Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
File: elsD4kg77RNDh7_DBHoTmJ_epB8.mft (raw, json)
Hash identifier: 18yx5oo3SewRLDS3ACg/fn1kAA0V5n7Bf/XOzZGx9bQ=
Subject key identifier: 6E:5C:3B:18:3A:8A:47:3C:F0:9F:95:F4:1C:B3:DB:56:95:10:0E:EF
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Certificate issuer: /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial: 01A0E32B6D5BD6DC71E7A460196362B3E4E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
Manifest number: 0ACE
Signing time: Sun 27 Sep 2026 14:01:09 +0000
Manifest this update: Sun 27 Sep 2026 14:01:09 +0000
Manifest next update: Mon 28 Sep 2026 14:01:09 +0000
Files and hashes: 1: 1jLJCus46gm-AStfLL9q2M5Ho3g.roa (hash: XrU3m/+eSwJdl/VMMh61KI+6fAsJ3/LwxcvviYIdgKo=)
2: QdrNcN-oAM5Z8NA93nywrdwjlpY.roa (hash: dR7J85RI6taLvzWRGM0v5+kdTnGBa4MyfOc9jNOLw3w=)
3: elsD4kg77RNDh7_DBHoTmJ_epB8.crl (hash: un7n/9CohUnPqiP9QM78LJPn/x9iWb57EZ0vACXImjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:6d:5b:d6:dc:71:e7:a4:60:19:63:62:b3:e4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Validity
Not Before: Sep 27 14:01:09 2026 GMT
Not After : Sep 28 14:01:09 2026 GMT
Subject: CN=6e5c3b183a8a473cf09f95f41cb3db5695100eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:f2:1d:42:63:98:2b:db:18:e1:4b:64:43:
21:90:88:a4:c4:e1:b1:39:dc:44:c0:cc:74:95:10:
f0:4b:64:ed:07:38:7c:25:52:b4:1d:46:2f:7f:61:
19:02:13:32:16:6c:d8:2e:97:5e:af:99:31:ef:2f:
7d:f2:7c:60:44:c5:b4:a7:d9:b9:14:ac:4e:c7:b7:
c3:39:44:62:19:cc:be:67:b3:04:ba:f7:8f:fa:1b:
8f:00:9f:89:4d:f1:e2:d0:bd:5d:78:56:85:ad:5c:
65:c5:0f:bd:ce:fb:c3:a8:05:67:dc:7c:b6:cb:7a:
82:47:63:04:f6:3a:a9:11:93:03:c9:75:51:66:58:
2e:82:77:f8:c1:8f:c0:c6:a0:4b:2a:b7:35:62:6e:
4b:4a:6a:f0:e8:d5:a4:ef:f8:f9:c1:ac:18:42:f7:
49:73:ec:2e:5d:63:4c:ba:cb:1d:89:26:35:48:c9:
9d:04:ae:ff:34:65:f8:de:a6:bf:07:a4:7e:85:95:
c7:b1:86:0d:fa:8a:3d:5b:d1:46:ea:ba:99:dc:e5:
77:a1:86:12:8d:dc:d9:ee:44:52:06:7c:2f:29:23:
13:b2:5c:1c:f9:1f:52:03:a3:61:e5:2a:b1:0f:6b:
f2:2a:69:d9:66:cb:f0:72:e0:3f:bd:68:2b:7a:5b:
c0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5C:3B:18:3A:8A:47:3C:F0:9F:95:F4:1C:B3:DB:56:95:10:0E:EF
X509v3 Authority Key Identifier:
keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9e:97:90:ea:0c:cc:22:e9:fe:7c:fa:59:0d:ed:e0:f8:30:
12:b0:fa:0a:0e:d5:30:a3:27:11:72:18:63:3d:46:76:bb:bd:
f3:84:c7:c6:f0:88:69:22:4c:13:b4:6f:5d:91:f7:b1:ca:a3:
8d:08:e3:1f:16:be:0b:a0:17:ce:5c:c3:7a:aa:f7:dc:95:67:
73:08:d9:a1:7a:7a:cc:e5:17:7d:e5:e3:dc:0c:8b:3e:bf:4e:
28:7e:3a:2f:b0:59:0a:02:53:ee:bd:10:eb:49:51:55:a1:57:
20:97:55:85:8f:b9:01:e8:c9:ac:f6:94:81:ee:e1:43:23:5a:
51:86:81:f1:72:6e:03:7b:e5:0c:12:d4:8b:63:ca:c6:3a:fa:
42:7c:9e:1c:c4:a4:b4:95:c7:fe:d5:b5:7a:11:85:4e:55:b5:
cc:f8:3d:be:cc:af:b1:ba:9c:2e:8e:ee:47:f4:73:79:1e:df:
a5:b6:80:ff:b7:4f:de:c3:37:56:4b:ad:58:9d:57:34:28:0e:
49:c2:4f:d6:fe:46:d0:ee:60:4d:e5:5c:3e:25:6f:2e:37:ad:
9a:47:0a:ff:20:17:6b:ad:eb:cd:90:fe:a3:ef:74:b9:4e:df:
ab:9c:e5:75:ce:6c:6f:c0:55:e9:80:36:4f:ed:00:a2:df:b6:
84:e9:24:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:51:49 2026 by rpki-client