Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: 5nFt11InLohZSBkr/zcQA9/1hVMfSCzk6akTwmi66W4=
Subject key identifier: 0B:39:14:75:F5:30:1C:83:10:7B:93:4E:EC:48:C3:6F:C9:C7:5D:63
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 01A0EC2E74632D9192080D26701701748E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 1A0D
Signing time: Tue 29 Sep 2026 08:01:02 +0000
Manifest this update: Tue 29 Sep 2026 08:01:02 +0000
Manifest next update: Wed 30 Sep 2026 08:01:02 +0000
Files and hashes: 1: 03K81b7pfVVjypqVCITF7p4JxKM.roa (hash: PP40BChMOh4s2ABeNP+SORVGIO6bgC5+kty6waeJlqk=)
2: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: gzOAKHqdXNex9AS/X2S/LcA92ZSQjnwaZ8HyfxXUjJA=)
3: kY0iPrlp2DFcIszfKgZ7jk3A9ls.roa (hash: B98fM5TLrUnwgXpz2kR4adHMCSlg8M1bTdaWmo1lkZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:74:63:2d:91:92:08:0d:26:70:17:01:74:8e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Sep 29 08:01:02 2026 GMT
Not After : Sep 30 08:01:02 2026 GMT
Subject: CN=0b391475f5301c83107b934eec48c36fc9c75d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:04:90:49:f9:23:39:3a:1f:bd:c3:34:74:
45:94:25:17:92:de:ae:3b:0f:34:fd:ec:bb:2f:c4:
f4:52:4e:3e:19:8b:ee:2b:b4:23:05:ff:77:cd:a6:
5e:55:1b:66:7e:a7:40:26:1e:35:81:e8:6a:09:3d:
03:d6:da:e2:26:bf:bd:61:8a:98:83:87:7c:5a:73:
17:b7:09:17:58:19:6b:ba:c2:e2:cc:29:f7:26:d1:
b3:e6:cc:57:fe:dc:5a:c6:b8:e4:10:d8:bd:c2:f0:
90:69:61:42:c8:a3:8f:95:b1:71:6d:e7:d6:3f:3a:
b5:19:fa:4c:93:34:e4:fd:24:63:2e:ff:65:1f:c5:
b1:d7:32:55:ab:22:e6:7a:1a:a3:a3:9c:0f:ee:a6:
2a:6d:c6:bb:3f:1a:57:82:6d:64:66:65:a9:e6:93:
0d:a0:5f:29:19:26:d4:1a:4a:77:29:23:33:30:0d:
27:ad:04:1c:40:fd:23:b1:06:67:92:60:b6:c9:4c:
44:f0:6b:ca:db:d7:c3:d0:4a:8e:0e:fd:5a:a9:8d:
88:e4:38:eb:38:00:c0:40:49:ef:49:d7:dc:d7:cb:
8e:f8:57:b9:c7:ad:af:8c:3f:98:c3:d8:01:26:9d:
c0:3f:b5:6b:56:9b:de:8c:7d:c3:62:42:5e:a1:f7:
cf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:39:14:75:F5:30:1C:83:10:7B:93:4E:EC:48:C3:6F:C9:C7:5D:63
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3d:83:f2:a5:76:a4:6c:aa:0a:bd:8f:d2:15:d0:1e:ef:f7:
39:2d:69:91:1f:16:a4:52:4f:5c:31:08:44:39:11:52:8c:9a:
30:fa:e5:aa:60:ad:e6:41:08:4d:55:b3:83:57:3c:bf:6e:55:
4a:52:9c:e2:a3:20:2e:61:a1:c9:ae:3f:f8:f1:40:04:c3:f4:
de:04:12:4b:57:dc:a1:0d:72:06:6f:35:a0:49:6c:78:f1:2d:
df:c8:1b:91:ae:e4:57:16:92:f0:42:b6:5a:ee:62:34:f7:a6:
35:67:87:13:48:f9:d3:7f:6b:75:0d:f9:7c:eb:7a:be:b4:3e:
8d:4b:98:a1:c5:1c:dc:a2:4a:9c:05:42:1f:ac:f1:57:f0:e6:
93:e0:79:4d:76:e9:1d:5b:4e:1d:a6:18:d4:ff:f9:22:1d:da:
b9:68:7a:7b:3b:5f:4c:da:a4:5f:d9:37:a3:fb:ff:8e:0b:c3:
c6:8d:7d:4f:8f:79:38:76:61:68:4a:ff:64:6f:60:cc:3a:50:
4d:b6:1a:1f:27:04:62:60:e9:78:8b:67:6b:d7:e9:93:2c:74:
a3:0f:94:86:60:88:b3:3f:5f:05:4f:28:6f:23:75:a4:36:38:
70:9a:ac:6a:12:6a:fa:d7:4f:d9:4c:d0:13:17:1e:4d:06:fc:
7b:88:2c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 10:56:33 2026 by rpki-client