Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
File: eIehaWWHX29TvMMfDkk6lhVOt7k.mft (raw, json)
Hash identifier: uunIzX80QAot+3DZM5nHJEHgcB8pdzVDAdMj2QD3RT8=
Subject key identifier: A8:AB:51:7E:B9:0D:37:BC:8F:B3:9C:9E:5E:8C:72:12:19:B8:99:12
Authority key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
Certificate issuer: /CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Certificate serial: 01A0DC17542B4F14CEED7AFEEC072E54C3D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
Manifest number: 1790
Signing time: Sat 26 Sep 2026 05:01:51 +0000
Manifest this update: Sat 26 Sep 2026 05:01:51 +0000
Manifest next update: Sun 27 Sep 2026 05:01:51 +0000
Files and hashes: 1: MJofjdkMEmgx2BydUOl_6hfgSP0.roa (hash: SYQp19hNRf4PycQPpMlkNy2V7oY/RHobHYkQy5EY5Uk=)
2: e3rUNCM0Xf2LeGKAo_m6z686FVs.roa (hash: /zRO4TdqdR87Zu84kUd28IeKppEjdoIpNzsSQ/9y0kI=)
3: eIehaWWHX29TvMMfDkk6lhVOt7k.crl (hash: xzgm7u3ZAJw7ZUiM/VJn3E8TNs96yM1u7HNoGtw+yBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 05:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:54:2b:4f:14:ce:ed:7a:fe:ec:07:2e:54:c3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Validity
Not Before: Sep 26 05:01:51 2026 GMT
Not After : Sep 27 05:01:51 2026 GMT
Subject: CN=a8ab517eb90d37bc8fb39c9e5e8c721219b89912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f4:c4:f0:46:04:15:4b:ac:aa:4a:24:25:c5:
25:3a:0c:d3:db:64:0e:89:b8:76:9e:9a:f0:ec:e6:
10:5b:79:11:58:49:93:60:2b:68:f9:3b:dc:35:6e:
ff:fb:9e:9f:93:e8:cd:19:24:73:70:ca:92:22:8b:
52:ed:a8:31:d9:75:7b:31:aa:e8:60:58:f4:db:6c:
2e:a5:b9:a5:12:52:a5:21:c7:91:3d:e1:6c:db:56:
0a:7a:ef:00:1e:99:68:49:a4:11:de:38:44:7d:5a:
7b:78:58:c6:11:4b:b2:e4:fa:ee:28:74:8d:56:16:
ae:63:7c:9b:4c:61:be:2a:65:60:f9:d5:28:1f:00:
63:88:9c:7f:36:be:24:05:6d:e4:74:d6:97:6a:4c:
80:9d:5d:37:34:6f:82:7a:ed:ef:7b:1b:0e:51:a5:
45:ae:08:63:82:66:71:65:67:2c:8f:f2:ad:df:01:
f5:a8:95:a1:44:ae:c2:2a:7b:41:1b:19:a0:c1:45:
bc:1f:f3:86:cb:17:e2:61:60:b3:69:6c:2c:99:1e:
31:7c:2d:ae:37:ab:c1:51:22:a5:00:73:64:f2:87:
e7:63:9f:92:c9:a5:6b:b9:a3:fb:c9:7f:47:09:55:
c9:ee:da:c7:ea:55:4b:ee:0a:00:95:05:c8:9d:d2:
24:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AB:51:7E:B9:0D:37:BC:8F:B3:9C:9E:5E:8C:72:12:19:B8:99:12
X509v3 Authority Key Identifier:
keyid:78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f9:fc:34:60:dd:de:0c:b7:ba:ed:4b:e4:d5:28:d6:53:d8:
da:3b:31:2a:f5:db:12:5e:75:4b:ac:7a:1c:78:54:6c:1d:57:
c8:c5:20:f3:0a:d7:30:ab:76:b8:88:86:56:d8:1f:26:a4:e1:
ba:c5:62:96:5b:14:e4:b1:25:1b:b0:d1:42:85:ff:cb:c6:fa:
32:20:5f:53:22:ed:d5:62:96:22:05:f3:8b:45:7b:c8:70:a8:
80:99:3e:be:f2:0e:36:63:ed:a6:95:07:f5:c0:8a:15:1b:40:
fa:03:f5:7f:c1:0e:1c:ad:e3:22:bf:76:c0:fb:4c:dd:5e:ee:
43:3e:6c:5a:e4:2d:5b:a5:25:97:17:57:ec:55:d4:cb:74:43:
12:88:30:fa:07:25:1f:33:9b:6a:87:5e:78:ca:66:64:de:2d:
95:09:60:1e:90:24:ea:48:d2:26:a4:16:fc:cd:a0:92:a0:3d:
3c:59:ac:fb:4f:d8:84:13:e3:66:14:90:6d:82:09:7e:5a:4a:
97:fd:9f:69:5e:64:4d:95:bf:e4:2f:46:1d:b2:d8:1b:78:da:
06:ea:71:b3:d5:90:0f:2f:e2:a2:da:aa:8c:81:e0:9a:cd:f6:
eb:81:fb:38:40:11:4f:72:74:fa:d6:db:1a:f1:ff:8d:0e:b2:
79:ce:c6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:12:51 2026 by rpki-client