Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
File: eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft (raw, json)
Hash identifier: sqUVf9rdVk/JUzkGW8IAMC/d2rbQFzMCdi/DC/ukB4Q=
Subject key identifier: 1B:1E:C1:72:C6:34:19:84:3F:09:00:F2:AE:EC:E7:38:84:69:12:C9
Authority key identifier: 78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
Certificate issuer: /CN=7870621fc0afc8ec18eef20633f6148813279976
Certificate serial: 019CA9EB3FC060D5CCB17441EFAAEB9614B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
Manifest number: 070B
Signing time: Sun 01 Mar 2026 15:01:32 +0000
Manifest this update: Sun 01 Mar 2026 15:01:32 +0000
Manifest next update: Mon 02 Mar 2026 15:01:32 +0000
Files and hashes: 1: eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl (hash: AOsE4skPt4mnKOkgAXla4JCHjf38zOQkCMU31H120yM=)
2: jjcLF7vH_6kvhdbuJiucTbxqBvg.roa (hash: 9CdEC+k58JtQfXt8cCMHjsV9l0T5+udg+CTuc06zGlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:3f:c0:60:d5:cc:b1:74:41:ef:aa:eb:96:14:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7870621fc0afc8ec18eef20633f6148813279976
Validity
Not Before: Mar 1 15:01:32 2026 GMT
Not After : Mar 2 15:01:32 2026 GMT
Subject: CN=1b1ec172c63419843f0900f2aeece738846912c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a2:1b:13:0e:02:60:13:c4:c6:e7:85:9f:7e:
16:01:76:50:4c:b9:55:f9:62:bb:e9:af:20:a4:e0:
25:71:73:e9:75:48:b2:d4:b9:26:9c:6b:34:18:d7:
94:42:b3:92:8d:33:37:90:0e:80:87:cb:6f:a4:13:
99:93:52:18:30:6f:62:5f:de:c7:21:88:ef:8a:07:
44:64:cb:f9:99:e4:b2:f2:0c:2b:d7:f9:41:d9:8c:
cc:19:f2:01:3c:c8:2a:bd:ee:96:fa:30:35:e8:3f:
00:f5:b4:77:df:d7:88:3e:bf:b7:2b:f6:15:d2:b8:
32:86:4a:4a:a2:e8:89:fa:51:d9:17:21:d8:95:6a:
5a:53:3c:4f:e1:09:74:66:db:df:93:08:13:b3:16:
e2:27:d5:ea:36:f8:c0:ba:76:de:5d:3b:a5:2f:5a:
a9:6d:78:41:25:66:c1:e1:a6:d2:c5:1d:e8:d9:23:
c7:1d:25:a0:29:4a:c2:02:80:06:b5:a9:60:03:c0:
11:4a:4c:b2:b9:66:09:61:88:33:02:05:da:b5:ba:
02:0c:94:33:5d:02:10:55:7d:2c:c2:54:4d:4b:36:
c1:25:f8:8a:84:b7:64:2d:52:a8:86:78:20:03:45:
91:0c:ae:27:93:7a:02:bb:21:a1:f1:f2:8d:74:2d:
c4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1E:C1:72:C6:34:19:84:3F:09:00:F2:AE:EC:E7:38:84:69:12:C9
X509v3 Authority Key Identifier:
keyid:78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:21:2a:20:16:6a:bb:6a:38:33:d9:ab:44:2f:94:8a:b6:63:
f3:13:65:e4:4d:e9:69:69:ce:4e:25:ae:77:b1:53:9b:d6:1b:
fb:c0:5a:1e:21:07:d6:39:b8:d1:06:f3:8c:a1:e7:d1:6e:f5:
0b:2b:06:16:30:d1:3e:63:1d:9f:7d:56:c7:c6:b0:5c:f6:6f:
9b:ae:94:a8:82:52:cf:f3:8f:47:96:2c:0b:d2:a7:55:5a:3e:
0d:03:7c:da:0f:b8:29:b7:85:a3:8d:c6:5b:db:fd:b4:70:a2:
8b:6a:29:a2:35:e0:bd:d2:aa:5b:9f:db:16:2b:94:de:cb:db:
51:8c:a5:cb:b9:60:6f:52:6d:0c:52:da:69:ce:f2:82:09:59:
ea:5f:92:a0:21:16:55:7c:57:ec:c2:46:c2:ce:4b:be:55:9c:
ab:a8:88:bc:89:c0:02:fa:88:05:ca:dc:53:7c:ad:f6:d5:f7:
8c:d7:6a:11:f0:d8:9c:6d:f1:14:53:cd:3b:e7:40:61:16:bc:
99:e0:6a:2d:0c:b7:6d:1f:94:aa:19:33:0c:d1:6c:5a:bf:3d:
8b:9d:d4:99:3e:57:5e:ca:6f:e6:c2:d1:da:55:62:ec:b7:7b:
97:30:b8:0e:11:be:c8:d3:91:67:89:71:00:af:0f:64:bb:93:
60:6d:ee:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:54:56 2026 by rpki-client