b5:5e:fc:58:f7:b9:
f5:7f:29:58:58:3d:c5:9f:2b:72:ea:a8:25:9d:13:
c8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:82:87:C9:9B:5A:94:63:3B:70:14:F7:04:E0:94:DD:3B:04:5A:F4
X509v3 Authority Key Identifier:
keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:47:08:91:fd:f1:53:c0:1b:6f:4f:0e:fe:ed:c7:b5:de:19:
d8:b4:18:b3:16:6a:82:54:ad:0b:11:4e:a2:b6:c1:8b:ec:e2:
ba:af:cc:ef:e5:8b:85:b4:54:b1:f0:b5:9b:e1:18:ae:4c:54:
2b:e7:4f:e0:06:e5:c7:52:29:91:5c:f0:fd:0d:86:bb:7e:16:
3d:d5:89:02:14:63:72:8c:f0:37:f2:c0:5c:6a:40:28:60:1e:
9d:d1:73:8e:d7:f3:20:b6:f4:1a:ea:56:93:b6:c4:dc:ac:a0:
6e:42:0d:18:a1:46:01:da:eb:ee:88:24:cd:af:5c:f9:14:94:
90:15:14:b4:03:08:2c:bf:87:a8:61:90:4b:de:ab:a3:86:f9:
f8:e8:ff:db:71:14:c0:57:1e:c1:24:6a:04:95:04:11:41:45:
57:e6:66:19:2a:1a:52:e0:3b:96:fd:63:4f:04:a1:3f:e7:a1:
f5:91:14:af:e3:5b:c8:98:97:52:23:3f:72:5e:9d:97:de:7d:
11:b2:3e:60:cb:ba:1a:28:63:07:79:0a:bb:57:b9:c9:ad:ae:
73:44:a5:c1:78:24:b3:6d:e3:95:68:1c:95:24:78:92:15:0f:
b6:5d:3c:04:d5:9d:64:19:26:34:7e:d2:26:c9:eb:7b:e2:ff:
c3:91:eb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:25 2026 by rpki-client