Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: XYEZIAgsaf/QrmTmS1EU3eRk5qVCgDkP4rEJijte2E4=
Subject key identifier: 96:6B:8F:0E:91:7F:00:8C:64:F6:2A:A9:F7:A3:C1:5D:68:F0:EA:45
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 019CAAFD9841C836B04B29AA444225DF5F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 17D9
Signing time: Sun 01 Mar 2026 20:01:12 +0000
Manifest this update: Sun 01 Mar 2026 20:01:12 +0000
Manifest next update: Mon 02 Mar 2026 20:01:12 +0000
Files and hashes: 1: 03K81b7pfVVjypqVCITF7p4JxKM.roa (hash: PP40BChMOh4s2ABeNP+SORVGIO6bgC5+kty6waeJlqk=)
2: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: d6oAhOZ0h7rTAst3YuATnsMA2Arbd2+ksOIN0nLfClk=)
3: kY0iPrlp2DFcIszfKgZ7jk3A9ls.roa (hash: B98fM5TLrUnwgXpz2kR4adHMCSlg8M1bTdaWmo1lkZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:98:41:c8:36:b0:4b:29:aa:44:42:25:df:5f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Mar 1 20:01:12 2026 GMT
Not After : Mar 2 20:01:12 2026 GMT
Subject: CN=966b8f0e917f008c64f62aa9f7a3c15d68f0ea45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:49:91:5d:15:77:cb:7e:02:a8:e6:60:99:
81:3a:8e:a6:3a:bf:9b:1d:c1:74:26:4b:d3:9c:55:
86:2a:bc:51:e5:ac:82:17:eb:95:5d:64:d9:7a:f6:
dd:16:de:91:9d:2a:c4:f0:af:76:7a:59:9b:43:24:
57:b8:ad:bc:f0:7a:06:c5:fe:0d:aa:39:1f:a8:2f:
c0:66:36:e1:b7:14:be:b2:8d:4b:44:d7:00:72:7e:
8b:9f:5b:1c:4d:02:22:61:d5:1b:e1:39:7a:34:8d:
a9:b3:da:17:7d:d6:b1:93:11:7e:98:84:47:fe:99:
1f:b8:24:f9:80:a0:57:84:f2:0f:5d:9f:68:d3:88:
e5:3a:f0:b9:ea:74:6e:00:c6:d0:ef:2e:86:4f:4b:
e9:94:46:4b:63:20:cf:1a:b4:9a:c8:46:e3:cc:52:
4f:95:8c:51:c2:27:18:1b:51:f5:3c:32:58:d7:8a:
64:6b:2c:ce:a6:f2:c3:43:39:10:aa:40:0f:03:39:
45:23:b7:01:22:de:55:09:f9:a4:48:57:f9:29:33:
b3:01:2a:10:15:f9:91:b3:f0:4b:b9:e4:a7:df:f8:
d4:04:f3:e1:c7:39:28:54:da:61:71:b7:22:08:c1:
84:1c:a7:9d:4e:cf:27:eb:84:85:76:73:cf:b1:8b:
de:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6B:8F:0E:91:7F:00:8C:64:F6:2A:A9:F7:A3:C1:5D:68:F0:EA:45
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:65:39:34:da:80:a2:d6:03:9d:bd:c3:dd:83:07:c8:00:75:
da:2f:38:e6:25:e1:b4:2b:5c:49:70:5f:5f:d1:ef:6c:ea:d4:
48:d1:43:d6:5c:d0:72:b9:73:4e:fb:fb:35:68:d2:9b:fe:d7:
75:60:05:39:60:cb:b7:cd:70:af:72:fd:ca:96:54:61:f8:cc:
2b:47:e4:a1:d4:aa:ff:66:46:03:d5:a5:7a:cc:67:eb:2d:16:
e2:e7:31:6a:4d:89:0a:55:6d:c4:f1:34:4e:1f:82:94:aa:2d:
28:19:b9:8c:20:2a:84:33:bf:fe:38:2c:2b:55:d7:10:69:f8:
54:26:7e:18:6a:83:44:18:7d:2d:5f:be:a6:3d:90:8e:2a:da:
79:3a:c4:ca:3a:19:da:7b:06:7e:54:18:ee:82:70:bc:bd:6a:
f2:8e:01:ed:09:94:70:52:a1:07:82:c2:7a:a7:56:16:14:e3:
6c:c8:9c:70:60:34:f4:4c:b1:95:2b:ef:9f:26:3f:35:e2:27:
85:82:0e:e8:2c:39:b0:95:ef:9b:de:c2:6b:5b:be:49:61:37:
36:29:95:07:63:33:b5:39:4d:56:8b:02:81:93:17:dc:ed:d3:
53:03:cc:f4:ec:ae:dc:11:42:5d:33:b0:5f:42:3e:9f:2e:ba:
69:66:67:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:38:03 2026 by rpki-client