Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
File: eQ0cp4dhMQrDmnFP9i87krLnfYo.mft (raw, json)
Hash identifier: FR4hw0vKJTxSwQf5Ot9BpOpRBS6yYg8GniPBAddWmhI=
Subject key identifier: 2C:92:CE:85:B4:C0:F1:DB:45:34:D9:CF:B4:38:DB:93:EC:5A:27:E0
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Certificate issuer: /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial: 01A1DACAAEF1B1706E6AB97E3CEC809B0BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
Manifest number: 1AF8
Signing time: Sat 14 Nov 2026 16:01:18 +0000
Manifest this update: Sat 14 Nov 2026 16:01:18 +0000
Manifest next update: Sun 15 Nov 2026 16:01:18 +0000
Files and hashes: 1: EYMrlefUd_XSaWfylZCHkmVeXK4.roa (hash: 8jOCsUwGr5s+6E9DbnoIutjLx2+bBNXxqyvTsEuVuEY=)
2: eQ0cp4dhMQrDmnFP9i87krLnfYo.crl (hash: 304OoYuLd0t3rI/L/xFb7VFB6NC5D803CTH+8eioT+8=)
3: xeqelJo79Mi4ptPjtrax6cg2B_s.roa (hash: t6o74vCypP/JXaPY7ExWQCtzzyBRmlLod50GjeunzUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:ca:ae:f1:b1:70:6e:6a:b9:7e:3c:ec:80:9b:0b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Validity
Not Before: Nov 14 16:01:18 2026 GMT
Not After : Nov 15 16:01:18 2026 GMT
Subject: CN=2c92ce85b4c0f1db4534d9cfb438db93ec5a27e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:1d:3d:36:aa:6e:55:33:b4:be:0a:91:f5:
cd:d5:bd:95:32:cb:71:69:2c:51:cb:be:7c:ec:63:
70:b8:99:8a:41:97:23:60:24:55:71:58:b7:df:5f:
6c:dd:37:fb:bf:7a:79:87:c4:a6:5a:9b:fa:eb:e5:
e8:2b:f9:fe:4f:23:47:e4:c0:3f:88:df:4a:ce:20:
8e:08:fb:42:60:e9:5a:b9:ba:62:9a:10:d7:b5:06:
cc:d0:15:8d:99:dd:01:50:ee:ea:20:ec:f6:9f:5f:
82:28:f9:e6:e9:e8:25:be:9b:4c:21:73:4a:38:e5:
17:c8:29:5a:03:9e:0d:3c:e8:4e:1b:35:02:5a:da:
02:21:14:80:b7:06:68:57:6b:ee:e7:89:1c:c0:6a:
9b:99:df:32:6f:e1:a9:18:5e:db:d2:00:66:c3:77:
f3:70:20:17:0b:a1:e0:91:99:b3:48:59:db:15:e8:
27:9a:b5:9f:b0:e3:5b:7b:66:07:69:aa:1e:58:76:
dd:a8:6a:2e:4f:de:59:95:73:56:60:80:23:e2:a0:
f9:ee:0b:67:ef:ff:d1:67:97:6b:fa:7e:0a:84:a8:
61:41:d8:60:83:05:ac:83:98:03:cc:7a:28:13:c1:
f1:16:09:ce:b1:09:9e:18:52:9f:a9:9d:e8:0c:62:
1e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:92:CE:85:B4:C0:F1:DB:45:34:D9:CF:B4:38:DB:93:EC:5A:27:E0
X509v3 Authority Key Identifier:
keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:cb:85:c0:1e:8e:f8:89:94:7f:0d:6f:fd:2b:0d:de:73:b9:
44:75:23:f5:d4:2c:1c:62:9d:e3:7f:a7:06:aa:3b:fa:02:da:
c6:cd:da:58:31:be:06:d6:8d:f4:c1:d2:67:8b:36:c6:93:55:
e5:fe:17:ab:40:9f:51:15:e2:89:a6:f5:95:83:92:7a:d5:e0:
79:34:be:d9:ff:fa:d0:fb:5f:27:f6:f0:75:a4:cf:a9:d7:b8:
ae:26:f8:3d:4f:78:58:a9:52:c4:03:53:20:b2:01:ed:40:97:
4e:2b:f0:f1:c5:f7:6a:a4:eb:8d:9e:74:cd:dd:8e:5e:c1:e0:
91:23:30:76:51:f9:7e:3d:1b:ed:a2:fd:95:f0:fe:ee:68:5f:
96:75:85:fe:3e:27:51:b8:f2:cf:70:56:9a:f5:5d:ac:43:ef:
9c:80:cb:04:bc:88:29:da:b9:57:75:7c:e2:eb:74:80:da:07:
d5:a2:23:d8:7e:f7:57:66:b9:b3:f0:95:a4:97:14:d1:38:06:
21:37:28:48:7a:38:55:e7:36:7e:2c:e3:c4:7b:9e:5c:5f:f1:
50:a9:b4:1d:82:59:31:8c:15:0a:5a:dc:68:27:a4:87:08:2f:
f5:e6:70:cc:2b:8b:54:2b:86:00:44:7b:17:78:b4:46:d1:ff:
ea:2f:9e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:39:17 2026 by rpki-client