Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: cQW8HYV8j61Mx76ilamOH/o+G4zMKSPOv/QX5DhHmg0=
Subject key identifier: E4:7D:47:08:04:69:7D:07:68:7D:0D:30:37:78:FC:70:0A:81:0D:0A
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 01A0EE1CE3CD73F7FA85091CAA107795BABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 1A0E
Signing time: Tue 29 Sep 2026 17:01:05 +0000
Manifest this update: Tue 29 Sep 2026 17:01:05 +0000
Manifest next update: Wed 30 Sep 2026 17:01:05 +0000
Files and hashes: 1: 03K81b7pfVVjypqVCITF7p4JxKM.roa (hash: PP40BChMOh4s2ABeNP+SORVGIO6bgC5+kty6waeJlqk=)
2: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: S9NKBmj7bwiJnosdMThojE+4PPMKTd21JcW1VEjySF4=)
3: kY0iPrlp2DFcIszfKgZ7jk3A9ls.roa (hash: B98fM5TLrUnwgXpz2kR4adHMCSlg8M1bTdaWmo1lkZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:1c:e3:cd:73:f7:fa:85:09:1c:aa:10:77:95:ba:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Sep 29 17:01:05 2026 GMT
Not After : Sep 30 17:01:05 2026 GMT
Subject: CN=e47d470804697d07687d0d303778fc700a810d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6e:c5:f0:5e:b9:28:96:ff:56:f7:49:a5:58:
c6:c4:5b:b9:64:7a:19:25:1e:e8:97:8f:0a:05:6f:
fa:4b:fd:94:d7:81:91:d2:3f:4e:89:1b:58:18:97:
da:9a:c0:e9:11:1b:df:c6:a2:fb:f5:50:4d:2d:d2:
8d:f9:bb:25:46:5e:b9:b4:b5:b4:24:16:d2:83:47:
d1:0a:5a:7c:bb:30:9b:89:16:dc:19:f8:81:e4:dc:
de:f2:ab:da:b4:be:34:eb:8d:c5:80:5e:ad:9e:83:
27:c5:51:e7:9d:a2:bc:fe:d7:b1:41:fe:5c:bb:09:
24:c9:2d:20:c2:48:a7:5b:b8:30:fa:d2:90:86:74:
46:da:63:ef:ef:2c:bd:7b:63:e2:4c:2f:0a:b2:27:
db:2d:63:bc:ad:65:1d:3c:5a:ec:5b:4c:91:73:a6:
e8:23:2c:7a:63:33:2f:90:17:7c:8c:c8:ba:b5:de:
49:99:6f:d3:72:de:d7:5a:2a:81:c7:ce:77:88:9b:
86:6b:b0:27:13:ef:36:41:83:40:9d:71:c0:69:43:
67:3e:bb:be:f6:93:2f:44:ed:41:fb:15:7d:99:f6:
65:94:ed:f1:81:be:ff:ca:0a:9b:15:11:7e:13:ac:
4e:a6:b3:7f:6a:64:01:bc:9d:76:d4:9b:fd:9c:f1:
d4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7D:47:08:04:69:7D:07:68:7D:0D:30:37:78:FC:70:0A:81:0D:0A
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d4:71:d3:91:47:70:b6:ae:7a:3f:95:da:80:21:8a:e2:16:
27:de:78:8c:b3:0e:c0:90:64:ef:d8:9b:90:43:80:6a:71:60:
10:6c:43:46:86:93:ab:75:e9:a6:6d:b9:a3:b3:cb:4d:bc:83:
92:4f:0e:68:64:1d:68:cc:d7:fa:bb:05:cf:80:ad:e1:cf:78:
8e:48:8a:5d:6d:11:44:5a:fd:e0:3e:66:c6:a3:5f:40:e2:ad:
e6:2d:f9:69:c6:63:ce:07:bc:be:91:28:24:e2:ae:33:9f:db:
90:c1:41:5b:c4:93:92:59:97:ac:8f:ab:77:44:39:fd:16:e7:
14:ba:77:6e:6c:a8:8e:89:12:32:f7:ae:dc:23:7d:ce:62:44:
d8:75:78:d2:e3:ec:66:12:ac:bb:72:bd:7e:10:bf:33:5d:4e:
30:c8:10:f8:ad:29:ae:a7:92:f1:16:a7:a0:de:52:66:4f:9d:
ba:94:0d:dd:6a:53:06:b4:04:92:b1:98:67:4e:41:44:7d:3b:
4b:87:ec:e2:00:e8:f3:bc:3b:b2:83:80:bd:89:47:a7:3e:3a:
5a:e0:60:08:62:bc:de:1c:cf:f5:2c:73:51:1b:44:49:12:59:
50:7e:4c:64:d8:42:5f:36:73:55:2f:ac:69:0f:64:5a:60:3c:
f3:0a:7f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:17:50 2026 by rpki-client