Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
File: eSf20AYql2a9WPDQdcTw0QJX5gY.mft (raw, json)
Hash identifier: aU3U5c5wMEBhZBAfxxHZrJwZ8Vb0ObPjm+YFPxpnpTE=
Subject key identifier: 14:2A:31:AF:57:96:67:57:11:61:5B:FE:87:57:4C:01:B6:A7:96:09
Authority key identifier: 79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06
Certificate issuer: /CN=7927f6d0062a9766bd58f0d075c4f0d10257e606
Certificate serial: 01A0CF365977D7170C814C224F1A9E5DFCA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
Manifest number: 0658
Signing time: Wed 23 Sep 2026 17:00:40 +0000
Manifest this update: Wed 23 Sep 2026 17:00:40 +0000
Manifest next update: Thu 24 Sep 2026 17:00:40 +0000
Files and hashes: 1: 4nYYdXdACDvFJB3NrSEU1h6fV1M.asa (hash: j8Lw+F7BcVN4VcHXZaM+s3DucdPJcpRpTIHgwu3t9Hk=)
2: eSf20AYql2a9WPDQdcTw0QJX5gY.crl (hash: IB5O1v2Lsem4+lQOP/dQiusRMw81x9MdoqIge1tvdvY=)
3: nGbIVWhps3UHxhstB6YJ_xOK-Bc.roa (hash: UAJt17CKwokf5TiXBHPy3xcrVlpfB1owep0x5mOCX4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:59:77:d7:17:0c:81:4c:22:4f:1a:9e:5d:fc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7927f6d0062a9766bd58f0d075c4f0d10257e606
Validity
Not Before: Sep 23 17:00:40 2026 GMT
Not After : Sep 24 17:00:40 2026 GMT
Subject: CN=142a31af5796675711615bfe87574c01b6a79609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:e5:ff:09:2e:77:51:f4:58:8d:55:cb:86:
65:b6:d7:3a:9b:e5:65:a4:e6:69:15:b7:80:9b:ae:
c0:7c:64:a6:2d:11:3a:d9:d1:1e:93:13:6d:09:e7:
9b:aa:eb:34:8f:4d:65:5a:52:4b:e9:d8:58:85:2c:
4b:17:ae:7f:93:d6:9e:9f:4b:8e:6b:25:f9:42:4d:
64:89:43:b6:95:92:19:3b:f8:f7:5b:39:47:60:fe:
1d:07:df:7d:ba:c6:21:cd:39:bf:c3:dd:9f:b5:90:
02:e6:65:62:cf:24:ec:eb:c4:4c:d8:42:61:43:6a:
b3:fd:96:57:c6:9b:49:ed:13:44:52:3d:1e:b2:e1:
3a:0b:54:91:37:e7:36:7e:73:f1:aa:b9:69:98:30:
5a:f9:d7:c7:f6:6e:8f:f8:f5:1d:fb:96:16:b0:e1:
94:6c:38:91:39:7b:2b:e3:87:69:da:95:26:75:8f:
8d:84:83:1f:e8:0c:bd:95:3c:fc:70:61:f7:f8:2c:
5f:96:b3:1c:56:f7:d5:f9:46:fe:0f:16:89:4e:d6:
52:6f:bd:6f:64:8d:10:51:e3:d4:f0:2e:e4:a1:3c:
4b:26:e3:e3:46:c6:4c:09:cf:b9:3e:95:3e:ca:c3:
47:ad:2c:0e:5e:a2:82:bd:2a:93:11:80:5f:ae:3e:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2A:31:AF:57:96:67:57:11:61:5B:FE:87:57:4C:01:B6:A7:96:09
X509v3 Authority Key Identifier:
keyid:79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:6d:29:f5:3f:9d:6e:81:90:aa:5f:d8:ea:34:fc:2b:06:32:
7c:34:49:e5:f7:05:07:66:9a:25:d4:f4:04:f5:54:15:cd:d9:
97:af:47:6d:46:fa:ff:f5:c9:a1:0c:23:8b:1f:ec:80:aa:12:
80:a2:10:c9:0b:50:41:74:26:af:f9:6e:ab:b0:71:65:63:df:
94:e9:48:18:30:9c:5a:c2:89:23:96:5c:9f:07:df:25:b4:7c:
69:24:a0:6a:30:ba:d4:fd:a7:8e:30:e0:35:47:f1:3a:e5:82:
90:6d:30:fd:a7:2f:2f:50:7a:53:f0:75:de:84:90:4c:6d:1f:
f3:e5:e2:41:be:e5:08:7b:f0:6e:64:10:96:98:b9:74:c4:d7:
65:ee:d8:82:f3:47:b1:3b:bf:e6:6d:3d:40:be:b6:43:89:b1:
41:ae:b1:67:38:f3:16:b2:89:cb:17:b1:60:5c:30:ab:e0:e4:
d5:bc:63:01:50:16:21:e0:6a:a0:67:99:b9:ec:e1:37:48:d5:
73:e7:0a:23:53:17:40:1e:e9:b8:4f:77:62:e6:c4:b8:b2:21:
b1:97:4f:38:0d:0e:5f:c4:d4:24:95:13:9e:5c:aa:6d:d2:d0:
cd:1a:b7:ad:20:30:b3:c4:72:7f:d8:0b:e5:b6:c2:c5:9b:0f:
ac:e1:3a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:08:33 2026 by rpki-client