Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
File: eHnrndYtUa-lAS76Gp0QxmQAxEU.mft (raw, json)
Hash identifier: N3aB9VqFFdG8Ws9yIIY+kgJNioxiZofs/81lT5jeOfA=
Subject key identifier: 83:1C:10:C0:F4:93:E7:E9:03:39:B2:0E:E2:F3:B3:41:4F:11:3D:5B
Authority key identifier: 78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
Certificate issuer: /CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Certificate serial: 01A0D34A4D42878B5E6986EC1FC502541B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
Manifest number: 1A71
Signing time: Thu 24 Sep 2026 12:00:57 +0000
Manifest this update: Thu 24 Sep 2026 12:00:57 +0000
Manifest next update: Fri 25 Sep 2026 12:00:57 +0000
Files and hashes: 1: eHnrndYtUa-lAS76Gp0QxmQAxEU.crl (hash: CIc5+M4rpP9RZgYnwQLVWoK4q6uok+Bo6dCm5K3s36o=)
2: u20Y3FANdfmda1Xtsnh_0s435JM.roa (hash: S9BpRBE4oWaa9W/9qIMquDTbVfqR1JKGeq8wj5z0rN4=)
3: w2BN5Okc8CAi7WJd5D6lCmGLa9o.roa (hash: U6ZbAgCOETb02sjUGl8fc/vrWrB/9CMYg74fhgDMPO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:4d:42:87:8b:5e:69:86:ec:1f:c5:02:54:1b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Validity
Not Before: Sep 24 12:00:57 2026 GMT
Not After : Sep 25 12:00:57 2026 GMT
Subject: CN=831c10c0f493e7e90339b20ee2f3b3414f113d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:a0:72:67:66:50:b4:e4:ef:18:98:c0:b7:
25:56:8d:20:34:0f:ac:ed:e1:eb:07:78:cc:05:13:
02:e9:8f:a0:05:54:de:a7:94:c5:be:77:fa:d6:83:
61:b0:8f:4e:ad:f3:10:a9:6b:fe:00:a6:ef:20:ff:
04:82:e5:0a:f3:a6:4f:5b:71:05:4d:15:fb:bf:db:
45:1c:2a:be:ab:8c:b5:25:11:26:68:2f:aa:99:b8:
ce:22:6b:8d:da:34:66:32:6d:3b:ee:96:76:93:8d:
bf:00:c1:82:65:ea:0a:37:66:66:aa:34:c2:9e:0d:
9c:62:e2:f3:2c:ff:da:7b:ea:e1:e0:72:3e:04:e4:
d9:2c:89:b6:84:d1:94:2d:00:4f:88:16:d2:e3:db:
9d:81:27:e0:96:de:39:61:d0:35:48:e4:e5:7e:07:
e7:53:03:41:f7:3e:47:9a:72:47:a5:ec:0b:a6:e7:
dd:00:e3:17:d7:16:c7:53:2b:69:58:27:c7:61:c7:
03:fb:09:a6:a2:6b:7d:ea:f6:58:b1:93:16:7f:d8:
f0:52:11:76:a9:2f:ec:fa:61:18:df:fa:fa:5c:f6:
12:f7:32:1a:6a:24:0a:d6:12:02:1b:32:12:f1:c0:
e2:e4:43:e0:b3:17:59:b5:ac:70:d5:a8:e1:af:78:
e3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1C:10:C0:F4:93:E7:E9:03:39:B2:0E:E2:F3:B3:41:4F:11:3D:5B
X509v3 Authority Key Identifier:
keyid:78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6f:4d:91:c8:55:01:42:44:4c:4f:bf:0b:f1:45:12:58:f3:
8d:eb:5c:05:dd:d6:78:b8:1e:27:7c:b9:de:a9:19:64:59:fd:
0d:c8:88:35:64:8a:92:b4:ed:d9:f2:91:95:18:c0:18:0b:85:
9b:a0:76:3b:d7:59:bf:b4:87:d8:ab:b9:21:80:5b:12:66:76:
62:2f:f0:2d:d3:27:0a:3b:da:0a:df:5a:8a:45:e4:50:6b:5a:
9c:51:04:2b:fa:2a:f1:0f:bb:d3:cf:bf:ed:e8:7a:94:10:b1:
6c:32:95:94:8f:77:4f:ed:34:35:00:86:9d:f0:13:7a:59:23:
d8:ad:a0:5b:ff:26:bd:cb:29:8e:50:0b:d2:a3:e0:a0:ba:c2:
4c:ab:b7:73:4a:1f:89:56:91:06:89:ff:9c:b6:27:69:39:ff:
3a:d4:99:88:49:cf:0e:bf:42:7c:6c:87:0e:18:d7:bf:ad:67:
68:9f:c7:7a:ae:3d:03:34:98:92:1d:3d:93:1e:07:73:9e:0b:
9d:9f:5a:70:98:6f:b1:aa:f6:6d:3b:1a:7b:16:d3:9f:a5:8b:
a9:57:62:2e:65:ee:41:eb:cd:a6:f2:be:f2:94:f9:1a:8c:cc:
0b:20:d8:ad:89:9a:b7:a3:10:98:25:af:51:c7:c7:34:d1:2a:
04:75:08:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:44:38 2026 by rpki-client