Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: 98P8Ex3PPRIWL8scwrrbtFcEwbFMpzs3PABCP4zEKvs=
Subject key identifier: C0:F6:C3:47:57:FE:B5:1C:77:50:AF:99:41:6E:71:EB:E0:74:B6:CF
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 019F927FAA2BDCA0A3D69CD8C6FBDFE483CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 195A
Signing time: Fri 24 Jul 2026 05:01:07 +0000
Manifest this update: Fri 24 Jul 2026 05:01:07 +0000
Manifest next update: Sat 25 Jul 2026 05:01:07 +0000
Files and hashes: 1: 03K81b7pfVVjypqVCITF7p4JxKM.roa (hash: PP40BChMOh4s2ABeNP+SORVGIO6bgC5+kty6waeJlqk=)
2: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: LGF+jKVlX19izKtqU+5MmpWecEqV3ids9DBmjCYauRs=)
3: kY0iPrlp2DFcIszfKgZ7jk3A9ls.roa (hash: B98fM5TLrUnwgXpz2kR4adHMCSlg8M1bTdaWmo1lkZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:aa:2b:dc:a0:a3:d6:9c:d8:c6:fb:df:e4:83:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Jul 24 05:01:07 2026 GMT
Not After : Jul 25 05:01:07 2026 GMT
Subject: CN=c0f6c34757feb51c7750af99416e71ebe074b6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d0:27:3e:85:84:8d:c2:d2:9a:8b:58:bd:34:
50:9d:59:c1:3f:05:2e:ec:03:e4:24:8a:14:4e:ef:
68:83:a3:d7:28:55:be:77:1f:43:ce:09:82:29:d8:
73:90:98:51:70:ad:8c:8f:35:95:15:b5:6f:c3:ff:
52:78:f8:e9:a9:45:47:7f:c2:f1:26:b4:cf:80:e7:
cd:a9:d7:f9:27:2e:2f:3c:93:30:a0:89:f6:26:9b:
65:b3:c3:73:a6:dc:31:90:54:db:c9:d9:39:96:e5:
44:63:4e:68:67:3c:24:5a:a2:46:b0:33:e6:64:33:
e7:7a:b3:cc:64:54:51:1a:49:2b:31:99:90:fc:ca:
8f:c8:66:bd:e0:4d:77:24:dd:2d:fa:8d:3f:31:d8:
70:e3:3e:44:ef:7b:58:48:b8:83:43:08:fa:c8:00:
1d:da:73:8e:53:ae:ab:8e:c7:e6:71:f7:b1:7f:24:
0a:a6:c5:ce:b2:2b:5b:aa:e9:ce:f2:d4:af:79:da:
2b:61:60:ba:9f:87:cd:01:5a:e4:c3:9f:63:73:6e:
b3:dc:8d:1f:1f:d1:15:0e:fd:a0:b9:a2:a1:f4:1f:
6a:fd:fb:57:e4:e9:4e:87:49:5d:db:57:c4:ca:26:
01:3e:98:b2:5a:17:fe:2c:31:cd:61:3e:17:d6:d2:
f0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F6:C3:47:57:FE:B5:1C:77:50:AF:99:41:6E:71:EB:E0:74:B6:CF
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:1f:75:c0:16:20:70:1d:0a:6b:42:4e:eb:d4:09:94:3c:ca:
04:72:e9:2a:bf:78:85:57:d0:a7:2b:9d:60:38:7f:7f:70:c5:
0e:c0:8a:74:88:d7:0c:52:1f:b7:aa:29:1c:cb:bc:0b:3c:8a:
67:5f:30:8f:1f:97:d9:c2:90:ec:f3:4f:a5:1e:27:ca:2a:0f:
a5:a1:58:4f:f2:6e:23:87:ac:50:b4:06:f8:55:7c:4f:68:98:
4b:1f:82:cf:4b:ab:b2:2d:20:b1:ee:36:20:17:47:99:2b:70:
41:69:b8:cb:42:ab:2f:85:0b:c4:c7:07:04:6f:c6:13:4f:19:
01:3d:57:b9:cc:1f:af:bc:a2:8c:36:66:9c:41:64:5a:a9:a7:
29:85:a3:53:b5:c7:bc:25:b1:ea:c7:9f:7b:dc:e5:35:47:f4:
de:46:23:b5:b4:19:97:78:18:67:96:7e:80:b2:8c:95:ac:18:
7c:e0:36:be:59:84:e5:15:0f:12:51:ba:a1:e1:45:fd:c2:38:
e7:4f:83:c1:ce:d5:5d:9d:05:ac:e6:23:c3:3f:8e:f4:c1:49:
a1:8a:c7:51:86:7f:f1:dc:9e:b5:ef:99:aa:6a:8c:2e:b4:61:
30:b0:74:0e:59:80:58:06:7f:ae:26:d2:9b:aa:86:69:ef:fe:
51:f5:88:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:12:10 2026 by rpki-client