Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
File: eIehaWWHX29TvMMfDkk6lhVOt7k.mft (raw, json)
Hash identifier: 5JF5uDASSaj/rX5WIqoO3mWksVx6yoaLmQ2vxgjyt2Y=
Subject key identifier: 42:AF:C8:48:AD:40:AB:ED:4F:1A:67:1D:29:A5:12:64:5D:AD:5F:CA
Authority key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
Certificate issuer: /CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Certificate serial: 019F91DA83BF730F90A0AA49204F8101116B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
Manifest number: 16E5
Signing time: Fri 24 Jul 2026 02:00:44 +0000
Manifest this update: Fri 24 Jul 2026 02:00:44 +0000
Manifest next update: Sat 25 Jul 2026 02:00:44 +0000
Files and hashes: 1: MJofjdkMEmgx2BydUOl_6hfgSP0.roa (hash: SYQp19hNRf4PycQPpMlkNy2V7oY/RHobHYkQy5EY5Uk=)
2: e3rUNCM0Xf2LeGKAo_m6z686FVs.roa (hash: /zRO4TdqdR87Zu84kUd28IeKppEjdoIpNzsSQ/9y0kI=)
3: eIehaWWHX29TvMMfDkk6lhVOt7k.crl (hash: b3KiJ6RJSdjXfmVRIwDC6L/vwiln6q/4GgXITXPT60Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:83:bf:73:0f:90:a0:aa:49:20:4f:81:01:11:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Validity
Not Before: Jul 24 02:00:44 2026 GMT
Not After : Jul 25 02:00:44 2026 GMT
Subject: CN=42afc848ad40abed4f1a671d29a512645dad5fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:22:1d:dc:f8:c7:d3:98:63:2b:14:e6:25:21:
54:d6:dd:26:a3:6d:a1:bc:54:e3:7e:4e:75:3b:50:
10:d3:64:9e:a8:51:2a:87:ed:7c:28:0c:b4:db:40:
ab:2d:56:3b:5e:2d:e4:d0:dd:df:a7:35:1a:3a:ac:
c7:8e:b5:3d:cd:fe:45:4f:15:53:be:8d:ab:98:f1:
43:39:7d:a8:46:14:dd:40:86:14:cb:bb:26:0b:25:
d2:65:3a:ec:f3:bb:8a:c9:1f:a4:c1:91:a9:70:33:
38:a3:29:85:62:6d:43:f7:51:98:56:48:fc:b4:f0:
e6:b0:c2:e6:ed:58:f7:b6:b5:19:3b:a1:65:9a:8b:
9f:82:85:e8:50:96:90:b8:d4:9d:bb:46:5e:38:de:
b5:4c:05:3d:7a:5c:4e:20:ee:ff:8c:70:5b:f9:eb:
fc:6c:77:38:27:ac:d0:7e:6d:51:08:f3:b3:bc:11:
cb:74:79:0c:8b:77:75:c9:7b:8d:18:2d:3b:ed:dc:
ac:90:0e:34:2c:28:70:a9:64:0c:50:ee:e2:ad:fa:
29:0f:38:10:d4:05:c6:9a:9e:61:0d:96:ed:ef:dc:
ed:9d:2e:ca:51:d7:e6:2b:67:9d:df:96:03:cb:cc:
e4:6e:a1:f5:ec:44:b0:d3:96:2a:26:55:37:ad:ca:
2e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AF:C8:48:AD:40:AB:ED:4F:1A:67:1D:29:A5:12:64:5D:AD:5F:CA
X509v3 Authority Key Identifier:
keyid:78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:34:8e:61:a7:d3:06:8e:51:c8:7e:fc:7c:58:72:14:f1:1b:
39:9c:80:fb:e0:93:99:df:4e:23:18:d0:a7:41:25:14:b1:be:
41:6d:8b:cf:61:f2:e5:46:3f:eb:60:c6:8f:4d:62:b2:82:6e:
7b:36:8c:a9:a2:60:48:3e:be:74:e4:ee:7b:c9:b1:a3:3b:85:
31:ae:fb:3d:80:b8:3b:46:c1:ca:01:0c:c5:fa:61:7c:1b:df:
42:89:52:7b:88:46:64:a5:ec:43:26:ea:8b:47:d3:45:d2:18:
49:ef:61:da:40:d7:0a:b4:68:45:d7:55:ba:55:0c:69:b4:00:
00:5a:01:24:4d:22:34:dd:77:29:a3:ca:1c:90:23:f6:bb:51:
53:5a:b3:ab:ff:2c:d7:5b:25:6e:56:5d:9d:d9:51:7f:54:88:
b8:48:b8:2d:fe:55:0c:2e:90:94:d6:1b:c0:3a:69:ac:e7:e2:
ba:15:f7:1a:4b:0e:1e:c8:4f:df:fb:a4:94:18:d7:e7:73:2e:
2a:3d:04:af:03:31:69:06:a3:ea:2d:5b:ba:9d:2f:68:4b:a6:
c3:63:6b:ae:7b:50:e0:00:2a:13:c7:9e:b5:75:2a:ad:61:fe:
eb:49:68:d6:82:40:cb:ff:76:44:da:75:f0:1b:47:0d:ff:81:
49:0b:7b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:24:07 2026 by rpki-client