Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
File: eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft (raw, json)
Hash identifier: tDBd2vGhIWLwLC01bDS0h7op0o/NQB5cdvyXXgkA2xQ=
Subject key identifier: BA:63:86:21:BF:8B:F8:78:48:5A:E1:4C:40:3B:D3:69:15:B3:07:11
Authority key identifier: 78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F
Certificate issuer: /CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
Certificate serial: 019CADFE17884B354A6747B6266F4B83B1CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
Manifest number: 0824
Signing time: Mon 02 Mar 2026 10:00:36 +0000
Manifest this update: Mon 02 Mar 2026 10:00:36 +0000
Manifest next update: Tue 03 Mar 2026 10:00:36 +0000
Files and hashes: 1: SEbMX_kWUsX_R1OTVRjFem2rhCY.roa (hash: XiNk8rorUk0GfMBPxUagzsQDmXdqYnZd77EYh58Os5s=)
2: eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl (hash: cgNFdy4gZUyGvklI057vDG6WpWV8VcF9wL8aJJaCG50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:17:88:4b:35:4a:67:47:b6:26:6f:4b:83:b1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
Validity
Not Before: Mar 2 10:00:36 2026 GMT
Not After : Mar 3 10:00:36 2026 GMT
Subject: CN=ba638621bf8bf878485ae14c403bd36915b30711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:46:bc:93:50:9b:a7:90:b0:c9:92:02:47:
cf:d7:04:05:ac:18:83:dc:fb:a6:6b:a3:00:f3:27:
ae:1e:7d:ea:43:cc:42:da:21:ae:6d:b5:4e:97:ac:
7b:28:0a:5e:88:c1:8a:a6:b8:8c:6a:f8:13:84:ea:
ce:56:49:9f:8e:23:a6:ca:48:59:c6:94:a8:d5:55:
ab:79:a7:56:48:3c:f2:ab:6f:af:fc:0d:08:09:4d:
1d:81:36:83:6a:3f:dd:94:c0:64:ec:37:97:3d:11:
be:a5:87:60:e9:a9:bd:75:a6:d8:e5:f6:c7:19:9c:
ea:61:10:2b:22:8c:5f:10:bf:f2:b8:c9:b8:0b:91:
78:7c:da:2b:08:14:eb:d7:76:66:97:2a:22:1e:5b:
dc:51:f8:2c:7c:1a:e7:87:c6:23:43:e1:a0:72:76:
19:92:47:ac:89:19:50:16:b7:13:cf:99:01:ee:66:
06:a7:af:0e:5f:21:8b:53:b4:36:c6:cc:00:71:65:
17:f1:9a:21:61:59:4b:b7:37:fd:a0:2a:66:fe:c1:
ce:21:14:4c:91:bf:3f:33:75:c0:c2:f2:55:34:79:
36:5a:4a:f6:e8:eb:d7:62:12:3b:35:69:19:8d:be:
9f:36:d5:34:ac:d2:04:6d:82:1f:92:be:9e:3c:bb:
e5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:63:86:21:BF:8B:F8:78:48:5A:E1:4C:40:3B:D3:69:15:B3:07:11
X509v3 Authority Key Identifier:
keyid:78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f4:53:68:2f:4f:a6:e3:bb:c9:8c:6b:44:13:54:55:33:fc:
e4:72:86:f0:17:5c:26:8f:08:85:85:cc:66:51:d9:66:76:51:
8f:97:0f:eb:e4:16:4d:64:fb:2d:be:e9:cb:50:55:cd:a1:dd:
24:e7:f0:4c:f1:ce:00:6b:d0:6e:74:ec:99:29:b0:ca:69:66:
25:bb:94:ce:79:28:93:6c:ea:a2:61:37:10:bf:a0:ce:17:b6:
4a:8b:a9:ee:b1:e4:78:c1:26:87:2e:b1:27:1d:c8:66:a6:17:
32:44:8f:53:15:dc:91:d3:3b:fb:f8:c8:31:6b:56:f4:a9:49:
d5:ac:3d:38:c0:57:9f:fd:62:57:87:81:c4:21:e0:6b:a0:8f:
df:e6:59:8e:fc:b7:dc:58:26:41:96:72:7d:49:d0:64:c7:11:
3c:5f:0f:81:51:6c:b6:01:21:6a:99:91:44:5b:39:f3:1b:78:
05:6b:88:fe:c1:af:e2:9f:7d:09:f2:68:22:1d:19:eb:4c:f8:
0e:51:3e:49:a2:09:8b:ce:f9:33:6e:03:7a:31:3b:18:e1:74:
df:34:6a:b3:00:7d:95:26:8d:f2:42:e9:6d:29:19:93:43:ea:
52:1f:5b:1d:05:46:cf:f4:ae:90:52:f7:fb:86:51:92:be:07:
75:1f:b6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:54:30 2026 by rpki-client