Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
File: eqhsgVbwgG3MzcItzE1hdbj6mJM.mft (raw, json)
Hash identifier: Je/y2ccs2GkslKpQhqtogcEzkjVAcTQHXvRp/F1aN24=
Subject key identifier: 21:EB:28:F1:03:4B:38:8E:54:EE:34:21:96:72:10:1A:F7:9E:8E:B6
Authority key identifier: 7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93
Certificate issuer: /CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893
Certificate serial: 01A1095DB81592F31A4EB67F6F3685AECEDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
Manifest number: 170F
Signing time: Mon 05 Oct 2026 00:01:39 +0000
Manifest this update: Mon 05 Oct 2026 00:01:39 +0000
Manifest next update: Tue 06 Oct 2026 00:01:39 +0000
Files and hashes: 1: Oy65Flm_uwrvJdQB08a6SJ4kW8I.roa (hash: fu4fm6NabdEAcEXhd0h2UuWDUtPed2OsOBwT+zaFccI=)
2: eqhsgVbwgG3MzcItzE1hdbj6mJM.crl (hash: D8WbTsganZIjOJu28r9Bzt9YU7AHrdM4Y0vZvfKmPmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:09:5d:b8:15:92:f3:1a:4e:b6:7f:6f:36:85:ae:ce:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893
Validity
Not Before: Oct 5 00:01:39 2026 GMT
Not After : Oct 6 00:01:39 2026 GMT
Subject: CN=21eb28f1034b388e54ee34219672101af79e8eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:93:d9:44:a6:c2:3a:fc:94:2a:01:b1:89:
46:c9:f8:b5:6b:10:e6:6b:ed:cf:86:d3:b0:d2:83:
3a:6f:d9:b0:93:6a:03:f2:c1:46:c6:d3:aa:60:06:
f8:b1:79:7b:df:24:35:55:9f:25:23:5a:42:ee:be:
74:9a:ad:08:c9:ea:02:64:ff:82:9e:80:c9:55:19:
92:85:41:e5:02:d1:11:a5:35:3e:ae:92:48:23:4a:
29:8d:85:81:05:5d:1e:c8:05:fa:19:2f:ad:18:02:
29:d7:44:ab:96:5d:7f:51:37:3b:90:db:2e:25:20:
6c:5e:fe:a9:37:01:ff:c9:d0:c0:d5:92:36:df:b5:
c5:56:ea:59:ac:bb:b1:f6:dc:ee:76:fe:25:c0:2e:
b9:d8:ca:5d:47:6b:4f:73:0d:1c:47:3b:91:c8:88:
fe:3e:8c:03:9d:ba:50:d7:10:a5:15:3e:47:f7:04:
ac:ff:e9:35:2e:50:de:ec:2b:b2:c6:d1:07:5d:c2:
fe:87:48:2d:a5:e4:42:18:dc:b8:bb:8a:7c:64:1d:
6c:bf:fb:ba:dc:a5:e9:1c:f0:cb:e6:7b:ae:d5:74:
df:04:4d:8e:9d:3d:ed:33:61:4b:a2:07:10:4f:cc:
c3:0c:98:d4:f2:b6:e1:ab:73:22:e3:54:d8:ac:7b:
2c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EB:28:F1:03:4B:38:8E:54:EE:34:21:96:72:10:1A:F7:9E:8E:B6
X509v3 Authority Key Identifier:
keyid:7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:46:9f:94:ba:04:8c:9c:f5:ef:c9:bf:b8:57:47:c0:b1:a4:
2b:2d:89:56:83:bc:bf:17:59:86:a5:23:ea:16:88:15:86:b2:
56:3d:62:bd:1d:07:4c:c8:e6:f5:f7:64:d0:87:dd:0a:e8:10:
e6:87:cf:e5:57:67:ab:ea:79:94:cf:62:20:46:9d:ac:7b:4e:
4b:e7:34:8f:99:34:5e:f8:19:9c:a4:e8:b1:57:13:6e:f6:be:
b9:a5:91:71:83:eb:4c:7f:6f:3c:eb:44:eb:28:39:7c:4c:7a:
f8:25:06:aa:7a:5e:c3:19:b7:a1:1a:7e:18:86:54:0e:15:4d:
d8:f1:1d:31:49:b9:63:7f:36:0b:26:14:d7:28:b6:72:83:3b:
3a:1a:7d:c1:5c:6c:07:5c:3a:dc:7d:38:44:a1:e0:fc:e9:fa:
0e:61:96:0d:0b:bc:79:2d:f7:f5:ef:a9:bf:7e:c3:e6:70:1d:
6d:09:49:f8:e9:99:6b:68:bf:b0:db:d9:f0:86:9c:a0:f1:02:
fb:5f:95:61:3a:30:85:af:8c:63:1f:5b:e0:67:b0:2c:14:3f:
12:11:52:28:47:71:2e:78:83:26:d5:46:17:7d:c3:66:89:c5:
56:6f:2f:7e:44:f5:04:2e:75:aa:0e:21:71:b1:31:42:23:f1:
a0:14:51:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 11:53:47 2026 by rpki-client