Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
File: eIehaWWHX29TvMMfDkk6lhVOt7k.mft (raw, json)
Hash identifier: qhz5FT+6IkbMaFJmDoqlJH2vlOvUbxmvSb2bisU+Wqo=
Subject key identifier: DB:B4:9D:B1:15:AA:B2:5D:22:9E:27:41:59:5E:DF:B6:C6:5B:17:1C
Authority key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
Certificate issuer: /CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Certificate serial: 019D99CFD133C995348F3367CB9D148CA78F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
Manifest number: 15E0
Signing time: Fri 17 Apr 2026 05:00:26 +0000
Manifest this update: Fri 17 Apr 2026 05:00:26 +0000
Manifest next update: Sat 18 Apr 2026 05:00:26 +0000
Files and hashes: 1: MJofjdkMEmgx2BydUOl_6hfgSP0.roa (hash: SYQp19hNRf4PycQPpMlkNy2V7oY/RHobHYkQy5EY5Uk=)
2: e3rUNCM0Xf2LeGKAo_m6z686FVs.roa (hash: /zRO4TdqdR87Zu84kUd28IeKppEjdoIpNzsSQ/9y0kI=)
3: eIehaWWHX29TvMMfDkk6lhVOt7k.crl (hash: Xkk2lV8GOiJrzUBUJRIphT8xmhlzH9ZCOKG7K/y6LJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:d1:33:c9:95:34:8f:33:67:cb:9d:14:8c:a7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Validity
Not Before: Apr 17 05:00:26 2026 GMT
Not After : Apr 18 05:00:26 2026 GMT
Subject: CN=dbb49db115aab25d229e2741595edfb6c65b171c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:eb:74:2c:e2:a8:00:e4:a5:77:89:68:b4:
3a:c9:74:28:63:a2:bd:02:7a:7b:16:8e:1c:b2:69:
2d:62:6e:ed:16:8b:44:f6:f2:31:6b:ca:36:8c:62:
65:43:20:20:21:a1:c9:5a:56:3d:66:a7:ee:2d:fb:
c0:65:72:fe:0e:6f:b3:1c:bf:a8:23:34:2d:43:80:
3c:b9:e6:3f:13:f5:e7:e8:22:4e:32:3e:e1:a5:17:
5f:ea:f2:d9:be:0f:47:8d:b2:a1:12:34:73:1f:e7:
8e:79:4b:c1:56:38:2d:5e:76:4a:72:39:f3:12:5c:
02:ea:3c:e5:92:a3:dc:c5:34:b0:6d:ad:0d:54:1d:
5f:49:18:ed:05:b8:0f:0c:f5:af:8e:2a:a0:c8:77:
51:d4:75:30:03:a1:50:ae:42:77:82:e4:64:c4:5a:
0a:2e:65:56:e7:1d:4d:a1:4f:e7:fa:9b:e7:a8:35:
71:34:7c:55:9e:d1:2d:4d:01:c6:dd:da:46:b5:d0:
da:4d:1d:3c:74:68:a4:fe:46:de:d7:b2:c7:0e:e9:
dd:00:b3:c4:87:9a:68:d3:ff:a1:a4:93:83:29:9b:
ea:ca:0d:f3:0c:a1:e2:ec:9b:d9:d7:1a:c4:fa:ee:
fd:59:44:f3:bb:7f:08:d5:2c:72:bd:af:c7:c9:80:
a7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B4:9D:B1:15:AA:B2:5D:22:9E:27:41:59:5E:DF:B6:C6:5B:17:1C
X509v3 Authority Key Identifier:
keyid:78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ea:a6:5a:f5:65:5b:d1:52:68:78:1d:62:ef:c7:85:8f:9a:
8b:7c:51:26:b9:40:90:42:a6:94:61:ca:35:d5:d3:d4:32:3f:
02:04:e2:e7:0b:73:27:c2:36:c0:a0:c1:94:9f:1f:23:41:01:
c3:e5:8e:16:23:d2:d7:59:4c:b5:59:84:68:dc:64:d2:44:4a:
3a:cd:8e:5c:fc:96:a6:d8:16:42:28:88:d3:df:50:3e:fa:a0:
bd:2d:e3:6c:67:79:59:9f:5c:65:c9:cb:32:80:ab:f6:c2:94:
0b:d2:1b:c1:97:12:ad:68:85:3c:be:2b:23:eb:5a:96:a3:01:
fd:4b:26:c2:94:58:cb:83:11:98:90:0d:de:b2:bf:db:a4:79:
16:d1:f6:3c:69:dc:39:ee:1e:d9:d6:2c:e6:b4:02:f6:0c:ef:
59:67:06:ec:dc:7a:d1:3b:8b:11:7c:34:a8:e3:5f:a6:fb:6d:
23:30:21:74:17:d3:ac:72:7e:18:8c:f0:37:3e:da:be:0c:18:
85:92:88:db:e6:0e:ef:13:46:f7:92:92:aa:00:ab:8d:14:87:
36:98:f9:e1:d0:4d:9c:fe:54:90:6e:4b:c9:cd:37:8f:7b:5c:
a6:f7:11:89:81:60:06:cc:05:5f:f0:12:96:31:6c:b2:74:3d:
73:54:ae:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:31:14 2026 by rpki-client