Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
File: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json)
Hash identifier: OgoLi1q2ND62OlrBO79BoxyrpfmczGMfx6hDKuMJnhY=
Subject key identifier: 2B:18:B4:FF:FA:7B:23:32:15:9D:4A:44:0C:F2:C9:0E:20:C8:13:8B
Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Certificate serial: 01A1DCB964C250919EFA3BA96A6A732815B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
Manifest number: 122F
Signing time: Sun 15 Nov 2026 01:01:39 +0000
Manifest this update: Sun 15 Nov 2026 01:01:39 +0000
Manifest next update: Mon 16 Nov 2026 01:01:39 +0000
Files and hashes: 1: U0fRXYHgtW5Lj2ILWS5wUzrlnN4.roa (hash: rlb8IZvmVYRTy9dDl5LBuhuMRpChfmFYGPXw/aHFukE=)
2: Zu2YCOMNdF6aNceeKzP2XiSPhlU.roa (hash: cnBeGVbEPlV3dfTfeIQYswJCwcZDweKXTvgV5NLGKQU=)
3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: v/M/V0FoPucRh26r16/zfQMkg6o7esNNDc83a8mKznI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b9:64:c2:50:91:9e:fa:3b:a9:6a:6a:73:28:15:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Validity
Not Before: Nov 15 01:01:39 2026 GMT
Not After : Nov 16 01:01:39 2026 GMT
Subject: CN=2b18b4fffa7b2332159d4a440cf2c90e20c8138b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:1a:56:d2:68:a0:9d:3b:9e:07:3e:69:6d:
c6:4e:13:04:e3:cb:0c:e3:35:8f:d3:ba:c2:f4:2f:
78:b2:1f:a3:7c:19:2f:68:c8:56:20:7e:99:47:d0:
60:6e:d4:5b:2d:3b:3e:da:5a:37:87:52:c0:f7:1b:
49:e4:4c:7c:8b:f9:18:c9:7f:6d:d3:43:f1:a3:17:
d3:bc:64:40:33:83:2e:27:7f:2e:a0:b9:28:35:58:
ee:f7:70:b0:10:bc:dc:60:dc:97:b8:29:27:8a:79:
45:9a:69:b1:74:68:d9:11:b4:de:12:6c:4f:a4:c5:
24:8f:78:c4:ff:cd:03:56:98:a5:00:52:9e:4a:b1:
66:c1:7e:9e:db:b2:fe:5b:6f:09:21:61:38:09:e3:
14:15:ea:1e:75:46:20:fe:0b:74:fc:cd:94:a8:45:
35:ad:12:9a:71:90:c0:57:d0:da:b0:dd:dc:9a:08:
d4:21:e3:e2:e8:b6:32:59:ec:d1:59:67:b5:1e:ea:
c1:5a:ed:d0:d7:03:7f:47:d3:f7:24:24:48:a7:dd:
90:3c:8b:f2:19:da:72:0e:ab:8d:17:8c:ae:54:95:
b8:3d:79:3f:35:bc:26:d0:de:aa:3e:c9:46:e4:be:
ec:32:ec:5e:8d:f9:e5:dc:be:38:0b:6a:16:ab:bd:
1b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:18:B4:FF:FA:7B:23:32:15:9D:4A:44:0C:F2:C9:0E:20:C8:13:8B
X509v3 Authority Key Identifier:
keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d0:ec:12:56:0b:38:9e:20:67:9b:65:39:e1:b8:30:88:d8:
05:07:f5:94:2b:dc:3f:fc:21:c4:45:55:82:0f:7c:59:27:3d:
17:47:9c:98:35:e0:31:86:d1:48:1d:b7:28:00:a7:f1:3e:6a:
da:0d:ce:28:03:ca:69:bd:2c:5e:ec:e4:2d:87:28:21:75:df:
f7:92:ff:df:b9:2b:f3:1b:2b:96:e1:be:2c:69:5c:da:03:f0:
5a:ac:2a:37:08:86:aa:38:59:70:3a:2c:0b:62:85:f9:34:37:
0d:79:8e:17:9a:9f:6e:da:cb:ba:01:14:56:b3:fe:84:e5:83:
3b:f9:53:e3:77:ac:08:7e:7a:83:b5:39:f3:9e:51:0d:8a:24:
cd:da:e0:d0:19:89:cd:ee:0c:79:3d:ee:10:27:7b:2a:e7:86:
18:be:85:2b:9e:ba:0a:69:9e:3b:bb:ec:96:ab:1d:3b:cf:b5:
c9:d2:f3:c8:a7:f4:7e:c7:c1:ee:1e:d7:5f:53:a7:ef:df:96:
e1:da:90:de:6b:8f:5a:43:4d:59:de:87:50:79:ee:65:f2:7a:
fc:89:0b:71:b9:49:3d:56:a6:83:16:cb:63:09:e2:45:ae:0c:
3d:5e:fb:46:75:0e:7c:f5:b8:ab:4f:e9:31:50:3c:59:91:36:
bc:95:cb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:17:27 2026 by rpki-client