Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
File: eA3hbu6UewqMdXFPxdpqAlnKG5A.mft (raw, json)
Hash identifier: 8cZebDsLN0UmiJkUIQGJlQQyztGiCmyjqx/uS71CFuA=
Subject key identifier: F6:21:8C:7D:88:E2:C0:8E:CB:F3:7D:9C:D4:4F:2C:AD:DE:A5:05:3C
Authority key identifier: 78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
Certificate issuer: /CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Certificate serial: 019D99CFF516AC553433E84018B35002EE02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 05:00:35 +0000
Manifest this update: Fri 17 Apr 2026 05:00:35 +0000
Manifest next update: Sat 18 Apr 2026 05:00:35 +0000
Files and hashes: 1: FZe1NTnwQLaVEwa5nKYFvYoYApc.roa (hash: LyCQTa9+bhAOhJK8DWlraV43+IT6fvhRPfMpiyuGQl4=)
2: cbfZrsYOtkfTsvATyxudQ2krwIc.roa (hash: LFDpBEhBWBZpbTCNf+xEuq+zB73JcCsNfl6NSUtgKtY=)
3: eA3hbu6UewqMdXFPxdpqAlnKG5A.crl (hash: sOIpg3Z8gQ8+OsKi8eLQsLjOBoFlCo7VBvFlOeUWXVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:f5:16:ac:55:34:33:e8:40:18:b3:50:02:ee:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Validity
Not Before: Apr 17 05:00:35 2026 GMT
Not After : Apr 18 05:00:35 2026 GMT
Subject: CN=f6218c7d88e2c08ecbf37d9cd44f2caddea5053c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:1e:7d:f6:1f:3b:ba:3e:1b:70:86:24:de:
38:72:4e:53:36:46:2f:03:f7:47:a7:f3:ab:4c:fd:
ae:f6:1e:15:00:85:8f:74:15:83:fd:f7:90:52:e8:
f9:64:40:ba:37:32:aa:e6:39:4f:cc:22:d3:58:01:
90:ba:c4:43:1b:4f:9b:ed:e0:f5:05:25:3a:43:8f:
94:0c:34:1d:58:63:a2:66:3e:75:18:d9:b3:0e:43:
57:37:f4:80:b5:7d:db:50:fd:55:cd:0f:21:88:32:
03:e4:9a:ae:6d:e9:3d:0c:09:83:d6:1a:f4:20:51:
29:77:a4:4f:d2:17:24:2d:5c:a7:24:79:cd:de:ac:
ef:ed:6a:76:4b:5c:23:ea:5d:46:a9:22:42:8d:d1:
e3:57:0d:cf:8b:17:57:d6:72:23:2b:bd:03:57:94:
13:06:0d:0f:08:08:9b:3c:da:d4:45:4d:b0:38:f7:
ff:9e:3c:6c:d7:da:4c:d0:5f:d9:c3:26:81:c5:a0:
8d:8c:5d:9a:b3:aa:97:3a:40:fa:3c:53:fd:06:34:
66:aa:e6:c8:89:52:3b:ce:a4:90:fe:8d:f3:08:e5:
5e:32:73:ca:17:c7:aa:59:63:da:25:6a:aa:56:b3:
59:23:5c:5a:4d:dd:6c:27:02:05:0e:b2:35:4e:5d:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:21:8C:7D:88:E2:C0:8E:CB:F3:7D:9C:D4:4F:2C:AD:DE:A5:05:3C
X509v3 Authority Key Identifier:
keyid:78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:9f:13:95:61:4d:2d:f3:91:8f:dc:5c:da:85:cd:01:a0:b5:
d5:e8:2b:dd:88:1d:f8:e3:c5:1a:e8:fc:f3:62:83:e9:38:5e:
14:c8:1c:be:9c:68:13:af:8d:05:54:67:cd:dc:9d:b3:14:be:
1a:a4:84:2e:36:e2:64:c1:a5:f8:48:20:34:bd:7c:41:2e:4f:
3a:c8:16:c4:f7:1a:93:57:e2:84:24:44:c7:0e:da:3a:3d:d1:
73:2d:b3:a9:e1:1b:9b:a2:dd:b2:1b:9f:41:ac:ef:82:79:b6:
96:66:f7:8e:78:7b:32:c8:1a:86:39:58:49:46:1e:b0:29:18:
84:0b:5a:b6:4b:52:77:15:78:27:a7:9e:a6:b0:77:d2:a3:14:
da:a8:0f:dc:0d:e3:62:21:46:58:73:d4:6a:54:61:a3:12:7c:
43:e5:86:08:1b:e6:7b:10:a6:16:0a:d8:3f:b2:31:fe:4d:f8:
3a:88:e2:d6:6f:63:e7:87:46:7d:a9:ed:fd:16:92:0d:6d:51:
75:a9:b7:c9:01:1f:fb:93:1b:6c:63:7e:e8:15:b8:3c:5e:2d:
28:7d:db:f7:37:b5:70:a9:36:a4:8a:49:42:45:9a:d4:d2:49:
55:3e:a0:2e:5e:0c:8c:62:cc:51:9e:39:96:8f:6d:81:a8:cb:
12:07:7c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:14:55 2026 by rpki-client