Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
File: eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft (raw, json)
Hash identifier: ayiRMh1mmC8rc578TbqNfzJPInql96dZt1K2dBUsLQw=
Subject key identifier: 09:BB:84:24:3F:3F:C5:EE:2F:44:1D:C7:D2:62:12:C3:40:4C:8E:0F
Authority key identifier: 79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
Certificate issuer: /CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Certificate serial: 01A1046E59E693A3134ECF4392B7860EE8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
Manifest number: 1A89
Signing time: Sun 04 Oct 2026 01:01:43 +0000
Manifest this update: Sun 04 Oct 2026 01:01:43 +0000
Manifest next update: Mon 05 Oct 2026 01:01:43 +0000
Files and hashes: 1: 5zwZDxIuULUKjp1rgcwRTBY-pVU.roa (hash: mUMWXUGRFNqTfVs8CnS61wDQkaxlvFmZ/n69Cmi6CP8=)
2: eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl (hash: aJZ6bm4niTSZX3pNWt+wstLlTJ1IEOqC5DXNdYK01NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:6e:59:e6:93:a3:13:4e:cf:43:92:b7:86:0e:e8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Validity
Not Before: Oct 4 01:01:43 2026 GMT
Not After : Oct 5 01:01:43 2026 GMT
Subject: CN=09bb84243f3fc5ee2f441dc7d26212c3404c8e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8c:e4:8b:e4:21:f1:9c:67:3c:c0:bf:0a:b3:
21:44:1c:3c:05:1f:b5:d1:50:77:bc:0d:2c:c0:04:
ea:23:a0:f2:98:64:a2:ab:0a:1f:ea:12:03:bf:1d:
d9:bb:dd:6b:e9:5c:e4:87:ff:e1:42:65:e5:7e:7f:
24:42:3c:c9:05:bb:e4:6e:c2:1b:7c:96:74:0e:93:
f7:af:02:63:24:1f:76:94:2f:81:bb:f1:e6:e7:bf:
8b:db:bf:8f:11:10:ef:43:3a:8f:45:a3:a9:a8:00:
8c:63:10:82:78:77:49:6b:ca:97:74:c4:8b:10:e8:
93:af:44:78:77:7d:1c:15:34:a3:19:48:25:27:a2:
24:c6:8e:18:3d:3e:45:0e:81:a1:cb:df:3b:78:54:
ac:3a:f4:ca:ca:7f:f3:34:c3:ca:33:48:d3:6a:3c:
57:17:70:61:a9:8e:19:ef:16:a0:70:ad:3a:cd:11:
cc:7a:38:dc:e0:af:1e:69:0d:23:59:6e:b4:31:21:
78:e0:00:21:b0:24:2a:1f:ce:77:34:02:17:8d:4e:
e4:fc:ee:46:01:6f:88:b9:ff:55:cf:cb:ae:11:0a:
a4:ea:52:95:b6:5d:ad:83:02:71:33:c9:e4:a6:cc:
ed:7c:04:99:00:f0:26:20:8c:9f:7a:d8:ee:fb:bb:
1a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BB:84:24:3F:3F:C5:EE:2F:44:1D:C7:D2:62:12:C3:40:4C:8E:0F
X509v3 Authority Key Identifier:
keyid:79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:32:59:ff:e1:58:60:48:43:ee:ba:7e:ad:a1:0f:8a:e2:04:
6f:2d:75:d5:0f:69:88:d5:49:62:03:c8:97:c0:af:ff:a5:20:
47:80:f9:38:d3:41:89:7f:54:6c:5e:53:44:a6:fd:cc:54:82:
83:40:61:e8:1f:55:74:92:51:4a:27:62:b2:e2:bb:74:ae:d8:
79:3f:5d:93:8d:51:3b:f1:62:c5:76:21:e4:b3:b8:c5:b2:16:
3f:54:4f:a2:5f:48:31:f4:e7:3e:57:b3:dc:12:bb:7b:08:78:
a2:bb:d0:cf:35:8b:57:8b:a8:c8:b0:64:27:bc:53:c9:a2:c2:
cb:fc:6d:75:4a:df:0e:83:46:49:94:28:45:a6:87:9b:f3:82:
b1:42:99:20:3d:2d:15:da:53:6e:14:7f:d2:aa:5e:1b:bf:74:
8f:c3:34:c9:56:b7:22:11:94:22:d1:16:56:14:06:fe:25:0f:
61:b8:0e:c9:e2:ba:76:a5:de:83:b0:ec:42:7e:82:53:d4:d4:
e0:ec:3d:cb:23:3c:1a:e7:0d:d5:6f:e8:40:14:6e:68:d6:27:
2b:1b:bf:e3:61:e6:cc:fe:07:ab:d6:f7:54:41:55:eb:77:6f:
0d:9f:28:4d:57:c2:44:93:7b:e2:31:86:90:95:c3:55:15:0b:
f9:9a:aa:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:19:01 2026 by rpki-client