Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
File: eIehaWWHX29TvMMfDkk6lhVOt7k.mft (raw, json)
Hash identifier: jUVQwIjrZN4pvFpwO2bvU+81YGdWq2W0s5YVgT+vVgs=
Subject key identifier: FC:71:53:6E:0A:C6:D2:24:04:50:F5:E7:56:1D:9B:9E:9C:14:EB:99
Authority key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
Certificate issuer: /CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Certificate serial: 019CAC46FADDC068E2914E48D249CA9A7590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
Manifest number: 1565
Signing time: Mon 02 Mar 2026 02:00:58 +0000
Manifest this update: Mon 02 Mar 2026 02:00:58 +0000
Manifest next update: Tue 03 Mar 2026 02:00:58 +0000
Files and hashes: 1: MJofjdkMEmgx2BydUOl_6hfgSP0.roa (hash: SYQp19hNRf4PycQPpMlkNy2V7oY/RHobHYkQy5EY5Uk=)
2: e3rUNCM0Xf2LeGKAo_m6z686FVs.roa (hash: /zRO4TdqdR87Zu84kUd28IeKppEjdoIpNzsSQ/9y0kI=)
3: eIehaWWHX29TvMMfDkk6lhVOt7k.crl (hash: yxPduOGp/Q0+5bRKVqL8eUs7FgOOSUtXhHO1dXVx1GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:fa:dd:c0:68:e2:91:4e:48:d2:49:ca:9a:75:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Validity
Not Before: Mar 2 02:00:58 2026 GMT
Not After : Mar 3 02:00:58 2026 GMT
Subject: CN=fc71536e0ac6d2240450f5e7561d9b9e9c14eb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:55:72:52:50:57:47:65:c4:07:cd:7c:f4:
22:ef:db:eb:a2:72:ee:fb:ad:cb:87:aa:b6:c3:36:
07:47:93:35:35:73:2c:fc:55:4d:35:32:ff:33:bd:
68:22:93:d4:cb:8b:4f:e5:fa:ca:df:d5:65:c3:d3:
2f:16:2a:c9:b6:c4:97:63:40:a1:ab:f6:53:50:e9:
e7:5e:df:11:01:f2:58:66:41:29:65:86:75:3a:fa:
2b:04:ca:49:eb:0e:e6:de:09:df:1a:4d:64:24:07:
1f:61:1d:a5:46:c2:3a:91:23:d0:20:28:2c:db:22:
44:ae:6d:e3:b3:b6:d7:a4:f1:c2:b7:d4:b6:d1:d5:
3c:51:02:30:40:31:e7:26:1a:b9:68:07:45:08:db:
b0:a6:77:fc:5b:7f:80:22:b6:8f:d0:b7:4c:92:67:
64:d8:5e:78:bf:89:19:1e:66:c1:cc:31:f0:d2:88:
66:0f:cc:ef:b1:be:5c:80:85:bf:a1:75:93:70:31:
f2:12:63:3c:43:be:b7:b9:e2:17:90:05:2c:37:c3:
2c:41:fb:b4:bd:af:e8:51:ef:9d:57:5f:af:fc:7d:
a7:cc:be:8f:64:94:a2:df:19:55:79:1e:57:6f:d8:
b6:25:58:8a:9e:f5:7c:b6:8e:65:c9:b3:22:a2:a8:
1e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:71:53:6E:0A:C6:D2:24:04:50:F5:E7:56:1D:9B:9E:9C:14:EB:99
X509v3 Authority Key Identifier:
keyid:78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c9:63:2c:3c:57:4b:a4:5d:1e:93:e3:bb:8b:87:d8:9b:48:
87:ae:3a:43:53:00:2b:d8:a3:2d:54:7d:64:f4:65:ef:e1:f4:
06:11:f3:f2:b2:23:8c:59:83:5a:29:bd:1c:9e:ea:4d:97:99:
40:ed:1e:2c:9b:77:a8:1e:30:ec:da:92:a6:11:42:b0:cb:3c:
f7:ea:28:c2:07:58:89:9b:c5:ca:35:eb:3e:67:04:e2:ea:7d:
52:12:9d:2d:be:3d:41:12:64:9d:bc:66:c0:9f:d2:47:5d:04:
46:c8:d4:45:d5:d7:ac:46:f1:a7:79:f0:04:2b:b1:f6:1b:b3:
7a:84:6e:04:0e:9e:19:55:af:ba:30:65:1d:71:fe:3a:ca:1b:
22:5f:a5:da:36:5c:cd:ef:6f:8f:60:c6:fe:89:41:55:5f:6d:
77:21:32:ac:98:d6:e3:2f:a4:f6:47:ca:fa:96:32:f0:ee:f8:
7e:9a:96:1f:3f:75:57:28:b8:5d:24:ec:7a:45:89:1e:48:46:
03:eb:88:91:b4:ce:d6:22:2a:1f:ca:12:de:d7:c9:cd:49:95:
38:88:d8:95:b9:d4:8f:2c:64:83:74:1b:9d:4d:ed:1c:c4:dd:
2f:9a:9c:ee:ba:37:aa:b4:06:9f:1a:28:fa:27:8b:54:42:38:
9b:4e:09:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:56 2026 by rpki-client