Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
File: eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft (raw, json)
Hash identifier: ZHYFzIxmX18keA4qsaviKhE3Jr3RCuhUR4gYflw9jFA=
Subject key identifier: DD:BC:37:8E:05:0A:29:AB:F4:4F:07:DC:CF:27:6F:04:03:F0:38:09
Authority key identifier: 78:70:56:17:98:E5:C8:A2:67:07:62:0D:F0:82:EF:37:78:D7:16:3D
Certificate issuer: /CN=7870561798e5c8a26707620df082ef3778d7163d
Certificate serial: 01A0CFDAA8004203717A8D326DC213A63922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
Manifest number: 1965
Signing time: Wed 23 Sep 2026 20:00:08 +0000
Manifest this update: Wed 23 Sep 2026 20:00:08 +0000
Manifest next update: Thu 24 Sep 2026 20:00:08 +0000
Files and hashes: 1: M3zpnwwGXaGL3R2w7EMCJ4wbclk.roa (hash: j1ibhMzbM/bGDbvXooShA+Ex1FCjg8NtC5fCI4cFBAs=)
2: eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl (hash: bZKawZQyNkabN4LaCo529Mt2OugyEzg9sPjoW8nWNWw=)
3: nkcqRqm6JxltUVOst-8A4bjg-Yw.roa (hash: XaEc/XtzoivAIb5D2Y8YGEKADIQDianztAx7Av77swM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:a8:00:42:03:71:7a:8d:32:6d:c2:13:a6:39:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7870561798e5c8a26707620df082ef3778d7163d
Validity
Not Before: Sep 23 20:00:08 2026 GMT
Not After : Sep 24 20:00:08 2026 GMT
Subject: CN=ddbc378e050a29abf44f07dccf276f0403f03809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:60:8b:7b:ce:76:41:20:3b:44:a2:12:03:3d:
d7:33:30:11:bd:a4:60:c6:84:9c:78:3a:73:32:80:
43:ac:26:04:59:f8:bb:2a:ef:78:37:af:dc:d4:ab:
47:17:42:7e:79:38:34:79:d2:30:c7:34:f7:e5:1b:
2e:30:0d:aa:a4:90:11:79:71:80:17:cf:be:5d:a2:
39:cb:7c:27:23:c4:ea:4e:61:69:4e:35:5f:09:fa:
ae:48:52:b4:21:9d:ae:3a:7b:a2:92:70:af:b0:68:
45:53:5a:59:02:b5:ad:0e:c1:66:b4:03:d1:77:93:
57:c2:93:dc:fa:17:db:4c:93:71:ca:dc:fb:8e:12:
8a:bc:32:bc:af:92:aa:61:00:90:3c:09:c3:47:55:
00:b0:88:e9:5a:c8:12:1b:76:f1:48:46:1f:09:ad:
e0:e4:0a:37:20:06:aa:f2:d6:c8:1e:37:9a:53:71:
79:0f:3c:58:c6:11:57:ea:df:11:d8:3e:77:17:25:
e7:6b:77:25:e6:10:55:c9:ac:94:71:83:33:f0:3f:
a4:d0:4b:9f:90:82:3a:f0:4c:82:00:99:0d:10:3e:
17:2d:9c:34:85:39:6f:7c:85:76:8b:20:25:b7:42:
b3:74:6a:f2:f2:3b:e0:40:d9:f5:cf:f2:3f:96:c0:
01:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BC:37:8E:05:0A:29:AB:F4:4F:07:DC:CF:27:6F:04:03:F0:38:09
X509v3 Authority Key Identifier:
keyid:78:70:56:17:98:E5:C8:A2:67:07:62:0D:F0:82:EF:37:78:D7:16:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a6:53:2f:51:e5:7a:94:41:43:59:1c:8a:c1:8d:8e:20:49:
1a:82:6c:7e:fe:fb:55:12:13:44:f8:1c:a1:8b:f2:1a:4b:0f:
2b:e6:8a:e2:03:a7:57:3c:76:11:91:2a:fa:d0:71:1f:ae:d8:
8b:b4:8f:e5:7a:af:08:5e:e3:99:5a:b6:25:45:8c:9b:8f:ee:
2a:be:30:f0:61:df:15:25:05:59:0d:21:6d:ce:c4:6a:68:86:
0b:8c:b8:06:56:b7:c5:6b:4c:83:01:6a:df:27:bf:cf:f5:17:
1b:f3:4d:d7:bd:92:9a:94:a0:c2:1e:ce:1c:87:a8:c5:af:59:
ba:1d:09:e5:e8:c0:d1:8e:cb:62:24:5e:b3:58:b0:4e:42:8a:
14:1b:b3:47:2e:46:79:46:4e:43:30:d4:f5:c4:e4:2d:af:4d:
08:8e:bc:18:78:c7:b8:c4:ee:95:78:9c:25:0d:41:86:81:d6:
af:82:6c:84:4b:8b:30:34:a6:fc:1c:cc:d0:6a:f3:ec:ac:b0:
9a:fb:a2:7a:87:51:be:7a:a0:cd:e4:90:4b:ff:d6:7e:67:e2:
3f:10:ac:b0:8b:95:66:93:51:5f:af:4c:f6:0b:d7:a4:47:4a:
e6:bc:e3:9f:34:f7:59:14:ac:54:f2:8b:6a:a8:d3:b8:ed:df:
3a:45:60:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:03:03 2026 by rpki-client