Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
File: eDdfthaLNUhBuR0wX50M3AyxUB0.mft (raw, json)
Hash identifier: rdbZU+oTfbyLCwHIuzhKyKgSJ0fAC4UR15ZiLs3TbWM=
Subject key identifier: 21:0F:1A:C2:88:FE:8E:7E:BB:74:60:01:4A:AA:79:31:20:1C:0F:01
Authority key identifier: 78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D
Certificate issuer: /CN=78375fb6168b354841b91d305f9d0cdc0cb1501d
Certificate serial: 019CABD93FB0ABDCC3954C8939791812A300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 00:01:07 +0000
Manifest this update: Mon 02 Mar 2026 00:01:07 +0000
Manifest next update: Tue 03 Mar 2026 00:01:07 +0000
Files and hashes: 1: SVRG13qKLtkzZ7xaiN4uxzkXNhs.roa (hash: VPDmIAQy3HDkJPWlWJozVLwRBhg5jx5dxfsVwJCTd0I=)
2: eDdfthaLNUhBuR0wX50M3AyxUB0.crl (hash: ZlP3gwle08B7qoAzzegg5IYI41JeN3AvmTEOxS+VQyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:3f:b0:ab:dc:c3:95:4c:89:39:79:18:12:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78375fb6168b354841b91d305f9d0cdc0cb1501d
Validity
Not Before: Mar 2 00:01:07 2026 GMT
Not After : Mar 3 00:01:07 2026 GMT
Subject: CN=210f1ac288fe8e7ebb7460014aaa7931201c0f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:b2:ab:39:6e:d2:ae:d3:1c:6e:69:1d:d7:
c2:81:6e:06:f1:0c:ad:eb:9d:68:99:59:3c:7a:7f:
89:64:92:e9:3e:33:ad:c1:e2:28:c8:01:1e:c0:a3:
95:da:9d:60:cc:f7:bb:bb:2b:f1:92:30:16:9d:fd:
6d:4a:c1:9d:07:27:e8:56:aa:ef:b4:b1:3c:34:47:
36:4b:1f:4d:64:c8:0a:f7:11:f3:11:ec:6d:fe:6a:
94:2b:1b:d6:64:a8:97:fb:b2:f6:62:44:ec:3b:fd:
69:08:2a:4e:28:f2:12:2e:f6:72:7b:a0:b3:16:1c:
15:76:70:2f:86:58:0f:5c:dc:c1:51:f4:1d:35:36:
cf:d9:45:4d:b5:a6:77:32:7d:a9:4a:07:1e:6e:dc:
f3:04:2e:04:70:d2:78:bd:2e:44:93:c8:46:c8:23:
31:1c:e8:41:58:2f:a5:b2:ec:48:93:24:93:4e:76:
34:7f:5d:9b:0c:f8:66:01:9b:55:4b:ae:1d:63:a3:
cd:89:4c:f8:3f:56:7f:f8:0e:aa:7f:bb:7d:60:60:
b2:f3:86:1b:2d:96:42:ec:9a:d0:b2:3f:a5:fa:37:
f9:ca:87:1f:ff:c6:19:d2:65:85:77:a3:45:6c:61:
2f:8d:92:59:32:18:93:29:34:b4:8c:ad:76:c8:6f:
95:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0F:1A:C2:88:FE:8E:7E:BB:74:60:01:4A:AA:79:31:20:1C:0F:01
X509v3 Authority Key Identifier:
keyid:78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:cc:46:26:c3:1b:23:75:c9:6d:6a:49:b3:31:56:eb:82:f7:
90:f5:23:88:1a:1b:7b:11:35:a2:de:40:32:44:2e:dc:e0:3e:
0b:55:e5:a4:93:dc:a1:b2:24:67:53:60:7b:b1:a0:07:14:27:
5c:ea:0f:be:33:98:59:80:14:ac:0d:b4:d4:c8:c1:e8:7c:74:
eb:be:d8:01:8e:2d:f3:91:c1:4f:cb:f1:64:0e:5d:95:96:9d:
b2:79:d1:ac:a9:56:a6:d1:91:04:02:7b:80:22:64:e6:19:74:
d9:e1:6c:c9:68:8d:c5:ae:41:13:ce:21:c7:48:39:a5:46:d9:
ac:23:fd:7c:2c:c0:af:80:22:ed:ce:09:38:82:a4:42:3e:c2:
4a:8d:7a:b1:1a:66:a9:8d:cc:a4:c2:38:6a:c6:8c:ad:46:dc:
91:bc:7b:68:8b:49:eb:2f:17:9c:8d:0e:17:cb:5d:47:b1:1a:
53:56:35:99:c6:61:fd:6b:88:f7:f0:33:82:cd:a3:10:e9:1b:
77:ac:d3:c6:bc:1d:fe:a1:91:e1:65:d9:e1:6f:82:cd:04:a1:
40:8d:2d:52:96:75:e8:a4:c8:9c:91:9f:e4:dd:6b:17:96:36:
f9:fd:06:a9:a2:b8:8b:66:e3:12:b0:23:b6:a8:09:8b:e3:ee:
84:4d:5c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:46 2026 by rpki-client