Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
File: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json)
Hash identifier: q0oU1UU5Hn9mjH8/+RH20SAYdhyZkQhlkxJX8w9+FSM=
Subject key identifier: E0:18:A3:5F:A8:71:26:DD:68:C9:32:A2:24:68:AE:D3:FD:91:22:35
Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Certificate serial: 019D99995642DC0393D69F3D979AE070F072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
Manifest number: 0FFA
Signing time: Fri 17 Apr 2026 04:00:56 +0000
Manifest this update: Fri 17 Apr 2026 04:00:56 +0000
Manifest next update: Sat 18 Apr 2026 04:00:56 +0000
Files and hashes: 1: U0fRXYHgtW5Lj2ILWS5wUzrlnN4.roa (hash: rlb8IZvmVYRTy9dDl5LBuhuMRpChfmFYGPXw/aHFukE=)
2: Zu2YCOMNdF6aNceeKzP2XiSPhlU.roa (hash: cnBeGVbEPlV3dfTfeIQYswJCwcZDweKXTvgV5NLGKQU=)
3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: GVr5zNlhmrFhSDc73wVf47R6EJazBOsi4oLlw27JIGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:56:42:dc:03:93:d6:9f:3d:97:9a:e0:70:f0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Validity
Not Before: Apr 17 04:00:56 2026 GMT
Not After : Apr 18 04:00:56 2026 GMT
Subject: CN=e018a35fa87126dd68c932a22468aed3fd912235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:82:63:27:bd:58:f2:5e:08:19:7d:43:7a:9c:
83:44:f1:55:58:1e:e5:40:a3:47:17:0b:7f:b3:b4:
73:7d:68:12:0d:91:6c:a8:1b:a6:94:46:ee:3e:3b:
bc:03:e7:15:97:55:e7:19:93:34:97:05:f8:88:cc:
44:e8:22:7b:c8:e8:2e:63:f1:35:f4:ef:9d:90:25:
23:40:f2:42:46:12:0e:57:cb:6e:7b:16:1e:be:50:
0d:1d:c3:98:53:e6:fc:9a:ca:48:34:4f:55:de:14:
0c:e2:88:08:fb:33:95:7a:32:46:4c:79:47:91:b0:
09:6e:57:96:93:16:02:41:d4:6f:73:3c:52:6c:c3:
70:22:cd:41:e1:72:41:29:da:49:d4:cb:12:43:0f:
00:e3:f7:4d:b8:cc:86:b4:37:e5:91:c7:fc:7f:ed:
11:53:d2:e7:46:fe:3d:f2:e1:52:4f:88:7f:a2:49:
18:a1:d6:08:80:3d:a8:c3:60:af:2d:52:e2:74:bb:
5d:f8:98:b5:83:0a:88:fe:b6:59:ed:8a:32:4d:a3:
5a:09:9e:e8:fc:88:b7:28:00:d3:0b:3c:f7:05:db:
66:cd:e5:6a:38:71:d3:78:22:70:58:20:40:b7:9b:
ac:47:da:c4:22:02:c2:7c:c0:82:8e:82:30:34:4d:
9f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:18:A3:5F:A8:71:26:DD:68:C9:32:A2:24:68:AE:D3:FD:91:22:35
X509v3 Authority Key Identifier:
keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d2:86:6d:4c:3f:75:a1:32:97:05:77:12:63:ac:24:a0:c6:
76:f2:09:28:2c:bc:a6:3f:9a:98:b6:39:76:a7:d0:1f:16:d5:
a0:d0:62:61:8f:64:c7:06:8c:ad:1b:2e:fc:b9:0d:be:ca:32:
b3:a6:3f:ea:3f:32:8e:cc:45:9c:86:19:c6:ca:e6:55:d7:e8:
d9:bf:0c:93:76:5c:ca:63:fa:1c:12:c9:97:e3:49:26:64:bf:
66:ff:6a:ee:f1:c1:98:ae:f2:94:5f:b0:ef:30:75:74:b1:c7:
33:43:3c:13:ea:4b:b4:3d:4f:b2:d7:bd:bd:f0:a4:0d:7c:77:
0a:cb:57:5e:a6:2e:6a:51:a8:23:2d:9f:7d:30:3d:51:e9:29:
ad:e0:30:b9:bf:25:9e:ba:71:08:63:84:42:33:93:bb:4f:b6:
27:1f:0d:a5:58:16:d8:33:0c:73:df:39:7f:24:5f:2d:ba:97:
09:96:69:67:87:97:b9:5a:f1:bd:6a:00:6c:dc:b5:b0:ab:0f:
07:c4:5c:f3:7f:95:ab:11:a5:f7:79:64:1e:00:34:da:ba:ac:
09:30:17:89:d4:7f:d8:a7:6a:eb:de:7d:e8:49:2b:99:f4:f4:
32:96:71:fa:69:a8:31:cf:ec:8b:6c:27:5e:d9:2f:bb:55:bc:
b2:75:69:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:34:06 2026 by rpki-client