Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
File: eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft (raw, json)
Hash identifier: 8R6GuoWL+nK8iaoO0Kb0GWd//FqHoFFhUJwn2JV5fqk=
Subject key identifier: 6A:1C:38:AC:9A:4C:5C:9C:B3:43:DE:86:80:BD:02:01:B8:EA:14:8A
Authority key identifier: 78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
Certificate issuer: /CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Certificate serial: 019CAC7E3ACBC1346B99C6B495129B100BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
Manifest number: 1588
Signing time: Mon 02 Mar 2026 03:01:19 +0000
Manifest this update: Mon 02 Mar 2026 03:01:19 +0000
Manifest next update: Tue 03 Mar 2026 03:01:19 +0000
Files and hashes: 1: Bwkx1yBfb5ahbhTivvQ1c_pnxFk.roa (hash: aHLPvUbvNIc+Ou4JG1lur7gkz+XtobWC8sxOe1/DSL4=)
2: eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl (hash: 1bZHC/xPMsUZc7RDFhZixTiOcS9DiIVIjCi3iMK8Qag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:3a:cb:c1:34:6b:99:c6:b4:95:12:9b:10:0b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Validity
Not Before: Mar 2 03:01:19 2026 GMT
Not After : Mar 3 03:01:19 2026 GMT
Subject: CN=6a1c38ac9a4c5c9cb343de8680bd0201b8ea148a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:a5:5b:ea:b9:ce:37:99:f7:5c:bd:14:47:
88:d3:e4:bc:c4:34:4f:d6:4e:0a:a0:ed:d4:35:2e:
5a:29:93:ce:09:72:6a:70:09:62:b2:67:66:4c:9e:
fe:42:eb:ee:aa:d8:70:56:8d:24:d6:15:29:04:a9:
59:7c:0c:69:cd:0a:53:41:e3:84:4b:15:39:e7:d7:
0a:4d:11:97:dd:11:85:e8:93:24:65:7a:de:a1:ac:
d4:04:6d:f5:06:06:00:9b:3c:74:ea:88:e5:3f:99:
f7:cb:6d:84:45:c3:46:9b:84:50:df:87:f3:7e:26:
a5:ae:0d:f3:6f:4f:fa:4e:83:4c:4a:9a:c7:39:8b:
f4:f8:d3:90:92:9d:f1:81:87:92:2a:50:39:d7:8d:
05:dd:9a:38:0a:f9:3a:40:e5:94:cb:c5:89:30:2b:
49:41:b7:5c:52:ac:b7:5f:70:d7:d9:b9:6c:7f:ba:
5a:de:a2:64:2b:c2:58:13:3a:2c:be:01:48:5e:5d:
fa:d7:ae:11:9b:16:a5:c2:f5:c4:b8:0f:af:4e:2b:
f5:08:3a:39:47:a9:22:85:01:03:6e:84:6f:c1:1a:
66:99:7e:84:5d:25:a0:f4:31:ec:50:72:4e:d1:a2:
b6:1c:3f:77:2b:96:22:7c:cb:01:b2:55:fd:9d:c1:
01:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1C:38:AC:9A:4C:5C:9C:B3:43:DE:86:80:BD:02:01:B8:EA:14:8A
X509v3 Authority Key Identifier:
keyid:78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:e9:9b:68:ea:6f:82:96:56:99:ad:a3:8c:b0:cc:98:3f:99:
c8:84:b2:57:40:94:6b:43:ff:af:1d:ee:0b:93:13:42:e5:85:
2d:f5:24:05:ad:31:18:87:cb:1e:16:d5:9a:60:a7:51:26:2b:
d3:fd:0d:a7:1d:80:bf:11:a3:d5:5d:24:f5:f0:82:12:c0:e6:
a8:d8:29:02:49:dc:0c:1f:d5:ac:57:36:50:0e:26:5e:bb:63:
12:ec:e1:53:17:2c:83:fb:d8:a7:83:b1:19:d6:34:09:3d:eb:
1e:fd:0b:a2:4b:c2:59:f1:c9:38:79:f1:c1:6d:4e:66:65:41:
de:9c:34:f0:e5:3f:39:ea:3c:bc:17:6f:b4:fa:13:c4:e2:96:
34:97:07:4f:82:24:37:96:8b:25:cb:5b:93:10:6c:53:de:c2:
3e:31:89:01:11:9a:58:75:30:0b:1c:04:b8:ed:04:67:60:db:
d9:e8:00:0b:49:b4:2f:8c:ba:04:44:13:49:43:09:12:ea:3e:
91:23:80:34:d4:69:f5:94:79:01:bf:67:bc:94:53:e7:7e:65:
4c:eb:5c:38:65:2a:0d:27:bb:af:47:73:76:be:ab:43:8a:3b:
79:2e:a1:74:a5:fb:41:70:8a:67:a1:90:e5:d8:b0:57:35:ac:
6a:db:88:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:22:54 2026 by rpki-client