Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
File: eLHb4vrypuffpXTOVRkJYwFfHFM.mft (raw, json)
Hash identifier: O6QVerGrRMU1L/HPo2kSpwZ6HxShZvokUPnsl7HKitM=
Subject key identifier: DF:B5:D0:32:20:A8:C2:ED:C1:A4:DD:69:EC:75:11:AE:A9:F7:91:E1
Authority key identifier: 78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
Certificate issuer: /CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Certificate serial: 019CAAC6A226D06E146DA684197469ABDADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
Manifest number: 1834
Signing time: Sun 01 Mar 2026 19:01:10 +0000
Manifest this update: Sun 01 Mar 2026 19:01:10 +0000
Manifest next update: Mon 02 Mar 2026 19:01:10 +0000
Files and hashes: 1: W0Nemhp4tNTnXPX1F7AWpLPz30I.roa (hash: q0w1RLWAwP0/SOoIQT2u4GQdyaJkPP+XShI2e/oMlPc=)
2: WCLjKmeCgQtKXh-2kHar0wTFzVQ.roa (hash: zRn4amqc3pIfm/L+/ojA95gE8hnWdpUc7Yqxx7Eldy0=)
3: eLHb4vrypuffpXTOVRkJYwFfHFM.crl (hash: TXrW1q40rAJ+dRA/AqSyo5A3Oy8fgO2wu50iZpYzt4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a2:26:d0:6e:14:6d:a6:84:19:74:69:ab:da:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Validity
Not Before: Mar 1 19:01:10 2026 GMT
Not After : Mar 2 19:01:10 2026 GMT
Subject: CN=dfb5d03220a8c2edc1a4dd69ec7511aea9f791e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ba:b3:e9:52:59:5c:9b:3b:59:39:34:59:11:
cf:ab:31:6e:99:d8:e2:76:37:43:47:d7:93:b2:44:
a6:a4:b1:ae:2a:ed:06:69:c8:1a:1b:e1:3f:53:7e:
51:8b:30:e6:80:c4:f3:e7:ed:b3:6a:92:63:15:f3:
32:50:ec:86:52:0b:17:5c:ff:8b:1c:c7:41:0d:77:
c6:db:10:f3:1c:74:2b:40:04:ec:b0:19:7a:7a:1a:
f6:ac:ce:48:23:40:c9:d2:2b:07:03:bd:9b:3f:5b:
cc:08:9e:00:00:43:fc:34:28:f0:ce:82:3b:8a:98:
7d:56:62:71:4f:1d:00:44:10:ec:c6:ce:ec:3d:89:
ab:f0:1d:dc:a9:22:fa:fb:e1:dc:4c:4e:0c:75:f2:
d9:13:e1:d4:dc:39:42:02:9a:82:20:c5:a0:0a:f3:
49:5a:90:46:b9:93:58:48:95:e6:e2:86:ff:98:70:
35:fb:9e:a8:74:21:8e:ec:9c:4c:2d:bb:2b:d4:dd:
fd:a5:89:94:0a:d3:8e:66:5f:09:e8:9e:78:0b:63:
5e:34:6e:f3:33:03:d5:f9:4d:ba:8b:19:75:58:aa:
07:5d:f4:b3:d1:0c:a4:c7:a4:45:a1:45:ed:36:94:
09:8f:0f:34:28:7c:61:8e:96:31:89:20:be:be:57:
73:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B5:D0:32:20:A8:C2:ED:C1:A4:DD:69:EC:75:11:AE:A9:F7:91:E1
X509v3 Authority Key Identifier:
keyid:78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d1:70:5d:00:e2:e6:14:bc:a1:16:1b:be:b7:37:a1:68:80:
ff:00:1a:0a:6e:cc:e1:50:c2:ad:c2:c3:84:ac:db:9e:ab:45:
ce:54:20:1f:b8:81:be:a7:54:63:e4:b5:69:14:b1:fa:5c:c2:
d0:6b:7c:20:21:a8:15:c0:87:4e:ec:2b:28:36:22:79:d6:0b:
a4:ee:b3:13:09:00:40:c7:60:10:0d:4a:9a:f1:52:e8:aa:8c:
4b:7c:11:e9:9b:52:2b:42:fa:01:b4:43:f9:1e:3c:ef:09:d8:
5d:f5:fe:e8:5b:5e:78:fe:99:bc:1f:fd:73:2b:0b:77:fd:c5:
70:62:24:e9:65:1f:43:fb:7a:2c:cb:9d:45:e2:c0:f3:11:b2:
9a:a5:b4:53:47:de:37:95:48:d4:4a:30:66:3b:88:c1:6d:37:
e6:ac:fa:ca:d8:31:44:d9:ae:fa:85:da:ef:6e:9b:fd:3f:ce:
c3:cd:33:d9:79:da:6d:a1:2b:10:15:5a:ae:26:3a:cf:bd:ec:
56:bb:bd:51:28:10:67:43:3a:10:96:d4:0a:cc:6c:f6:23:3b:
b7:5e:e3:ad:d1:06:13:08:b7:f0:4d:08:34:69:58:2e:5d:80:
5a:bf:47:0d:b4:db:7a:64:0e:9c:1d:47:46:61:52:84:1f:30:
99:81:9f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:13 2026 by rpki-client