Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
File: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json)
Hash identifier: gXwn8L8SnkoojD4kHSkU/pT2GUwSMXDAydr4UzY8W5o=
Subject key identifier: 35:21:FA:5D:75:EB:58:26:F1:C5:7F:C8:1B:5C:10:D4:A7:55:83:C8
Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Certificate serial: 019CAC103E9A607EB261E1BEC4B68A4A0479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
Manifest number: 0F7F
Signing time: Mon 02 Mar 2026 01:01:11 +0000
Manifest this update: Mon 02 Mar 2026 01:01:11 +0000
Manifest next update: Tue 03 Mar 2026 01:01:11 +0000
Files and hashes: 1: U0fRXYHgtW5Lj2ILWS5wUzrlnN4.roa (hash: rlb8IZvmVYRTy9dDl5LBuhuMRpChfmFYGPXw/aHFukE=)
2: Zu2YCOMNdF6aNceeKzP2XiSPhlU.roa (hash: cnBeGVbEPlV3dfTfeIQYswJCwcZDweKXTvgV5NLGKQU=)
3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: /d3AVWgW5feJQtM8K+zGvz5HuqSheYNASZuFIZsQjK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:3e:9a:60:7e:b2:61:e1:be:c4:b6:8a:4a:04:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Validity
Not Before: Mar 2 01:01:11 2026 GMT
Not After : Mar 3 01:01:11 2026 GMT
Subject: CN=3521fa5d75eb5826f1c57fc81b5c10d4a75583c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bf:e0:93:88:c1:6c:49:15:2a:fb:0c:79:7a:
23:21:18:29:f9:91:44:ea:41:bd:87:e1:1c:b3:14:
5c:cf:5c:86:3e:f1:8f:91:91:b7:88:5e:ac:0a:f1:
42:f3:f0:6d:bc:31:60:e7:e5:4b:a0:46:9c:97:ad:
0c:c3:d7:9d:01:d3:11:50:7b:b2:aa:dc:4a:a2:ba:
45:22:8f:e2:74:13:ff:73:6e:76:d9:24:e3:38:20:
1b:ca:6a:08:4b:2a:e0:a4:39:64:a1:12:cc:16:c7:
3c:ae:e1:52:10:cd:fa:ba:4e:a5:73:d8:84:94:8f:
a3:67:28:79:67:89:de:0f:ec:c8:e3:e0:c5:7f:e5:
f2:2d:cb:e1:34:9b:6d:cb:9f:98:88:70:2f:67:e5:
f3:46:f5:7f:00:a0:bf:22:d3:c4:b5:ce:84:a4:76:
e0:1f:20:68:51:8d:7e:99:e8:44:77:1c:7f:e7:5f:
97:b7:2c:fb:a1:44:d1:11:25:15:50:b8:e9:05:20:
13:e0:d6:65:24:28:06:ff:3e:f8:fb:55:3a:84:45:
f9:fa:75:c1:73:d0:3e:e4:ed:e4:7b:e1:b2:89:eb:
22:f9:4d:8b:e4:8a:5c:9d:7a:9f:de:6c:be:97:5a:
0a:bb:ec:f6:2d:b9:76:e6:fe:6a:87:10:a1:dd:ed:
6a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:21:FA:5D:75:EB:58:26:F1:C5:7F:C8:1B:5C:10:D4:A7:55:83:C8
X509v3 Authority Key Identifier:
keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c9:94:86:8d:22:bf:ee:58:44:f9:d2:94:af:7c:a2:11:c3:
de:51:51:78:6b:de:7b:c7:50:00:dd:d6:71:d9:74:c6:e8:f7:
e0:cc:9d:9e:4f:1b:80:2c:7a:11:2e:fd:4c:41:de:2e:56:96:
1e:55:ed:01:02:ee:7b:e2:d6:e6:bc:03:62:d6:42:57:a3:83:
21:ab:5d:11:73:fb:76:68:d3:c2:d9:9b:24:9b:35:e0:ff:27:
85:91:ad:05:df:a3:44:62:0d:ef:cd:ad:32:58:b6:92:64:f5:
97:9f:f7:10:f9:fe:83:36:cb:40:00:4e:6a:d5:83:e7:5b:af:
0d:0c:ab:a2:f1:a1:a8:e2:23:56:70:a4:7e:c3:98:1e:40:a1:
83:23:f8:ae:97:0a:7a:15:8f:db:10:67:03:cf:b1:b4:bd:58:
6b:98:29:a7:bc:de:72:87:a5:5f:12:cd:f6:df:c9:04:6f:d7:
a4:d8:14:54:8c:e0:fe:b2:03:a5:0a:4c:7f:7b:92:8c:e6:fe:
26:4d:02:79:3c:4b:9a:5f:0e:d6:d1:81:97:7f:4d:27:50:cb:
5c:59:2e:dc:9d:3d:b2:21:34:2a:4d:b2:b3:d6:42:cc:87:0b:
b2:10:c8:a8:e1:86:8d:a9:d5:30:c7:4d:8d:36:18:19:29:6e:
89:ed:76:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:36:45 2026 by rpki-client