Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
File: e8sSfHzXeGBylriDhuiUrh3jhb8.mft (raw, json)
Hash identifier: 84L+zz0lmJECzeDhBWPGexg4h3+I9JfzlRkhDIboxaI=
Subject key identifier: 4A:0B:E7:08:52:2C:1A:E2:98:01:84:B9:88:47:91:AC:94:52:7D:A5
Authority key identifier: 7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
Certificate issuer: /CN=7bcb127c7cd778607296b88386e894ae1de385bf
Certificate serial: 01A1DD5DECF2D7D4F4464176FB7AFA2E73EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
Manifest number: 0752
Signing time: Sun 15 Nov 2026 04:01:22 +0000
Manifest this update: Sun 15 Nov 2026 04:01:22 +0000
Manifest next update: Mon 16 Nov 2026 04:01:22 +0000
Files and hashes: 1: UXWpgGFDnRE9Qd9B2_kQeDANeEU.roa (hash: 4rUA5GWn/3ql2gbHZLTVs1SZ20Xz3g2AjgFXRxPtMJw=)
2: e8sSfHzXeGBylriDhuiUrh3jhb8.crl (hash: FYRxJwckSOB8x4B2yWul8G21iki11J3whrynOkunovg=)
3: kkmKgi6g6HFL37DCnaadKvfK-YA.roa (hash: yjFJ1aHJiDzMEJQJojyjv8H/6rRO5DIEZ/IoW8c9H7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5d:ec:f2:d7:d4:f4:46:41:76:fb:7a:fa:2e:73:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcb127c7cd778607296b88386e894ae1de385bf
Validity
Not Before: Nov 15 04:01:22 2026 GMT
Not After : Nov 16 04:01:22 2026 GMT
Subject: CN=4a0be708522c1ae2980184b9884791ac94527da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:38:fe:c3:a2:b7:9d:e7:4f:62:c6:bb:4e:
82:c1:c8:fb:6f:dc:c5:72:5b:e3:a4:0f:35:55:45:
98:dd:ac:9c:4b:3b:f3:9c:da:81:a1:f9:14:21:19:
23:bc:47:b1:7a:3b:52:26:6a:ce:60:52:28:26:46:
8b:b5:f2:32:c4:a7:b1:fd:f8:7f:47:b9:09:32:87:
15:0e:8a:14:9c:8b:2c:c0:3a:72:a6:e6:87:0e:69:
93:f9:2b:80:33:0e:9e:b2:2e:b1:da:43:99:9c:87:
5f:89:50:dc:d3:f3:34:60:e0:43:fc:ea:2e:e1:8c:
a0:85:3a:1c:7d:f8:ac:be:31:03:56:95:46:55:a4:
54:fe:a1:53:d0:94:40:42:44:bc:09:4d:0d:03:df:
ba:a2:4d:20:19:37:c8:ea:27:80:ad:7f:d1:63:4b:
43:63:5f:42:59:6e:04:9b:40:70:d1:6c:d8:7e:9d:
99:2f:ed:95:ee:c7:b8:2b:ba:51:fc:90:e8:4f:dc:
6e:bf:ed:c4:89:d6:ea:ae:9d:0c:37:34:e3:9a:be:
a1:c2:81:67:69:09:15:25:4f:d7:60:e1:f2:ea:62:
fc:17:6a:31:0c:4f:19:45:36:da:75:73:26:98:f5:
df:86:2d:0c:cf:36:18:8b:57:9f:94:52:b2:c0:48:
fa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0B:E7:08:52:2C:1A:E2:98:01:84:B9:88:47:91:AC:94:52:7D:A5
X509v3 Authority Key Identifier:
keyid:7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:1e:9c:de:5c:6c:c4:94:91:01:16:95:80:bf:b2:42:76:df:
ba:cc:ea:cb:db:03:f6:66:34:a5:5e:39:19:f1:9f:dc:1d:84:
ba:a5:83:76:6e:b3:67:9c:b5:7d:d6:42:ff:6f:f6:1a:a8:e0:
bd:cd:44:9f:89:93:53:7a:04:4e:a8:63:b5:c8:d2:18:58:e7:
0d:2a:53:85:93:53:d3:58:3c:1b:40:fe:54:0a:05:9b:10:90:
1e:11:89:b6:49:a9:6a:27:e0:cd:50:8b:19:ba:3c:73:92:81:
5a:b8:1a:e1:3d:29:24:95:81:81:81:ed:70:90:c2:c2:bf:81:
cb:55:a3:b5:97:d4:e6:79:d5:d8:68:56:01:74:19:21:a9:c2:
7d:1b:4e:2f:34:e2:6e:f1:60:41:72:37:90:a3:3c:a6:b4:f2:
56:c8:c6:fb:fc:73:b2:92:c4:81:ae:37:0c:eb:e8:f5:ee:da:
ed:ef:78:42:35:81:c1:72:ac:65:db:96:93:ad:26:56:b7:64:
00:9d:57:53:f2:d3:94:a7:c4:91:b9:30:28:af:50:f0:8a:91:
e7:43:9e:0b:87:f9:c5:20:7b:7e:55:cc:02:3f:e7:65:b5:96:
52:51:f6:76:59:6e:1a:b8:1f:46:93:dc:c7:e2:aa:7d:95:45:
8d:bf:96:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:29:38 2026 by rpki-client