Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
File: eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft (raw, json)
Hash identifier: +omIt3y8PcEUZHoW1mrfEOUnYWlWXoyRCSTVBTQMs8g=
Subject key identifier: A4:CE:77:92:D5:04:80:11:BC:92:BE:90:42:59:5D:60:09:8C:EC:E6
Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Certificate serial: 01A13748669C76A4CFC8F351F0349B1A15F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
Manifest number: 0AA6
Signing time: Tue 13 Oct 2026 22:00:54 +0000
Manifest this update: Tue 13 Oct 2026 22:00:54 +0000
Manifest next update: Wed 14 Oct 2026 22:00:54 +0000
Files and hashes: 1: AmpembMZnQ3F11s0E_0dYki25Mc.roa (hash: WDbKJoErc1LVQLx62LO/KjvhetUehDjF17FpYSbvL/4=)
2: PKXuRc_5_wM56Jttnq1znbxTNrM.roa (hash: wNBNrg7iwt49739UTs0ZF6veqyOIJdBVUfKeZkV8DDw=)
3: eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl (hash: Tr/7XnxIfIAYw+akSGinQ7z5lXtbAqubg6L1n9WMWiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:48:66:9c:76:a4:cf:c8:f3:51:f0:34:9b:1a:15:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Validity
Not Before: Oct 13 22:00:54 2026 GMT
Not After : Oct 14 22:00:54 2026 GMT
Subject: CN=a4ce7792d5048011bc92be9042595d60098cece6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d1:ff:17:ea:95:47:84:b6:77:8a:ea:da:9c:
9b:67:98:9a:16:8d:01:41:f9:66:51:bb:79:81:ef:
45:70:ce:5d:43:fa:0a:c7:04:9d:ce:5e:81:97:2a:
05:ee:3f:79:7b:49:4d:fb:72:c0:17:f7:76:2e:a2:
b2:ec:4d:d0:4b:42:81:54:46:61:1c:e3:df:60:54:
14:7a:d8:f4:3e:15:23:59:5c:bc:7b:fc:b8:4f:8c:
25:a0:61:b7:48:3f:d2:b9:b0:44:4e:f3:a8:cc:fd:
a3:7c:f4:e0:0b:02:79:8b:27:7a:79:6c:eb:f2:47:
55:f3:64:fc:0c:cb:40:e3:16:45:cc:c1:58:24:2d:
c7:2c:8c:b9:c3:4d:36:80:bf:88:ba:75:e7:14:e2:
44:75:4d:15:a2:04:44:ed:61:1d:a8:09:4b:77:9b:
45:10:a0:c3:af:9d:18:b4:3c:4e:32:ee:86:f4:e4:
75:51:59:67:7d:24:d6:fd:75:9f:74:ec:9a:63:0d:
47:c7:04:e3:5b:51:b0:6e:56:3a:6e:b0:e8:a3:69:
b7:61:76:30:f8:23:28:12:a9:a8:94:c0:64:58:cf:
71:d7:32:a1:51:38:b7:f3:34:7b:00:08:c4:c3:24:
b1:28:99:33:57:87:63:19:16:01:06:c8:89:34:5d:
68:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CE:77:92:D5:04:80:11:BC:92:BE:90:42:59:5D:60:09:8C:EC:E6
X509v3 Authority Key Identifier:
keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:23:5e:7a:8e:db:23:50:2e:f5:33:9a:88:e7:7c:cf:5e:42:
4b:ad:41:6a:95:95:df:d6:d4:dd:a6:18:bd:b0:a9:b9:22:b9:
d7:62:65:4e:83:ac:f5:56:2f:95:bc:de:1d:23:f1:0e:de:bc:
2e:94:57:db:6a:28:23:ba:2b:14:ab:fd:7c:75:0e:f3:54:de:
7e:25:6e:01:74:9a:53:18:05:4e:d4:8c:01:a1:41:fd:30:af:
dd:16:7c:1c:e9:11:4f:36:43:24:30:23:0a:b8:1b:89:11:dd:
3c:4c:5a:5c:c3:a4:d0:7c:f8:35:74:25:e0:8c:5d:c9:90:54:
50:47:60:11:f6:c3:55:0f:3a:ab:05:6c:80:fd:95:23:dc:a2:
3f:b2:c8:38:e5:1c:d3:a3:29:e4:f0:41:29:fc:db:2b:c5:b4:
43:90:0b:74:d8:e7:42:5b:ec:27:80:b2:bf:a4:86:09:6d:7a:
34:4a:83:45:bf:1f:e3:bb:be:6b:88:94:b3:73:4d:a6:8d:a8:
3d:d5:4d:92:b6:39:e0:52:99:cc:14:88:7e:36:32:97:28:e2:
e5:f7:af:62:6d:83:02:a8:92:71:8d:df:51:42:8c:a2:92:f3:
cc:d1:bf:19:95:13:c1:86:36:83:a7:07:ee:61:db:80:a0:b7:
3f:75:77:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:48:09 2026 by rpki-client