Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
File: eLHb4vrypuffpXTOVRkJYwFfHFM.mft (raw, json)
Hash identifier: FSzxtxgIcL7sUthLkE07nq9rSinwhENV0y94LtYu53M=
Subject key identifier: 52:B8:55:84:5D:F6:E3:93:3E:D4:15:5F:87:1D:38:04:79:75:AE:9D
Authority key identifier: 78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
Certificate issuer: /CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Certificate serial: 019D985080689670045A30D388BEB338B191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
Manifest number: 18AF
Signing time: Thu 16 Apr 2026 22:01:45 +0000
Manifest this update: Thu 16 Apr 2026 22:01:45 +0000
Manifest next update: Fri 17 Apr 2026 22:01:45 +0000
Files and hashes: 1: W0Nemhp4tNTnXPX1F7AWpLPz30I.roa (hash: q0w1RLWAwP0/SOoIQT2u4GQdyaJkPP+XShI2e/oMlPc=)
2: WCLjKmeCgQtKXh-2kHar0wTFzVQ.roa (hash: zRn4amqc3pIfm/L+/ojA95gE8hnWdpUc7Yqxx7Eldy0=)
3: eLHb4vrypuffpXTOVRkJYwFfHFM.crl (hash: iT5QAW5GhyKddhQU+HXf8N1SyWsLuDGa+E0U2xr/j2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:80:68:96:70:04:5a:30:d3:88:be:b3:38:b1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Validity
Not Before: Apr 16 22:01:45 2026 GMT
Not After : Apr 17 22:01:45 2026 GMT
Subject: CN=52b855845df6e3933ed4155f871d38047975ae9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b1:d8:55:fe:4a:24:d5:02:ad:ef:2a:7b:5b:
2c:7d:0e:f7:ff:77:ff:bd:f1:6f:ec:26:33:92:33:
a4:e1:41:52:2c:87:7f:3a:2f:ed:86:69:b7:54:58:
07:4f:66:ad:16:11:cf:27:56:13:ee:02:aa:51:d5:
6b:60:fa:93:c3:18:c5:6f:d2:52:d1:f0:56:60:d1:
94:55:df:5f:66:2e:99:eb:9a:6a:a6:08:bd:c6:be:
64:04:b6:7a:26:aa:46:ee:9b:db:59:c2:7d:fb:ce:
22:e6:1d:d7:86:ee:f2:44:cc:59:da:b2:34:74:7e:
93:ff:73:ba:ba:8c:e2:5a:3f:9b:92:17:fa:d8:65:
a2:2a:f5:57:59:64:28:a2:8c:ed:69:5a:5a:09:d2:
4e:df:7c:6d:12:5b:8d:73:87:a8:74:04:d0:08:b2:
f8:ef:d4:fb:82:aa:ff:93:37:0c:39:30:b9:39:6d:
52:f4:a1:a5:fa:64:c4:54:c9:c5:66:65:51:42:44:
53:80:20:c5:70:71:17:c9:a1:18:73:12:e5:10:21:
90:64:e8:8b:df:78:99:6d:d2:6a:29:27:f1:21:79:
f4:fd:32:e8:cc:7d:66:54:a0:94:70:cf:10:7a:53:
a7:c7:c6:44:b1:84:76:76:ec:db:4e:94:90:65:15:
dd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B8:55:84:5D:F6:E3:93:3E:D4:15:5F:87:1D:38:04:79:75:AE:9D
X509v3 Authority Key Identifier:
keyid:78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5e:c6:4d:74:20:78:8a:55:3e:19:9c:74:2c:e8:b9:83:49:
d0:e6:17:40:b3:00:c5:fc:29:cf:0c:7d:1a:82:c4:79:29:20:
75:55:13:66:98:a0:78:cb:87:bc:45:9b:40:4b:26:b3:f5:5a:
f4:0c:7b:74:2c:0a:7a:6c:59:ec:11:e9:a0:6b:ee:e3:0f:08:
e8:70:5e:3a:3b:21:fe:de:62:a4:2d:4b:42:15:ce:ea:d9:7a:
34:15:53:9f:28:a5:cd:8e:a5:f2:90:0b:e7:b3:46:c7:33:9a:
67:e8:7e:fa:33:03:e7:0e:96:aa:ee:dc:d1:e3:b4:87:e6:30:
a2:bf:65:69:30:0e:ea:ff:4b:f7:8c:ba:08:14:85:2f:53:c8:
eb:a3:2b:67:b8:40:ec:71:3c:ff:20:12:a7:a2:43:d7:9b:64:
f4:8e:5f:32:fa:3e:ff:10:6b:8b:72:f8:f1:5a:e6:6e:79:d2:
14:8a:09:c8:ab:11:ae:fd:ec:f9:a7:c5:c3:2d:de:07:2d:5c:
25:bb:0e:05:51:3d:cd:9a:28:6d:c3:c8:9e:fc:90:d3:5c:e9:
b0:03:ca:8e:c9:71:b5:46:b8:53:5a:f4:54:42:00:3a:a7:45:
0d:73:ca:dc:9c:60:55:35:33:cc:5d:34:c3:46:ec:cd:87:fe:
b2:2e:c6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:21:55 2026 by rpki-client