Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
File: eyqKwwKLcJEcthEf_aOi7-VYhi0.mft (raw, json)
Hash identifier: xUEc3P5dUiayFeVBwJinQXpH3SjdDy54E7fXitpiQrU=
Subject key identifier: 91:0C:22:D8:FA:2C:87:58:87:F0:77:8C:64:31:B3:65:35:6E:C1:C3
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 01A0E92DDEBBE0CA7B1A60C26A421DB5D04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
Manifest number: 1A79
Signing time: Mon 28 Sep 2026 18:01:32 +0000
Manifest this update: Mon 28 Sep 2026 18:01:32 +0000
Manifest next update: Tue 29 Sep 2026 18:01:32 +0000
Files and hashes: 1: QKSBmP3gzvhQzJUUPBNcCLWHKHM.roa (hash: KF0eVyAAEY8VGFQ1+W9WFibrhH45a/vXshpeDiUAhF0=)
2: eyqKwwKLcJEcthEf_aOi7-VYhi0.crl (hash: 1078aJEftHW3B16tESA6FN1puLBng/i7WhEvEibAkpw=)
3: ycdkqwKUZrrAqLHqkXN7UpQhhcY.roa (hash: eyPv8WnShqVImAMmncYrIFp/3E9eBCBd7q2DigUVUPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 18:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2d:de:bb:e0:ca:7b:1a:60:c2:6a:42:1d:b5:d0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Sep 28 18:01:32 2026 GMT
Not After : Sep 29 18:01:32 2026 GMT
Subject: CN=910c22d8fa2c875887f0778c6431b365356ec1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:17:55:82:49:72:25:a1:a1:f6:c5:5b:ef:
e6:3f:1d:fa:e6:88:05:13:e8:a7:92:42:37:52:cd:
50:67:09:5b:e2:f9:e7:d5:40:67:79:be:f6:d4:f2:
d1:51:7f:5f:a8:02:47:d9:3a:f1:37:dc:20:2b:03:
2b:ac:19:08:60:0d:36:37:4b:3a:7f:b3:30:59:a6:
35:95:1a:c3:ee:9d:39:30:64:82:15:8e:aa:80:cf:
d2:65:4d:8b:32:15:0d:f4:2d:5d:48:a2:d4:5a:f4:
7f:97:de:31:7b:31:fa:55:ca:de:ca:a4:ab:ae:e1:
fb:66:e5:f0:23:cc:cb:dd:a4:2b:0e:fa:9d:12:32:
aa:31:8d:7c:1d:30:46:cc:40:6d:e3:1b:ff:5f:06:
65:68:3a:9c:9b:20:4e:e5:3a:d1:94:2d:cd:27:5c:
34:23:e9:8b:66:43:e1:cc:29:30:41:e7:eb:3d:68:
a9:7c:74:79:78:33:e6:81:99:5b:7c:70:de:f8:e9:
c0:0d:ed:49:02:e1:1b:3d:01:fc:7d:d8:1c:41:77:
6e:ff:9e:d5:4a:eb:56:84:9e:7c:c5:3b:3f:77:5b:
bc:ac:01:f8:71:37:f4:b8:2e:87:8c:a7:78:ab:bf:
0b:72:98:f1:ad:20:4e:51:55:0a:c4:42:0c:43:ef:
3f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0C:22:D8:FA:2C:87:58:87:F0:77:8C:64:31:B3:65:35:6E:C1:C3
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:bb:62:2c:0b:1a:e5:49:2f:82:40:0d:d6:3c:82:40:35:cd:
99:c9:cb:c7:92:68:6c:53:54:e3:80:61:19:52:47:29:c2:a7:
b7:1d:cb:80:fa:26:3c:27:8a:5b:66:44:df:e9:62:3a:f1:fa:
54:3c:2f:1d:9d:cd:29:92:56:14:ac:ea:1b:ad:5d:ae:84:48:
90:40:0e:f6:7f:2a:dd:cd:a8:c5:6d:63:37:53:c8:d3:35:f9:
13:f4:23:b6:66:2c:9c:79:05:29:09:e2:3a:98:04:f6:79:60:
13:6a:aa:8f:f7:fd:7e:2c:78:21:c6:bd:19:ec:21:a2:61:61:
98:76:5c:a8:08:bc:f0:4d:14:07:a4:4b:99:cc:45:e5:64:3c:
11:b8:04:34:a3:c8:ba:ed:b4:76:d5:1f:c3:02:4a:26:5a:6e:
f9:31:e7:c6:23:1a:18:ff:dc:86:ca:fb:a8:7c:0d:98:0a:c4:
a7:71:bb:a8:8e:7f:5e:61:7f:85:8e:6a:e2:2e:56:71:5a:76:
2f:4a:f3:8f:44:06:eb:cf:c7:10:70:ab:c6:7d:7e:30:2f:af:
8d:c3:a9:83:02:af:c2:14:14:ca:a8:61:0e:13:96:7e:3d:29:
ab:74:88:c8:1b:5d:21:42:4a:99:89:09:26:22:9e:a7:5e:9c:
15:1f:4c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:32:05 2026 by rpki-client