Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
File: eHl3C__BTZzftXTshmyq8TVy9Fw.mft (raw, json)
Hash identifier: 7cYV83r4QUuAnbGooX4vUwkWljO6pjEYzVaXc8sRaNE=
Subject key identifier: DF:6B:7D:02:D6:81:E0:84:67:E9:9F:8F:42:B2:43:3F:06:E8:DD:46
Authority key identifier: 78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
Certificate issuer: /CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Certificate serial: 019CAC7DFF3F240F649791837738A9ADAB3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
Manifest number: 1507
Signing time: Mon 02 Mar 2026 03:01:04 +0000
Manifest this update: Mon 02 Mar 2026 03:01:04 +0000
Manifest next update: Tue 03 Mar 2026 03:01:04 +0000
Files and hashes: 1: eHl3C__BTZzftXTshmyq8TVy9Fw.crl (hash: +yq1zNUo63j5LSgAPt23Fy/BgUG6pOrYignuYOHIKZM=)
2: haFw3q9tFoad6JUgiF-KPVOV4eM.roa (hash: e1I2SrRGxtbgkFSgcz9jLZjRjE847NKvzw0g1roFc00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:ff:3f:24:0f:64:97:91:83:77:38:a9:ad:ab:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Validity
Not Before: Mar 2 03:01:04 2026 GMT
Not After : Mar 3 03:01:04 2026 GMT
Subject: CN=df6b7d02d681e08467e99f8f42b2433f06e8dd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2d:a4:1e:69:14:2b:26:fd:a6:69:c4:c2:0d:
58:6d:22:f2:e1:81:1c:3c:d7:77:8f:cb:84:0c:82:
b8:23:c9:06:cb:1c:fb:f2:28:fe:ae:7a:85:1a:8d:
9f:ab:36:c8:f1:50:6b:19:f5:55:a9:c5:74:d0:a6:
f0:69:5a:21:12:2c:e4:56:6f:18:b2:6f:52:16:ec:
17:94:9f:50:e4:d2:57:3a:79:8b:ec:04:8a:80:cc:
0a:fc:92:b1:e4:7d:d3:4a:67:35:96:12:02:6f:89:
18:b0:e3:04:af:00:67:4a:7b:f2:99:af:54:1d:64:
58:b4:9f:37:81:58:ed:ff:4a:d6:f6:d0:85:2a:6d:
93:b9:11:4f:7d:a5:41:b5:14:fb:a1:aa:64:ad:5a:
45:14:8a:41:09:60:78:76:c2:da:72:73:82:b7:f6:
4d:d5:ef:56:4b:26:a9:4a:64:8d:d9:3f:17:8a:b6:
85:03:63:86:ee:69:f6:9b:53:ac:96:f5:b1:11:91:
e6:f8:15:60:db:da:4a:7e:1d:68:60:91:67:c6:d8:
a2:79:41:bd:6a:1d:92:90:55:5a:c5:ae:2a:e0:77:
d8:5f:a6:31:99:d0:22:a2:61:17:01:f1:4d:ce:2c:
c0:96:e2:45:d1:00:54:f2:34:75:b5:4e:7a:ca:f7:
62:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6B:7D:02:D6:81:E0:84:67:E9:9F:8F:42:B2:43:3F:06:E8:DD:46
X509v3 Authority Key Identifier:
keyid:78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8c:bd:57:58:37:d3:58:81:37:f0:1f:21:4e:d7:02:ed:4e:
c4:17:51:0e:53:c4:9a:6a:a9:0b:cc:f3:9a:3e:ae:2b:52:50:
7f:98:35:34:ac:5b:25:19:5d:bd:78:ec:6a:75:46:58:1d:e8:
0f:0d:88:73:c3:7e:76:cc:4f:74:10:75:55:87:f0:15:b5:25:
36:76:77:2e:42:8b:72:48:5c:fc:ee:a7:b2:f0:83:a7:67:93:
c8:77:53:13:41:53:43:92:7b:21:64:97:c9:e7:34:6a:5c:5f:
ee:60:3a:e4:1e:b2:bf:33:c9:f5:00:96:f8:01:f0:d6:f2:ca:
d0:f0:12:04:7a:33:fc:e6:bc:56:2c:8e:a2:9a:ca:b6:d6:dd:
56:1f:db:df:0d:1d:86:2c:51:e2:38:42:32:a1:33:19:96:46:
4c:e2:03:b8:81:ea:59:ad:ef:2a:8b:9b:ab:ad:12:37:47:cf:
c0:de:da:7b:de:52:0e:ec:6e:e3:f6:38:b5:be:c5:11:06:01:
b9:55:84:b8:ee:b6:12:d5:29:8a:af:ac:30:15:53:dc:7c:c8:
ed:91:ba:21:18:a4:cf:3e:9b:29:89:f3:8e:c0:9a:bd:8e:c1:
35:b2:56:91:05:f9:30:50:06:fa:5c:d3:ea:ff:15:59:bf:02:
8d:84:e6:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysff8/JA9kl5GDdzipras7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4Nzk3NzBiZmZjMTRkOWNkZmI1NzRlYzg2NmNhYWYxMzU3
MmY0NWMwHhcNMjYwMzAyMDMwMTA0WhcNMjYwMzAzMDMwMTA0WjAzMTEwLwYDVQQD
EyhkZjZiN2QwMmQ2ODFlMDg0NjdlOTlmOGY0MmIyNDMzZjA2ZThkZDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8S2kHmkUKyb9pmnEwg1YbSLy4YEc
PNd3j8uEDIK4I8kGyxz78ij+rnqFGo2fqzbI8VBrGfVVqcV00KbwaVohEizkVm8Y
sm9SFuwXlJ9Q5NJXOnmL7ASKgMwK/JKx5H3TSmc1lhICb4kYsOMErwBnSnvyma9U
HWRYtJ83gVjt/0rW9tCFKm2TuRFPfaVBtRT7oapkrVpFFIpBCWB4dsLacnOCt/ZN
1e9WSyapSmSN2T8XiraFA2OG7mn2m1OslvWxEZHm+BVg29pKfh1oYJFnxtiieUG9
ah2SkFVaxa4q4HfYX6YxmdAiomEXAfFNzizAluJF0QBU8jR1tU56yvdiBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9rfQLWgeCEZ+mfj0KyQz8G6N1GMB8GA1UdIwQY
MBaAFHh5dwv/wU2c37V07IZsqvE1cvRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zN2UyNmYtNTdiOC00MDgwLWI4MzIt
ZWU3MzEzNzE2NDk4LzEvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zN2UyNmYtNTdiOC00MDgwLWI4MzItZWU3MzEzNzE2NDk4
LzEvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4y9V1g3
01iBN/AfIU7XAu1OxBdRDlPEmmqpC8zzmj6uK1JQf5g1NKxbJRldvXjsanVGWB3o
Dw2Ic8N+dsxPdBB1VYfwFbUlNnZ3LkKLckhc/O6nsvCDp2eTyHdTE0FTQ5J7IWSX
yec0alxf7mA65B6yvzPJ9QCW+AHw1vLK0PASBHoz/Oa8ViyOoprKttbdVh/b3w0d
hixR4jhCMqEzGZZGTOIDuIHqWa3vKoubq60SN0fPwN7ae95SDuxu4/Y4tb7FEQYB
uVWEuO62EtUpiq+sMBVT3HzI7ZG6IRikzz6bKYnzjsCavY7BNbJWkQX5MFAG+lzT
6v8VWb8CjYTmog==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:23 2026 by rpki-client