Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
File: e0nQsDY-emQIPi5UzDAfUUrgiRA.mft (raw, json)
Hash identifier: V9ykApKombmyZfLmzOpV6wYIzn6btHI5L0zXy3KBfbk=
Subject key identifier: 66:0A:F0:29:F6:70:E9:50:1A:7D:9A:8A:C4:2B:25:31:19:AF:DE:95
Authority key identifier: 7B:49:D0:B0:36:3E:7A:64:08:3E:2E:54:CC:30:1F:51:4A:E0:89:10
Certificate issuer: /CN=7b49d0b0363e7a64083e2e54cc301f514ae08910
Certificate serial: 01A102B64F161FA81AB81AFFF7DDA0A71C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
Manifest number: 01D9
Signing time: Sat 03 Oct 2026 17:01:04 +0000
Manifest this update: Sat 03 Oct 2026 17:01:04 +0000
Manifest next update: Sun 04 Oct 2026 17:01:04 +0000
Files and hashes: 1: 1m5HSxX-lKOD4u4fGX6ma15JoUs.roa (hash: EihJQKal0ImjJVDDVfh3BA+ydTEzfWFyJ5mENKRj7AY=)
2: e0nQsDY-emQIPi5UzDAfUUrgiRA.crl (hash: KyF/mm3YVXpKovSgsFTRM0dT4X22QQuBsdjDtO7HkYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:b6:4f:16:1f:a8:1a:b8:1a:ff:f7:dd:a0:a7:1c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b49d0b0363e7a64083e2e54cc301f514ae08910
Validity
Not Before: Oct 3 17:01:04 2026 GMT
Not After : Oct 4 17:01:04 2026 GMT
Subject: CN=660af029f670e9501a7d9a8ac42b253119afde95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:1a:78:2e:9a:91:3b:22:92:d4:27:69:79:
ac:07:c2:a0:70:d6:22:3a:70:fa:fd:f1:7a:a6:a6:
29:ae:c1:05:c9:0c:4f:24:21:86:62:ae:7f:d9:81:
7e:f0:a1:2f:2f:60:9f:b9:7b:91:c7:72:2e:2a:6b:
9f:f5:6f:71:6c:c0:3d:98:83:f1:d3:a2:ae:91:4b:
09:bb:e6:7b:28:83:fa:e6:8a:17:db:31:74:89:35:
c4:eb:65:79:7c:48:8f:48:22:b4:29:55:23:c3:a9:
85:e4:e4:81:cf:f0:a7:d4:52:e0:b2:46:16:fc:e5:
7e:1a:ef:80:09:67:38:5c:e4:a6:72:3b:e8:aa:92:
80:5a:96:22:35:96:73:f1:5b:3f:f6:0f:2b:bb:fe:
e8:bc:6b:41:30:b8:64:78:5f:87:64:5c:3d:5f:f3:
a2:a5:26:ac:3b:37:2d:9e:8c:7b:28:35:7a:bd:4d:
99:4f:49:3f:9e:c0:a1:46:15:e9:46:cf:a2:45:66:
b4:13:1a:e6:87:56:d3:89:7c:62:39:bf:e3:11:80:
f4:91:2f:4d:d9:d2:82:da:c0:ec:c0:9e:0d:24:f8:
02:c8:1f:54:01:99:d6:e5:ee:65:e0:c1:a0:de:0a:
73:db:f2:f8:ea:38:43:e1:5d:30:1b:9d:b6:04:91:
ce:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0A:F0:29:F6:70:E9:50:1A:7D:9A:8A:C4:2B:25:31:19:AF:DE:95
X509v3 Authority Key Identifier:
keyid:7B:49:D0:B0:36:3E:7A:64:08:3E:2E:54:CC:30:1F:51:4A:E0:89:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:6a:d1:27:58:00:b4:bd:74:ef:27:e2:54:df:f8:0c:b7:71:
4c:f0:2f:b7:ac:52:d6:6f:7a:4e:ad:86:43:32:68:17:60:51:
f5:f0:ad:46:b0:b3:c7:44:0e:89:28:0d:d0:dd:18:6a:84:43:
b1:05:76:17:58:70:b2:a1:f0:d6:7a:d2:00:01:d0:51:e6:33:
37:c8:5d:80:44:9a:3f:ed:af:91:24:fd:0a:51:88:59:8a:84:
4f:05:c6:d9:70:f9:50:9d:0f:d6:dc:d0:36:23:e4:80:58:77:
ad:b6:9b:48:20:9a:8d:a7:df:5f:0f:c9:fc:63:2b:b4:b1:ab:
ee:12:00:99:1e:60:19:35:a3:e4:64:f0:3e:73:12:15:47:d8:
1e:ed:0a:cf:97:e5:ed:f2:a5:fe:e7:86:b0:4a:2f:49:2c:89:
0b:ab:0d:4f:06:6a:62:0a:b7:e5:6a:98:4b:e4:6d:de:49:19:
b3:7a:84:65:52:8f:a4:18:5e:17:63:fc:be:ad:cf:2d:d3:fe:
ab:7d:da:26:fc:e6:96:de:24:d9:f5:8d:c7:66:aa:b2:31:c3:
c0:78:c0:d5:cd:ba:fd:b0:35:65:48:81:6c:f1:57:1d:ad:0a:
1d:cc:da:86:fb:a0:25:e7:8e:99:34:70:45:c1:c1:6b:b3:e9:
ee:f6:85:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 20:11:27 2026 by rpki-client