Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
File: ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft (raw, json)
Hash identifier: KGtYJ4FBgvMkNUCDUV1naQSTvqLsDE5vTPuIS54l4Jk=
Subject key identifier: 28:41:EE:D8:67:54:69:DC:16:6B:E1:F9:A8:2C:2A:BA:1A:2A:F5:3E
Authority key identifier: 7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
Certificate issuer: /CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Certificate serial: 01A0E58797CAF6ADD6D70F5B5D38342227CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
Manifest number: 1A77
Signing time: Mon 28 Sep 2026 01:01:03 +0000
Manifest this update: Mon 28 Sep 2026 01:01:03 +0000
Manifest next update: Tue 29 Sep 2026 01:01:03 +0000
Files and hashes: 1: Bi1pDCNkHaQHAemnse3wWLypO7k.roa (hash: lAsWeGFXffMfinXBeg3+QU6P9EnW1X8Od5LyXs53FsY=)
2: ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl (hash: 4UzrIQ5j7lzS25oy3CAECPLikZf8iLFUpsLY1tLLNik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:87:97:ca:f6:ad:d6:d7:0f:5b:5d:38:34:22:27:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Validity
Not Before: Sep 28 01:01:03 2026 GMT
Not After : Sep 29 01:01:03 2026 GMT
Subject: CN=2841eed8675469dc166be1f9a82c2aba1a2af53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:63:02:38:76:5e:25:c5:1b:81:d8:ea:d1:
5a:ac:c5:71:9d:4c:af:05:ce:92:9d:eb:51:f7:e3:
4e:66:ad:a3:5d:d6:76:7d:eb:b9:c8:27:8d:fb:b9:
41:22:72:c3:8b:cc:2a:46:da:8f:72:26:56:b6:49:
16:74:f2:f0:92:27:9c:0b:ba:c9:c1:64:77:df:36:
7b:dc:b0:ae:6e:bb:ff:e6:3b:67:36:59:f9:76:a1:
6e:50:7d:89:0f:43:33:5e:b2:05:79:47:c7:d6:cd:
3a:c2:6f:f8:bd:ac:61:9c:da:a2:0c:c3:d2:01:e5:
c4:29:eb:fe:92:48:65:b6:c4:e6:dc:dc:e7:aa:e6:
fa:69:01:b8:a9:a9:f3:a3:aa:d5:0a:ca:38:47:bb:
19:74:3d:74:b2:f0:87:e5:f9:b3:59:7b:f4:3e:e6:
b8:f3:63:9b:e3:0f:95:89:47:2c:9e:02:b4:0a:72:
a2:bc:3a:04:bb:96:5a:c8:68:1a:8b:36:2e:1a:be:
86:c6:28:5b:0d:aa:cb:df:13:b3:a0:44:9f:be:ec:
9c:1a:9c:0e:07:21:64:71:96:d2:a2:a7:a5:da:4b:
0a:0b:29:60:87:5d:93:a0:bf:42:28:7b:90:8d:aa:
ae:6f:9f:98:52:50:03:1c:00:69:7b:e8:3f:a8:17:
22:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:41:EE:D8:67:54:69:DC:16:6B:E1:F9:A8:2C:2A:BA:1A:2A:F5:3E
X509v3 Authority Key Identifier:
keyid:7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f8:5f:e7:c5:e1:0a:f3:f7:77:71:05:7e:57:cb:cf:b6:40:
c3:6c:18:4f:db:d9:7a:02:3c:d5:dc:a2:88:07:db:be:f6:de:
14:1c:47:ab:e8:3c:51:7b:c4:6f:d7:75:c5:3b:4a:27:07:9c:
1b:5b:19:a7:b7:ff:3e:d6:b0:ff:c0:dd:28:71:8c:d3:49:c5:
4a:cf:bd:b4:26:dd:b5:53:8b:fb:50:f4:c4:cf:3b:cb:d4:11:
60:d4:5c:0e:7d:f6:9c:a2:39:16:7e:0f:97:43:35:5a:09:6a:
d0:cd:b8:f8:2a:ae:55:14:1e:ec:01:13:f1:51:46:3e:54:a6:
e5:b9:ed:f3:8c:1f:a5:53:5a:8c:a6:68:5f:5a:19:03:ac:93:
f2:34:f2:92:1d:58:67:26:9a:cd:dd:a3:a0:83:b5:dd:41:74:
74:99:d3:5d:12:5f:27:33:98:ec:09:3e:9e:96:7b:1e:79:c5:
a8:9a:33:d0:82:7a:ad:b0:b9:b8:a2:a4:f0:bb:2a:dc:55:bd:
98:6a:01:cb:d5:e6:41:40:d6:74:e3:74:84:45:ca:c9:a8:f8:
d2:9e:28:f4:12:ef:1f:0f:7a:38:ca:87:ec:6d:75:e1:a6:9f:
ff:cf:81:0a:6d:d3:68:52:ac:71:25:70:f2:f5:a7:86:18:34:
86:cd:5b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:15:22 2026 by rpki-client