Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
File: EgHMNDB0EC76fwww8pSZ4a1W4p8.mft (raw, json)
Hash identifier: +EnZ1G81Tn4/jHEbxN4apNeCSzgj4SbGxJlO8XqY7hg=
Subject key identifier: DA:CC:7C:48:6E:53:3A:0A:8E:6D:B5:09:5D:5C:8A:5D:29:71:0F:DD
Authority key identifier: 12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F
Certificate issuer: /CN=1201cc343074102efa7f0c30f29499e1ad56e29f
Certificate serial: 01A104378A6493C820785AF95BF3A1CF93C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
Manifest number: 1A8A
Signing time: Sun 04 Oct 2026 00:01:50 +0000
Manifest this update: Sun 04 Oct 2026 00:01:50 +0000
Manifest next update: Mon 05 Oct 2026 00:01:50 +0000
Files and hashes: 1: 91IHOy5Nc4CWoy_eWfl9yWFO4Ww.roa (hash: 90s5uXSV7H+9vRaDDjLOzlHZrSmJ3myWDf1NIkj6TiE=)
2: EgHMNDB0EC76fwww8pSZ4a1W4p8.crl (hash: s5pgjAvs+Kdk/KHbgMfaQ9sLcAbeTvg2tHj84IZH+9E=)
3: oWBB0iYZJX-W5I_Wzx5Yono3IMw.roa (hash: 9H05WgwG0IKa6fefs9ah5b21BWk+H446mxJWL3/+bmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:37:8a:64:93:c8:20:78:5a:f9:5b:f3:a1:cf:93:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1201cc343074102efa7f0c30f29499e1ad56e29f
Validity
Not Before: Oct 4 00:01:50 2026 GMT
Not After : Oct 5 00:01:50 2026 GMT
Subject: CN=dacc7c486e533a0a8e6db5095d5c8a5d29710fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:05:bf:dc:3b:46:7a:02:13:91:6d:a5:1b:
7a:53:97:4e:b6:7d:9e:98:e9:83:f7:28:e1:f5:15:
47:ba:eb:51:c8:d4:d1:98:90:ba:2d:29:4b:ec:a9:
d5:9c:47:ce:07:ac:80:39:4e:0e:93:82:2f:a3:80:
f2:70:44:ab:2d:37:db:70:77:3a:0a:2f:e0:ab:96:
6e:15:df:b6:ac:ea:48:0f:9b:43:7a:1b:c0:69:07:
46:54:45:14:33:3a:3c:38:c3:5e:b2:6a:12:21:08:
18:9d:3e:84:32:3e:66:a7:79:eb:f9:30:47:44:de:
b8:39:5c:cb:25:4d:04:96:49:b7:1c:a8:5e:d7:bb:
6e:06:c5:0a:15:4e:22:45:19:e3:e2:2a:49:f7:3b:
97:d1:50:fd:d1:23:a2:1a:42:b2:9e:1b:3e:34:4f:
2f:41:43:bc:c5:3d:c3:2b:7e:e9:9b:be:fd:66:61:
f9:6f:9e:59:a7:f8:cb:bb:42:e4:01:a6:af:a4:13:
18:c0:d2:27:3f:07:d7:14:cd:b4:2b:72:2a:cb:b3:
77:bc:b9:0c:ff:78:d4:28:c8:94:a7:3c:54:cf:39:
f3:99:22:58:bf:38:14:5e:74:d3:10:c3:8b:5b:7f:
8c:ef:29:78:80:1f:dc:15:39:dd:ba:51:54:46:f6:
a3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CC:7C:48:6E:53:3A:0A:8E:6D:B5:09:5D:5C:8A:5D:29:71:0F:DD
X509v3 Authority Key Identifier:
keyid:12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8c:d9:3c:2f:9b:0f:d6:4b:78:f6:25:ab:1b:dd:14:f7:7c:
5e:bb:cb:f1:ef:65:6f:42:b4:cc:0a:82:cb:e1:05:35:67:60:
67:d2:d7:79:9f:ff:96:d7:73:ea:c5:9d:51:dc:09:40:81:f8:
d6:09:a6:db:ac:2e:de:1a:cf:1b:63:13:d9:46:dd:ff:ee:8d:
6a:04:3a:6a:a0:4e:f5:df:4a:2e:1f:10:05:db:49:8a:bb:eb:
72:64:c3:b8:6d:97:53:79:97:20:b4:b7:dc:a3:38:ff:d2:69:
d6:57:ca:7b:9f:ee:78:00:db:0c:3e:f0:3d:ac:b0:95:28:67:
e7:d9:4a:55:a9:f6:a4:96:fb:a8:a7:51:f9:17:33:6a:dd:0a:
1f:a7:b1:c6:9f:e7:de:f2:dc:5d:76:3c:3f:6b:d3:4c:06:fb:
34:93:45:66:1a:07:33:bd:e1:e7:99:8c:6a:04:37:a0:1e:3a:
7a:f5:8f:47:b5:4d:10:6f:a6:97:f7:d1:64:6f:2f:89:ef:9a:
57:d0:25:42:2c:f6:62:f6:fb:15:82:5e:33:a2:ac:c1:43:ed:
75:4c:7e:5c:23:8b:e2:3d:d1:06:19:0f:5c:f8:42:f9:23:ef:
23:a1:c7:06:f5:24:b2:cc:d9:e3:26:e9:ad:40:29:84:85:72:
b3:89:a3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:39:43 2026 by rpki-client