Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/eXanO3wTqWbZU71ok8RChfwk7-8.mft
File: eXanO3wTqWbZU71ok8RChfwk7-8.mft (raw, json)
Hash identifier: GFfSKZg8U4em0Ysa2IgKhk38EdoOrcCgw3IC4I4kmB4=
Subject key identifier: 45:90:E7:BB:B7:06:36:C6:09:18:07:79:3A:FC:54:74:F3:DC:C9:F4
Authority key identifier: 79:76:A7:3B:7C:13:A9:66:D9:53:BD:68:93:C4:42:85:FC:24:EF:EF
Certificate issuer: /CN=7976a73b7c13a966d953bd6893c44285fc24efef
Certificate serial: 01A1C932CFF1CC49E14F52B1880FCFD785F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXanO3wTqWbZU71ok8RChfwk7-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/eXanO3wTqWbZU71ok8RChfwk7-8.mft
Manifest number: 6C
Signing time: Wed 11 Nov 2026 06:01:52 +0000
Manifest this update: Wed 11 Nov 2026 06:01:52 +0000
Manifest next update: Thu 12 Nov 2026 06:01:52 +0000
Files and hashes: 1: 69dyOwruRqj66SetLH027OeIV3c.roa (hash: HCxhftpBnIA2rFHXS8WEzRsnIrsGSyzbbtWPmOSrBwU=)
2: eXanO3wTqWbZU71ok8RChfwk7-8.crl (hash: L7Xsgi4lzZZYshvgPaxjL+ZdhMqEamkzxB37xdMGEgE=)
3: uwz0si1SwVU9VQBKdbu7R8q5vms.roa (hash: qbkqCRHMCZSiQRFrAx9zDyfbeZmrRRF+Lxcz2PpqE4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/eXanO3wTqWbZU71ok8RChfwk7-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/eXanO3wTqWbZU71ok8RChfwk7-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXanO3wTqWbZU71ok8RChfwk7-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 06:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c9:32:cf:f1:cc:49:e1:4f:52:b1:88:0f:cf:d7:85:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976a73b7c13a966d953bd6893c44285fc24efef
Validity
Not Before: Nov 11 06:01:52 2026 GMT
Not After : Nov 12 06:01:52 2026 GMT
Subject: CN=4590e7bbb70636c6091807793afc5474f3dcc9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c9:51:b6:55:79:85:66:c1:27:22:dc:b8:85:
1f:66:92:b3:4a:0f:10:84:50:fa:e8:e7:b9:7e:85:
fe:8a:14:0b:e6:67:02:fe:b0:4e:36:0d:fe:77:15:
ae:95:9a:33:8f:8f:42:3d:21:0a:0d:6d:fb:70:9e:
6b:5f:54:f4:c6:57:33:05:f6:ae:66:dc:a6:b7:8e:
1f:4a:eb:ee:ba:9d:67:31:cd:15:99:a4:5e:3c:ae:
df:02:6a:b0:b4:7d:14:19:2f:44:ed:68:3f:e3:f9:
1c:f5:ee:32:45:c1:b1:ce:51:ae:2b:63:4f:02:45:
d2:69:b7:2e:b1:74:9f:97:43:a7:75:1b:74:c1:62:
de:ed:31:09:89:97:40:66:c8:c6:1f:89:78:99:56:
23:0a:a3:b8:7a:69:d6:05:d6:eb:80:88:8c:2b:eb:
02:9b:81:88:05:98:a5:9c:94:3c:cd:3a:9e:83:30:
0b:68:80:de:55:70:91:bf:50:b0:24:4b:aa:c1:fd:
0d:40:5b:94:ea:e8:d6:6d:19:55:66:75:82:31:5f:
e7:be:df:2e:ae:00:5d:19:51:e9:17:db:80:de:54:
83:c3:83:4f:05:2e:ad:c5:e8:53:56:f3:7a:ae:9d:
d6:e2:80:8f:ef:0d:46:64:ca:56:5f:1e:53:34:b2:
cb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:90:E7:BB:B7:06:36:C6:09:18:07:79:3A:FC:54:74:F3:DC:C9:F4
X509v3 Authority Key Identifier:
keyid:79:76:A7:3B:7C:13:A9:66:D9:53:BD:68:93:C4:42:85:FC:24:EF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXanO3wTqWbZU71ok8RChfwk7-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/eXanO3wTqWbZU71ok8RChfwk7-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/eXanO3wTqWbZU71ok8RChfwk7-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b4:22:4b:12:63:b1:4a:90:63:06:5a:3e:f3:05:eb:c1:83:
27:a0:f9:1e:38:c7:52:f9:91:74:71:cf:a3:e0:2d:ff:3e:f2:
ce:df:c1:cc:78:bf:7c:54:1b:d0:7c:94:87:5d:7c:92:a5:9b:
27:0a:eb:f8:a1:1d:95:3f:e9:7a:44:8c:44:3c:b9:af:d5:a4:
79:b9:14:7b:e2:ec:5a:89:35:ba:11:95:eb:35:a8:a1:81:8d:
13:e6:d4:35:9f:f0:f3:ea:0d:ae:85:0b:15:a3:43:ce:f8:50:
cb:ec:a8:24:ee:0e:df:fc:39:5a:84:82:36:02:eb:26:dc:4e:
1b:0a:62:61:6e:08:25:36:8b:fe:16:49:0a:ac:e5:f1:6b:20:
38:51:e4:35:b0:1d:25:44:1e:72:70:95:7c:d3:fe:d5:97:84:
58:42:74:d8:43:4a:bf:44:24:a1:76:fb:e5:9e:52:09:f3:64:
b8:a5:ab:3e:15:65:46:43:50:b0:5d:20:93:c4:2f:6c:a8:84:
1d:f4:7b:79:8c:d0:4c:cc:16:84:6f:3f:b2:52:88:6a:58:35:
2c:81:46:8a:7e:86:8a:a2:27:83:61:ed:e0:be:a7:9c:e7:40:
07:fa:05:74:ee:0e:5f:b7:b7:dd:b2:c2:b5:ba:dc:3a:8f:50:
e6:38:4f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 14:32:17 2026 by rpki-client