Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
File: eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft (raw, json)
Hash identifier: Y3zMcMH9Pfe5Q81ArUi4hYsEBG851spyAFGox4bJVE8=
Subject key identifier: FE:80:28:ED:6A:4E:DF:CA:14:4C:94:4B:01:75:3D:07:22:AD:1D:22
Authority key identifier: 79:A4:B1:FB:BA:D1:CB:6A:8B:1C:7D:33:73:7A:D7:2B:CD:9B:8D:9D
Certificate issuer: /CN=79a4b1fbbad1cb6a8b1c7d33737ad72bcd9b8d9d
Certificate serial: 01A0D872559556339B1818B109657561D21C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
Manifest number: 02A3
Signing time: Fri 25 Sep 2026 12:02:46 +0000
Manifest this update: Fri 25 Sep 2026 12:02:46 +0000
Manifest next update: Sat 26 Sep 2026 12:02:46 +0000
Files and hashes: 1: MHfXLodJ1lTLubHBUzEu-y-nQd8.roa (hash: v+heG+utge9KSHpg0rUF2i0HpIa/3KcrihN3fHNBOZo=)
2: ad2pJPLMCY9-MtsOQUWfkJzvGjk.asa (hash: znBGDedW1a6RheuPxFAgpjdNY4UU36DMoXaL/AWeESU=)
3: eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl (hash: kfEPzfSSA4Vm9EycwWZ9FDSnYnHEGeu1r4BxAtb+hTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:55:95:56:33:9b:18:18:b1:09:65:75:61:d2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a4b1fbbad1cb6a8b1c7d33737ad72bcd9b8d9d
Validity
Not Before: Sep 25 12:02:46 2026 GMT
Not After : Sep 26 12:02:46 2026 GMT
Subject: CN=fe8028ed6a4edfca144c944b01753d0722ad1d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:28:90:40:8d:75:92:b9:dc:2c:d7:b1:10:b8:
4e:95:60:23:f9:24:43:21:b4:3b:5b:61:b3:8a:3d:
fd:74:80:fa:5a:f3:fc:aa:ab:76:9a:1d:81:81:24:
c3:4c:e3:1c:57:bb:9d:a4:c7:12:56:e4:ca:c5:09:
6b:28:cd:0c:f3:68:bd:71:3c:46:8c:a4:2c:a4:c5:
ae:0e:f5:66:33:9d:ef:7c:35:fe:01:8c:b4:51:55:
4f:62:3d:17:02:74:90:4e:94:28:80:07:a4:de:09:
d7:7a:b1:6d:5f:0f:fb:a7:14:ec:ce:68:c1:c7:2e:
7f:02:30:fc:13:e9:b1:56:29:56:3f:7f:f0:65:f2:
a6:dd:73:49:67:7d:5a:bb:37:c3:a1:d5:55:e3:a0:
2b:9d:df:4c:2a:a4:ab:d8:88:b5:7a:e5:cf:e0:40:
ea:6f:ea:76:0c:5b:a3:51:8f:40:13:ad:c8:09:b5:
aa:aa:15:69:d5:f2:5a:8c:67:97:3b:f3:93:a6:55:
de:b2:08:3b:7e:01:34:df:3a:10:9c:20:8a:0a:5d:
f3:4f:71:98:fa:7a:cb:13:46:a9:5a:b2:f3:65:1a:
81:93:93:0a:2e:b7:b2:39:5f:ee:0f:75:9e:5f:e8:
e3:b5:27:6f:b0:52:e9:2f:4b:a0:63:bd:bd:cb:81:
3b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:80:28:ED:6A:4E:DF:CA:14:4C:94:4B:01:75:3D:07:22:AD:1D:22
X509v3 Authority Key Identifier:
keyid:79:A4:B1:FB:BA:D1:CB:6A:8B:1C:7D:33:73:7A:D7:2B:CD:9B:8D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a6:0b:96:7a:ba:ad:8e:b5:11:b1:9a:01:79:f3:ec:6b:11:
dc:63:99:7a:d3:92:77:c2:ce:b9:69:42:08:0a:5f:d4:b1:04:
37:17:c8:f7:e2:b6:aa:69:a2:20:0e:65:d1:63:fb:3a:8c:34:
8b:e6:1e:ca:5e:1e:74:47:9f:4f:8c:45:ea:ab:b4:3f:47:dd:
b8:aa:d5:9d:f2:60:79:b8:34:4d:0c:df:3f:9b:7d:61:e4:dd:
5d:23:f0:f7:71:83:6b:35:02:8e:1d:65:4a:0f:a5:ab:d5:dc:
d1:98:d9:6a:06:2f:73:13:a3:0e:86:eb:52:54:e3:48:6d:74:
f1:98:b5:b6:8b:9f:c7:ac:75:1e:c0:6b:0e:a1:7e:1d:5b:dd:
4c:27:af:12:81:8d:bd:ca:91:9b:0f:be:cf:64:3e:87:0e:52:
86:b6:1a:47:43:18:4f:23:c0:7f:77:9f:9d:7c:6c:0b:fc:60:
b0:dd:b7:71:32:79:f2:c9:8b:d3:64:2e:12:34:a1:63:f7:12:
34:b9:24:42:44:12:fa:e1:d1:20:db:43:c4:ae:61:5e:5e:43:
fa:b2:fe:e9:8e:d7:aa:63:9e:b1:6f:b0:e9:09:c5:0e:0f:c2:
c9:3f:09:60:78:72:0f:39:44:da:51:f5:23:81:c6:40:06:73:
8a:ca:54:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:27:29 2026 by rpki-client