Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
File: eHnrndYtUa-lAS76Gp0QxmQAxEU.mft (raw, json)
Hash identifier: qHxzJYxbrhPUdq+1vQlqyslHsK2eBnC7oIPO4tj6yoQ=
Subject key identifier: BE:EA:DD:44:B7:6D:60:8A:A4:F1:26:32:93:22:0A:A1:9F:45:1A:E0
Authority key identifier: 78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
Certificate issuer: /CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Certificate serial: 01A1DFB9D60CFF6B7DDDB73D7A9755FCCC5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
Manifest number: 1AFC
Signing time: Sun 15 Nov 2026 15:01:00 +0000
Manifest this update: Sun 15 Nov 2026 15:01:00 +0000
Manifest next update: Mon 16 Nov 2026 15:01:00 +0000
Files and hashes: 1: eHnrndYtUa-lAS76Gp0QxmQAxEU.crl (hash: mZQJDXtptY24fyxHnx3qqL5xOl8TYgOTeWNBaOgPmsY=)
2: u20Y3FANdfmda1Xtsnh_0s435JM.roa (hash: S9BpRBE4oWaa9W/9qIMquDTbVfqR1JKGeq8wj5z0rN4=)
3: w2BN5Okc8CAi7WJd5D6lCmGLa9o.roa (hash: U6ZbAgCOETb02sjUGl8fc/vrWrB/9CMYg74fhgDMPO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:b9:d6:0c:ff:6b:7d:dd:b7:3d:7a:97:55:fc:cc:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Validity
Not Before: Nov 15 15:01:00 2026 GMT
Not After : Nov 16 15:01:00 2026 GMT
Subject: CN=beeadd44b76d608aa4f1263293220aa19f451ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:39:0d:fe:5b:78:da:eb:05:d2:45:50:b9:
31:46:fa:aa:78:5d:07:ab:a8:f2:f2:ab:1e:4d:69:
68:e2:b2:06:1b:2e:ae:45:92:46:52:09:1a:82:f4:
f1:c2:70:cb:e2:fe:56:11:ab:e9:51:dd:26:75:fa:
a3:e2:1e:05:72:56:6c:05:eb:23:b1:2c:cc:ab:3d:
3c:06:dd:49:d6:39:f4:68:bd:e1:a3:16:b0:67:09:
be:e9:8a:e3:f4:62:77:ed:c0:28:04:a3:05:05:43:
a2:bd:fe:3c:82:3c:61:4e:f3:bb:5f:26:fc:c2:a5:
1e:98:ad:ef:1e:13:ed:53:2f:8f:86:ee:d1:7f:2a:
21:68:f0:a2:43:78:65:e5:2e:77:45:89:92:38:5d:
88:ed:f3:5a:34:f3:41:19:ff:47:34:e2:b0:78:d8:
4a:42:25:6a:bf:de:b2:1f:ac:3a:08:df:a8:79:e5:
58:92:f2:52:35:12:05:91:17:39:e9:ea:89:fc:8a:
11:49:0f:df:31:4a:e2:a9:89:75:d7:c7:fc:32:99:
0f:28:8e:29:f4:78:1d:fb:d0:f2:ed:b7:7e:ce:2f:
74:65:5e:0c:80:fb:ee:d6:4b:dd:47:e1:41:de:46:
ef:da:6e:65:11:17:f7:7c:7d:0a:d4:f8:4c:93:63:
40:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EA:DD:44:B7:6D:60:8A:A4:F1:26:32:93:22:0A:A1:9F:45:1A:E0
X509v3 Authority Key Identifier:
keyid:78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:0f:d9:ee:fe:20:ad:3e:33:b1:b6:55:7b:c3:aa:e8:7f:a8:
b8:7c:89:d9:af:8c:64:d6:f9:fa:26:1d:98:7c:ef:62:97:7d:
0e:3d:65:1d:ce:2e:68:58:af:66:0b:3f:5a:47:66:aa:b5:fa:
dc:8e:f6:b6:71:17:e6:04:a2:a5:71:c7:09:9e:12:89:6f:66:
63:42:66:65:b1:4a:ea:6b:22:3d:c5:4e:28:94:91:50:31:cd:
2a:83:3e:2b:2f:ae:76:ab:ef:19:60:3b:78:52:90:8c:81:ed:
3f:df:df:d8:5c:42:a8:4e:02:9a:61:84:6a:0a:ab:86:9a:95:
fe:b4:ab:1e:25:2d:c2:ea:63:57:52:01:c8:ca:21:0b:c7:d8:
29:28:de:25:4c:04:c9:54:a7:08:05:35:a4:0e:8b:dd:41:07:
32:9a:8a:81:fc:81:51:bf:18:b3:b6:23:a3:72:6a:69:77:fe:
fc:ee:44:4a:b4:dd:d7:13:44:8c:5c:54:e3:f6:e5:9d:6d:df:
b8:53:a5:64:6b:34:31:3f:c9:55:25:a0:8a:06:d6:9a:10:23:
bc:30:0c:54:b1:d4:e8:9c:5d:74:8e:ee:87:38:45:f4:d0:d2:
ec:ec:01:22:8a:f1:e9:e3:11:88:92:b1:9a:35:c1:85:a9:8e:
42:94:f3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:25:43 2026 by rpki-client