Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
File: eA3hbu6UewqMdXFPxdpqAlnKG5A.mft (raw, json)
Hash identifier: NCkTnincT58eP/DDBn7HxEIDcepu/ygUlCcO45VgUkg=
Subject key identifier: 6B:4F:F1:72:01:D3:B1:09:7E:C1:4E:AA:F8:08:E5:42:2A:72:E9:B1
Authority key identifier: 78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
Certificate issuer: /CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Certificate serial: 019CAA59037B8DE3D1951D1C8615AA0A3BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 17:01:26 +0000
Manifest this update: Sun 01 Mar 2026 17:01:26 +0000
Manifest next update: Mon 02 Mar 2026 17:01:26 +0000
Files and hashes: 1: FZe1NTnwQLaVEwa5nKYFvYoYApc.roa (hash: LyCQTa9+bhAOhJK8DWlraV43+IT6fvhRPfMpiyuGQl4=)
2: cbfZrsYOtkfTsvATyxudQ2krwIc.roa (hash: LFDpBEhBWBZpbTCNf+xEuq+zB73JcCsNfl6NSUtgKtY=)
3: eA3hbu6UewqMdXFPxdpqAlnKG5A.crl (hash: 0AHdpLryhWOif3oRjq6wqfZu2wir9pZWsQy1jjPEo7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:03:7b:8d:e3:d1:95:1d:1c:86:15:aa:0a:3b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Validity
Not Before: Mar 1 17:01:26 2026 GMT
Not After : Mar 2 17:01:26 2026 GMT
Subject: CN=6b4ff17201d3b1097ec14eaaf808e5422a72e9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a6:ef:cf:c7:b5:02:16:2d:0a:c3:57:eb:e6:
b0:41:08:69:95:9f:a0:a5:06:38:0e:06:5e:d9:7f:
27:e2:f2:6b:ac:7e:b9:20:f9:a3:5a:14:5c:2a:e4:
e1:be:b6:4f:1e:c7:00:b6:84:7e:23:1c:a6:3b:4e:
2a:0c:f6:b9:77:72:0a:1a:d0:4d:b7:07:f8:9f:9a:
57:fc:a7:83:c2:72:64:c5:19:65:1a:da:63:2a:60:
52:eb:b1:e7:06:58:ac:0c:9a:e8:a1:22:01:2f:db:
58:f8:0d:bb:85:4f:2f:e3:57:4e:70:ce:34:79:de:
5d:9c:19:47:8d:7d:5f:c3:0b:00:52:fe:c0:68:50:
4e:51:f2:a9:3f:7e:8b:09:b1:16:41:b3:e6:99:44:
00:d8:83:83:87:4c:93:46:68:4b:dd:06:d8:c4:8a:
ed:b4:a7:4c:5f:46:56:8b:ac:73:8e:6e:1d:87:95:
63:a9:5b:10:23:0a:15:ad:a2:80:ba:30:16:c6:8f:
03:de:5b:9c:e3:9f:9e:9c:b6:67:75:16:d3:44:a6:
4d:81:e4:13:24:b7:ad:30:7d:43:eb:f1:b9:18:23:
e7:8a:3d:34:d9:94:ed:b3:d1:08:4a:77:47:07:cf:
ca:8e:4d:85:d5:a5:b6:fe:5a:02:07:96:54:0f:8e:
2a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4F:F1:72:01:D3:B1:09:7E:C1:4E:AA:F8:08:E5:42:2A:72:E9:B1
X509v3 Authority Key Identifier:
keyid:78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6b:0e:75:22:9f:78:ba:5f:1b:08:dc:0a:9c:52:43:48:57:
f4:b8:be:a8:67:c1:bc:7c:15:1f:d4:e3:a3:1f:f8:0f:c8:49:
85:31:30:d4:c9:bb:21:ba:91:f3:0d:1b:7c:32:ff:be:1c:42:
e6:4f:e3:87:6b:50:9b:54:9e:e8:04:24:8b:e5:0a:b8:f6:64:
0b:63:d8:9b:ac:53:18:9c:78:f9:52:2a:ba:53:49:19:81:23:
ea:8c:b8:9c:52:7d:88:75:7b:4b:62:1a:57:25:27:3c:2f:a5:
fe:e7:a8:08:e9:3d:69:60:31:4b:30:c9:4f:74:98:3d:dd:44:
c8:c7:43:d6:87:85:63:23:85:83:91:8d:eb:dc:95:24:58:53:
42:bf:95:0e:ab:c7:ca:9f:d0:94:6e:7c:0a:43:df:bb:25:49:
f6:6d:74:d7:d1:6c:86:0e:79:c2:38:0b:85:62:a6:c0:ef:e9:
db:f4:29:70:ba:41:b6:f8:74:66:4c:c4:2e:ba:db:bf:a0:bd:
db:e7:e7:e3:90:ac:4e:3a:0d:01:10:33:79:c7:ad:b6:41:3c:
6f:1e:a3:5a:05:e9:ba:94:7f:94:1e:9e:fb:78:1b:76:84:8c:
1a:52:16:79:23:ff:c5:00:e1:36:46:1e:8e:ff:f9:81:f6:d5:
ae:49:86:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:08:23 2026 by rpki-client