
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
File: eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft (raw, json)
Hash identifier: 488vTn4vtE16EMDY8y1HmSSsWVL8JzJ19sUj45FViuw=
Subject key identifier: 51:14:A7:B9:78:AB:AB:C0:71:EF:50:BC:A3:E7:6A:23:A8:B3:95:63
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial: 019CAD90637C9AC83E3DE0F1F247391CB3FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
Manifest number: 184F
Signing time: Mon 02 Mar 2026 08:00:46 +0000
Manifest this update: Mon 02 Mar 2026 08:00:46 +0000
Manifest next update: Tue 03 Mar 2026 08:00:46 +0000
Files and hashes: 1: 0KPNPZABDj0Qzagg_XV0X1ugEl0.roa (hash: MiYwj7dTzwCXkj4L24OFbR3dzFvz57EK/cZJ5GPnv1I=)
2: 0qcfJpEX8g6MF2qj_nDo1QD1IkU.roa (hash: E2DR9Q+D5XZIwJi+r9euBWagkYE3FYAiz4v22D7W4YM=)
3: 3AW5BjScGKAvdrK1Tz5bl8xJnoc.roa (hash: AnfSRJoJBQHSsw5wKN0U0W2kl6uSdHO9bTTKS8nGB5c=)
4: S-bwMSos2-eKtENDykR1_8Qkp_I.roa (hash: xbxuJbxZkr/mH223J2YVdm3uiis0Dm1Iy28FKMjVeRU=)
5: XyYjURWnDtL6j5DL-ST6SPw7rFI.roa (hash: 26mKNoH4079E9ccWRUpU/d+cgxVIAOMCoINSih0nzDo=)
6: eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl (hash: LP4Kv1tYK0OSC09F0LKGgVTEDEkgI+ilTVpDWcBE/Ps=)
7: lPnGL0KIOYwCmT8t1QVCdAPTLQc.roa (hash: bPZuuyywF6pfSEcL1PH/gV1v3n4qj+MA79LKLf/5bEE=)
8: tDGAKA6vCaBKcErUgT3MNC6aIu0.roa (hash: e/pJ6HHlGchTF3Diz9Sgd8uUt2kZ7DHh23Gu0gHK74Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:63:7c:9a:c8:3e:3d:e0:f1:f2:47:39:1c:b3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
Validity
Not Before: Mar 2 08:00:46 2026 GMT
Not After : Mar 3 08:00:46 2026 GMT
Subject: CN=5114a7b978ababc071ef50bca3e76a23a8b39563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:47:85:0b:23:3b:18:e1:91:c0:5e:bb:b2:
ce:c9:bc:8b:71:b0:2c:cd:18:40:9b:73:03:48:a9:
76:d2:ee:5c:ba:30:95:fd:7b:3f:5d:8d:3e:21:ba:
30:4a:2f:ea:2e:5e:1b:05:54:7d:b9:45:97:9e:19:
d0:cd:16:e9:05:02:dc:05:11:62:6e:41:ab:24:48:
f1:4d:ce:68:9c:8e:3c:cd:06:08:e7:0a:0f:5d:3c:
08:59:77:bf:61:c8:55:48:2f:d8:a5:39:3c:80:97:
08:f0:71:e5:6d:7d:a6:f9:31:3c:ac:43:1a:49:aa:
9a:19:64:6d:b0:9b:7d:f9:e1:e6:a2:9b:e8:75:61:
4e:9b:f6:0d:36:ff:4c:5d:ba:79:3f:56:83:f1:2b:
1f:93:1c:24:4a:06:00:c9:c4:df:f0:7f:ce:26:3f:
55:e3:df:ad:e7:fc:3c:b5:df:91:07:f5:2a:19:fa:
70:d2:a4:22:03:21:14:05:54:46:39:0c:cd:1e:bc:
17:bb:c0:3c:1d:e5:73:59:34:7e:57:70:3c:ed:d9:
ab:41:04:33:fc:b0:8f:c6:7d:9a:c6:17:2e:bc:96:
c4:f9:cf:93:c7:1d:19:49:cf:d1:27:97:ee:2c:18:
d2:4f:8d:ac:bc:db:82:83:37:a4:9a:bb:a1:16:ef:
3c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:14:A7:B9:78:AB:AB:C0:71:EF:50:BC:A3:E7:6A:23:A8:B3:95:63
X509v3 Authority Key Identifier:
keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f7:a0:21:25:45:cb:2d:0e:3e:d9:17:de:eb:12:81:ee:84:
35:41:ed:e2:78:4b:92:3c:45:94:54:0d:6b:02:ab:36:6c:d3:
c3:3e:57:93:da:f4:56:c2:67:69:97:88:50:35:f6:12:ba:03:
e8:aa:6d:da:e9:3e:8a:14:89:bd:3e:a7:8e:53:53:56:6a:e5:
df:2d:b4:ee:8e:12:04:11:e4:61:78:61:72:c0:53:34:a1:bb:
2a:a5:9b:d3:e0:bb:ca:97:5a:54:70:ac:f0:78:23:79:71:18:
7a:28:d7:82:3c:0b:e0:4a:be:76:b4:b1:eb:fa:61:ba:df:cd:
b0:5f:98:d4:9a:40:c6:e5:38:c1:29:31:15:20:c3:35:d1:91:
07:51:9c:4c:55:00:60:33:94:7a:3b:6b:f5:b1:77:de:b9:05:
b4:93:f0:54:aa:50:c7:2a:28:e6:f5:0d:fe:37:33:50:e3:e8:
7b:e7:e7:e1:cf:18:d8:74:40:c9:eb:0d:dc:8d:e0:95:a1:c4:
ce:97:66:8e:78:8e:e8:07:56:66:7b:23:96:10:77:77:b6:2e:
79:4d:27:92:64:e1:a2:71:a5:48:7b:9d:4c:65:da:43:f7:82:
ab:9d:df:6b:cf:96:8c:1b:71:8a:8b:6b:0e:9d:91:bf:de:ea:
d1:9b:39:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:34 2026 by rpki-client