
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
File: eBd1rflxcuL2j8kQUwnTdTuh9M0.mft (raw, json)
Hash identifier: fsez2n4gXNzYpcnOU6iUPnT7lvGKghfzXFno2W8ixS8=
Subject key identifier: AA:5D:D5:22:0D:26:87:7B:4E:56:25:0B:38:EE:9D:C7:31:13:58:72
Authority key identifier: 78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD
Certificate issuer: /CN=781775adf97172e2f68fc9105309d3753ba1f4cd
Certificate serial: 019CAB6BA16BE46CA691D1071A344C25DC32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:01:23 +0000
Manifest this update: Sun 01 Mar 2026 22:01:23 +0000
Manifest next update: Mon 02 Mar 2026 22:01:23 +0000
Files and hashes: 1: eBd1rflxcuL2j8kQUwnTdTuh9M0.crl (hash: yN7xuDE2Op4aaDmave7sh/yRSnZi8BVFwEZXOmsa6UU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:a1:6b:e4:6c:a6:91:d1:07:1a:34:4c:25:dc:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781775adf97172e2f68fc9105309d3753ba1f4cd
Validity
Not Before: Mar 1 22:01:23 2026 GMT
Not After : Mar 2 22:01:23 2026 GMT
Subject: CN=aa5dd5220d26877b4e56250b38ee9dc731135872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:91:f4:c9:bd:54:47:a9:00:63:fa:71:83:a2:
b2:7e:a9:eb:0e:0a:8c:9b:10:65:5f:3a:0d:93:fe:
8a:48:11:dc:66:dd:0e:2e:89:41:52:f1:84:cd:96:
24:25:5e:0f:b6:1b:1b:48:51:5b:83:9b:93:15:6b:
22:3e:58:f9:ee:a6:75:d1:98:0e:d9:0e:68:1a:eb:
c6:c5:b5:49:d8:27:08:82:a5:bc:f5:ff:8a:c3:eb:
6f:d1:c2:f9:3f:32:74:a6:c5:7b:27:7c:05:2f:56:
3c:12:9f:80:ce:5a:63:48:62:79:ca:a9:64:4e:a8:
ec:2a:51:3b:4b:d9:85:3f:f6:b8:e0:c6:0a:f9:a8:
41:9a:e7:0b:59:3d:08:79:a3:68:c5:aa:dd:be:44:
00:04:e0:9b:b0:94:7a:55:6a:c1:0d:31:6e:40:27:
77:3c:aa:91:e1:38:9f:10:f2:2e:d4:72:2e:a5:15:
da:36:63:ba:40:23:eb:57:95:be:fc:ce:aa:9a:2b:
53:ef:62:ba:14:8b:d2:c4:c2:ca:23:27:4a:c0:ca:
6d:d7:b4:a8:46:a1:87:08:1d:4d:42:b5:1c:67:bb:
f3:7f:e5:7d:4e:c1:df:c4:ee:d9:c5:d4:52:3c:92:
6e:7a:6e:79:35:0f:0d:d8:f9:56:6a:78:cf:d3:d0:
65:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5D:D5:22:0D:26:87:7B:4E:56:25:0B:38:EE:9D:C7:31:13:58:72
X509v3 Authority Key Identifier:
keyid:78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:be:19:20:7f:be:7c:a5:42:f8:5f:11:55:83:5f:04:62:52:
91:97:e1:05:c2:3f:a4:02:0a:54:f0:ec:1d:c3:e1:b3:ea:73:
48:cc:f4:ff:fb:81:b2:25:79:d8:85:62:da:19:6e:e0:d8:d9:
ac:41:88:aa:11:9a:2a:84:4a:74:38:9c:a6:05:87:d0:e4:4e:
98:56:b3:47:20:2c:1e:7f:18:07:b5:91:44:35:f4:7d:19:e8:
78:77:b3:13:f2:8f:64:61:f1:38:b0:ac:5c:00:8b:b4:f2:84:
1e:cb:f8:8a:4c:ca:12:41:6a:70:96:f1:9a:82:31:4b:29:09:
e5:a9:1a:2e:f6:e8:fe:34:46:ed:dd:65:7f:85:85:52:81:00:
05:88:4e:52:be:90:b0:96:c8:be:11:57:f8:ed:18:4b:3d:79:
fc:8b:8f:58:72:ab:f8:4c:08:90:de:5d:0c:ba:92:64:c3:22:
bd:03:1d:b0:69:42:88:03:20:d0:e3:ac:18:f9:d4:1b:35:70:
e6:04:ba:d9:a4:84:c0:98:60:b4:4b:8d:e0:e7:50:9d:20:fd:
81:c7:80:60:01:4c:a9:d1:7c:45:e8:50:7a:9b:f6:fc:5e:b1:
ad:45:19:94:e6:0c:bb:0d:6c:df:3d:66:9b:f0:7d:3d:75:f4:
43:b7:a2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:06 2026 by rpki-client