
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
File: eH0Q8i5f-ksg99W3goxVuVCal1k.mft (raw, json)
Hash identifier: F1u1G74nP/1YMOeoDfIQ84ytwa20sd9dAUs5IdBpCqA=
Subject key identifier: E6:F0:9B:18:5B:01:BC:00:2D:7D:DA:09:31:66:F1:0C:A4:FB:00:86
Authority key identifier: 78:7D:10:F2:2E:5F:FA:4B:20:F7:D5:B7:82:8C:55:B9:50:9A:97:59
Certificate issuer: /CN=787d10f22e5ffa4b20f7d5b7828c55b9509a9759
Certificate serial: 019CAC0FED8EFB432B338C177DEB16B41126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 01:00:50 +0000
Manifest this update: Mon 02 Mar 2026 01:00:50 +0000
Manifest next update: Tue 03 Mar 2026 01:00:50 +0000
Files and hashes: 1: eH0Q8i5f-ksg99W3goxVuVCal1k.crl (hash: EAFljZD3BRXeuHGv7Zc0DXfZ1sf7taNtgcQhwU+JOQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:ed:8e:fb:43:2b:33:8c:17:7d:eb:16:b4:11:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787d10f22e5ffa4b20f7d5b7828c55b9509a9759
Validity
Not Before: Mar 2 01:00:50 2026 GMT
Not After : Mar 3 01:00:50 2026 GMT
Subject: CN=e6f09b185b01bc002d7dda093166f10ca4fb0086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:26:08:f3:2c:98:b3:97:92:1e:b9:79:32:71:
c3:4c:60:d4:3d:d7:52:b0:ac:d8:7d:ad:19:4d:a2:
4b:c2:39:2a:f8:40:fd:0b:c7:4f:07:e9:a3:68:62:
af:7f:96:85:63:8c:22:6a:c5:d7:1e:6a:f1:5a:a3:
bc:43:58:4d:2a:52:bf:bd:95:2e:85:99:2c:d5:a1:
79:e8:8e:54:4d:ff:c9:cb:aa:5e:68:1f:73:00:a0:
06:37:16:50:89:8e:e4:e3:ef:79:92:96:78:75:fa:
17:28:55:49:e9:0d:8f:13:00:2a:82:92:77:7a:c0:
bd:49:c5:34:f7:3c:ed:72:e7:ba:1b:cb:1a:f8:1e:
7b:fc:45:fc:d7:fb:14:89:5d:3a:e8:7b:e7:43:d5:
c9:1c:47:28:b6:29:01:53:73:bf:ef:df:10:e3:bb:
c0:2a:3f:08:8d:d7:4c:17:ae:41:cc:94:bf:38:4b:
58:05:af:7a:3d:bd:7f:61:de:c5:96:b6:16:4c:16:
78:5c:cf:da:33:17:8a:91:dd:7e:4a:1c:63:7a:83:
c4:a3:5d:68:0a:23:90:06:90:ea:6f:a0:d0:5d:6c:
39:63:5a:98:d2:10:7d:83:be:ec:42:db:af:f6:11:
08:43:6f:f8:8c:37:0c:22:7b:f1:8f:26:9b:02:9a:
44:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F0:9B:18:5B:01:BC:00:2D:7D:DA:09:31:66:F1:0C:A4:FB:00:86
X509v3 Authority Key Identifier:
keyid:78:7D:10:F2:2E:5F:FA:4B:20:F7:D5:B7:82:8C:55:B9:50:9A:97:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:de:7b:7e:f9:32:c8:b4:d6:a1:e6:82:ef:61:cf:00:fd:9b:
af:48:18:5e:63:b1:51:b0:55:26:ec:10:b3:8c:e6:3a:49:3f:
ab:d9:ea:9e:30:52:43:3f:c3:11:a4:e0:c7:e2:52:68:45:4f:
ca:06:61:ec:ad:2e:93:d3:55:62:fa:ad:fc:d4:0b:f9:38:47:
3f:6b:d8:72:9a:e0:ca:e7:ca:ca:1b:99:de:94:8d:26:51:7f:
2c:e0:b1:92:43:17:e2:64:08:58:22:89:63:34:e9:39:91:6d:
02:fb:9d:de:6b:84:f2:7d:3a:18:99:c5:d4:98:67:58:97:78:
18:be:47:15:f6:4c:12:de:8f:75:09:b9:bb:26:6b:4e:53:4d:
6c:14:44:8f:69:a7:d9:5c:5a:0a:46:9a:57:c6:2b:2a:ac:be:
97:62:a7:ae:da:1e:cd:d5:03:5f:c2:f1:22:0d:df:9b:ee:8c:
ec:2b:55:74:f3:4b:01:77:41:cd:6e:f2:2d:f0:e0:4f:53:98:
1d:08:78:cf:70:0f:8e:6c:83:2b:ab:47:00:3d:75:0d:1c:29:
08:65:be:99:b5:bf:25:3d:d5:b8:3f:d4:e3:6d:29:6f:4f:a1:
d4:67:be:1a:61:96:1a:a6:14:44:49:88:ea:32:5b:02:56:f7:
89:65:4e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:05 2026 by rpki-client