Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
File: e8sSfHzXeGBylriDhuiUrh3jhb8.mft (raw, json)
Hash identifier: 3MeiWrFryVLiMSuHA58FEoARgruMXqmRWBruxFLFReM=
Subject key identifier: B9:EA:63:3C:8F:DF:59:F9:3F:5E:2F:C6:66:3B:F0:C9:50:91:72:32
Authority key identifier: 7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
Certificate issuer: /CN=7bcb127c7cd778607296b88386e894ae1de385bf
Certificate serial: 01A0D2DDEE0520806562732547AAA9D007AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
Manifest number: 06C8
Signing time: Thu 24 Sep 2026 10:02:34 +0000
Manifest this update: Thu 24 Sep 2026 10:02:34 +0000
Manifest next update: Fri 25 Sep 2026 10:02:34 +0000
Files and hashes: 1: UXWpgGFDnRE9Qd9B2_kQeDANeEU.roa (hash: 4rUA5GWn/3ql2gbHZLTVs1SZ20Xz3g2AjgFXRxPtMJw=)
2: e8sSfHzXeGBylriDhuiUrh3jhb8.crl (hash: fFc35YVW3+SGYWpn6bsKOECXA0h6/S0d+XRMxZo4OQ4=)
3: kkmKgi6g6HFL37DCnaadKvfK-YA.roa (hash: yjFJ1aHJiDzMEJQJojyjv8H/6rRO5DIEZ/IoW8c9H7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:dd:ee:05:20:80:65:62:73:25:47:aa:a9:d0:07:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcb127c7cd778607296b88386e894ae1de385bf
Validity
Not Before: Sep 24 10:02:34 2026 GMT
Not After : Sep 25 10:02:34 2026 GMT
Subject: CN=b9ea633c8fdf59f93f5e2fc6663bf0c950917232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b4:5c:6e:50:4c:a6:9f:97:26:a4:52:33:9a:
69:c3:26:6a:5c:bd:10:bd:47:6f:bd:8c:14:5f:a4:
ff:62:7e:f8:19:65:63:a2:82:f1:2e:7d:a5:24:4f:
dc:a8:26:74:0f:27:ce:9c:78:33:b3:27:93:bb:8c:
83:44:0c:fa:ae:01:4b:74:a2:af:e1:6f:6b:cf:b5:
fc:21:c4:86:2c:85:6f:22:6a:74:8a:bc:9c:65:1f:
2a:d9:c4:76:ae:26:7f:9a:d4:ff:90:c6:8d:28:a8:
3c:74:aa:55:ed:e3:f5:10:b3:5a:6c:f7:ff:87:48:
2f:a5:a0:b7:08:72:35:4d:7f:72:0c:6c:43:fe:be:
3a:b7:d1:9c:cb:1c:eb:ee:61:48:ad:46:47:f0:9d:
fc:7e:12:02:ac:9a:4b:1e:37:cc:15:65:ee:df:ff:
ec:e8:8e:11:40:35:09:5b:70:c9:2a:2a:d7:2f:80:
63:69:ac:3e:a5:2d:9d:1d:ac:ab:60:5c:1a:fc:72:
f7:76:e1:86:40:8d:f7:21:66:14:4a:af:1a:aa:4e:
48:b1:a0:8b:70:b6:c2:eb:bc:b2:bb:20:45:c8:03:
be:04:9e:af:f1:b2:78:53:c5:46:dd:4a:db:46:db:
2a:16:17:c6:ff:88:5b:52:bc:a6:55:9c:a6:86:68:
ab:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EA:63:3C:8F:DF:59:F9:3F:5E:2F:C6:66:3B:F0:C9:50:91:72:32
X509v3 Authority Key Identifier:
keyid:7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b3:17:72:d4:08:9b:df:44:f1:48:3c:5e:5a:47:04:bd:40:
c8:d1:6b:7d:ca:2a:7c:07:e6:03:e0:82:2c:1f:ac:8e:73:bd:
90:91:f1:48:d5:08:8b:c9:c6:17:32:b1:39:02:a4:83:e2:19:
b1:aa:d2:90:e2:3a:67:4a:c8:e5:a5:40:0b:6d:83:ed:58:97:
73:c3:d9:57:31:5a:60:34:0e:a3:da:9c:af:5e:ad:3b:7b:0e:
b5:6e:af:c1:b8:79:8e:24:97:f6:0f:ab:57:db:3f:1b:5e:f2:
b2:3c:43:5d:75:c2:3b:7a:8c:39:46:53:47:4d:82:db:a4:44:
0c:3e:3c:c1:ae:22:29:e1:1d:17:ba:8c:ad:a7:39:e2:ac:c6:
9c:37:d2:1a:43:c3:16:75:27:59:ba:da:0e:f0:ea:63:9f:ba:
e1:bc:f4:f2:30:b8:2e:7d:6d:75:db:9f:9b:82:0f:f3:e6:3a:
0c:6c:9d:41:4c:c7:2e:cb:f3:4e:5a:05:8a:a0:00:50:ff:3e:
45:45:f8:6c:2a:b2:3b:1d:dc:1d:0e:dc:29:e8:2b:87:cb:de:
a9:11:75:c4:23:b8:7d:3e:32:f6:82:fc:39:63:c8:88:be:d3:
18:bc:13:7e:5b:83:6e:eb:f1:85:b9:01:94:c0:52:14:2b:f6:
b1:4c:59:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:07:30 2026 by rpki-client