Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
File: ehJ9Y84cnzVXOQryH8BhBypSX04.mft (raw, json)
Hash identifier: eB9GpDSvu2FC30YayJJ6F0+4HodxIrmkijSZC/ZN6QM=
Subject key identifier: 8E:1A:FA:50:55:91:C5:FE:F9:2B:00:88:93:19:F9:AF:CE:0D:21:53
Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Certificate serial: 019CB13672FDB8BD8A0AB8C724B42B90B3B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
Manifest number: 03A0
Signing time: Tue 03 Mar 2026 01:01:01 +0000
Manifest this update: Tue 03 Mar 2026 01:01:01 +0000
Manifest next update: Wed 04 Mar 2026 01:01:01 +0000
Files and hashes: 1: ehJ9Y84cnzVXOQryH8BhBypSX04.crl (hash: fAbHyAOcp/3SdNUaltz02Pozx3FXXPT7CMEBQF9SeyA=)
2: mryfSMsiVc0yv4FSUpt7qiqcwh4.roa (hash: 0IMb7oddMwh/zy5T4EnTss9mtPc9VXAUaEOcmqL1xfU=)
3: o_rtVjzkw0KDuX61bKwdi27cJvI.roa (hash: /gFVliPW+JCCvNfNfgkacSugBlyQGtqR4HbJDxkhEjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b1:36:72:fd:b8:bd:8a:0a:b8:c7:24:b4:2b:90:b3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Validity
Not Before: Mar 3 01:01:01 2026 GMT
Not After : Mar 4 01:01:01 2026 GMT
Subject: CN=8e1afa505591c5fef92b00889319f9afce0d2153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:4e:9d:52:07:3d:aa:80:e4:c2:72:d7:79:
89:8d:08:7c:78:e0:b7:f8:da:22:06:b5:d6:1c:26:
32:b3:e6:74:14:26:9c:ad:b3:60:1a:2a:75:f3:65:
d7:87:57:89:e1:38:10:73:bc:d1:2b:b3:1a:b3:94:
6c:66:fe:ac:25:90:aa:f1:5d:30:7f:bb:43:f1:6e:
53:be:13:5f:54:a8:90:45:13:a7:bf:1d:b9:7e:df:
f0:f5:6a:a7:70:15:98:51:aa:ad:3c:6f:fa:6e:db:
71:f3:e0:75:65:14:02:ba:c2:04:56:5c:58:72:df:
6a:e7:73:e4:21:c3:6e:34:51:7a:e3:67:f7:1d:4a:
b5:45:47:b0:b4:de:eb:a4:78:97:6a:7a:11:ab:c6:
c1:69:9c:cd:97:01:e9:19:2d:c1:4a:0d:8b:7c:65:
c8:e8:68:6f:05:7d:0f:86:d4:fe:2c:c5:4d:96:f0:
8e:c6:6b:46:07:05:c5:e6:12:9c:b7:36:29:71:95:
bb:36:c2:80:24:51:d4:ea:58:c5:03:fe:6c:a5:b7:
19:b2:17:24:19:a0:92:7b:6f:f7:be:a2:de:46:eb:
03:aa:5f:40:83:47:0d:28:3f:28:41:ab:4a:8a:d4:
4c:0e:ba:46:16:41:83:8d:25:c0:35:a3:b0:25:b6:
17:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1A:FA:50:55:91:C5:FE:F9:2B:00:88:93:19:F9:AF:CE:0D:21:53
X509v3 Authority Key Identifier:
keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a9:31:02:80:4b:d6:90:69:26:de:11:02:07:34:fa:6a:0c:
a0:ce:96:9f:e6:99:a2:ac:49:52:a1:ee:5b:fb:86:dc:62:3a:
d8:70:2b:a5:6a:23:a6:83:57:0f:be:25:ef:47:6e:82:df:0c:
e7:43:ea:30:84:5c:04:af:5e:b5:57:f9:d3:71:a5:cd:5f:3f:
1f:a5:25:c0:f5:bb:8d:90:b6:ed:ee:f2:cb:a0:47:4a:91:86:
87:a5:3c:83:26:3f:f8:1e:21:bf:62:e3:b4:60:58:73:45:5e:
77:64:48:e9:10:37:93:96:1c:b3:c5:ac:63:dd:e2:c1:30:60:
5c:c7:78:fc:66:7f:e4:70:51:ba:6b:0e:33:1d:47:1d:a7:10:
5a:7c:f0:06:1c:b0:62:55:fb:19:a0:1b:cf:c8:ca:e1:c1:47:
79:bb:db:7f:0c:8e:db:15:7f:99:db:d3:4c:67:92:59:8e:cd:
bb:05:c5:2d:12:db:ca:a1:6f:b6:de:d7:3d:10:d9:56:78:58:
d6:8b:e8:1f:5a:b7:d4:50:39:09:cd:91:a8:02:a6:99:f2:e7:
78:f4:a0:8c:e0:20:ab:2c:8e:91:12:0d:20:a8:68:12:10:42:
85:87:c5:00:e0:67:ca:c9:9f:80:35:7c:fd:55:0d:dd:57:90:
96:2d:5b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:17:01 2026 by rpki-client