Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/eO2JedPoFMUVCZPpyAidJVQm3wU.mft
File: eO2JedPoFMUVCZPpyAidJVQm3wU.mft (raw, json)
Hash identifier: evF6yYjYk8Dt4jML8nPRF290mmnM8A5NkzoFepBZCMM=
Subject key identifier: 90:8A:92:A0:0E:95:15:27:17:65:E6:35:7F:01:C5:14:C5:F3:99:78
Authority key identifier: 78:ED:89:79:D3:E8:14:C5:15:09:93:E9:C8:08:9D:25:54:26:DF:05
Certificate issuer: /CN=78ed8979d3e814c5150993e9c8089d255426df05
Certificate serial: 01A0D64BFDF45522623DFCE0BD5599EE2554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eO2JedPoFMUVCZPpyAidJVQm3wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/eO2JedPoFMUVCZPpyAidJVQm3wU.mft
Manifest number: 1F
Signing time: Fri 25 Sep 2026 02:01:39 +0000
Manifest this update: Fri 25 Sep 2026 02:01:39 +0000
Manifest next update: Sat 26 Sep 2026 02:01:39 +0000
Files and hashes: 1: RIy1eEWM1Cp_Qanw7hsjVqWm8sw.roa (hash: UZQxNkbTTX73jZ3JuNG/u4WDtmsa3ERMpqjLQ9cHbqw=)
2: eO2JedPoFMUVCZPpyAidJVQm3wU.crl (hash: /+68lS/m09d0oIhRd8Vt8u4ureBnpgnxj7H5af4Nn3U=)
3: wLTabeG6W9scPK-KgjhmQT_cofg.roa (hash: knKii4to9f3vWO2m5lSB+g8YQoY/mZRmcxoRXUr8ZI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/eO2JedPoFMUVCZPpyAidJVQm3wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/eO2JedPoFMUVCZPpyAidJVQm3wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eO2JedPoFMUVCZPpyAidJVQm3wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4b:fd:f4:55:22:62:3d:fc:e0:bd:55:99:ee:25:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ed8979d3e814c5150993e9c8089d255426df05
Validity
Not Before: Sep 25 02:01:39 2026 GMT
Not After : Sep 26 02:01:39 2026 GMT
Subject: CN=908a92a00e9515271765e6357f01c514c5f39978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:eb:bd:a9:52:f3:11:37:50:fd:fe:84:a7:83:
2b:ef:21:e5:2b:d2:4d:ab:97:bd:89:db:aa:2d:fa:
8d:ee:64:50:5e:30:9a:16:fe:9d:9c:3b:2a:a8:46:
46:43:6c:f7:61:93:5e:13:82:86:bf:0e:e4:87:27:
68:59:ca:25:9f:1b:23:55:ef:d4:c1:ae:f4:99:f0:
ce:3d:b8:53:93:7a:21:81:0c:96:97:6f:e1:30:a1:
d1:54:8b:15:39:36:cb:92:c2:bf:cf:39:33:0d:13:
29:8a:28:b9:7a:dd:74:e0:33:ec:30:5c:85:d0:ee:
5f:b6:00:fb:b3:43:e3:f9:66:6e:d3:0f:90:58:3f:
66:05:50:65:ff:b7:50:53:dc:d5:7c:f0:9f:3e:d7:
d7:59:6e:b7:2f:1f:61:dc:3b:32:5b:b3:ad:77:ea:
c6:85:9b:29:2a:06:bc:58:e1:c1:19:a2:89:d3:6e:
d2:6b:95:59:f2:be:8e:d7:42:7f:a2:54:f3:ca:33:
54:ce:52:18:25:a6:7f:35:f6:85:90:ed:cb:61:f0:
d4:3e:de:10:82:83:7c:c8:c8:81:45:ed:92:92:56:
4a:05:b0:b6:7d:d6:74:e5:8d:a5:71:fd:ca:9c:76:
99:43:78:bf:cb:81:d6:30:08:69:ca:d9:a1:3d:60:
fa:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8A:92:A0:0E:95:15:27:17:65:E6:35:7F:01:C5:14:C5:F3:99:78
X509v3 Authority Key Identifier:
keyid:78:ED:89:79:D3:E8:14:C5:15:09:93:E9:C8:08:9D:25:54:26:DF:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eO2JedPoFMUVCZPpyAidJVQm3wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/eO2JedPoFMUVCZPpyAidJVQm3wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/eO2JedPoFMUVCZPpyAidJVQm3wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e4:d2:27:aa:d6:9b:38:b4:63:11:d1:3b:92:12:f5:36:a0:
59:cc:75:c9:d0:5f:e9:d8:4c:fa:5d:22:bf:7b:91:3d:cb:59:
66:49:dd:1c:12:c2:c6:69:fc:c6:41:53:62:f8:36:a2:cc:14:
42:2c:e2:e8:84:a8:77:96:24:97:20:af:fa:d6:ad:79:5d:b8:
94:5d:14:1b:2e:9b:d8:7d:47:35:61:5a:55:0c:05:0f:2d:14:
94:51:06:21:30:8e:9d:be:e5:8d:82:ee:03:2f:d2:e0:f3:e4:
c8:76:57:64:4b:45:38:a2:d5:5b:88:5b:bf:fb:98:5c:dc:75:
15:fd:86:24:17:3d:d3:e0:45:64:29:a4:92:1d:6f:60:cb:75:
02:88:73:6e:d1:12:23:c9:e9:62:46:09:14:34:9c:62:05:b9:
76:35:e8:08:1f:7c:94:1d:33:51:bc:6f:48:ac:15:eb:38:4a:
56:51:55:a2:c0:33:a1:41:3a:88:05:29:7a:e9:d0:66:73:47:
86:9f:19:99:dd:1a:dd:c4:f4:da:34:88:9b:20:44:12:47:21:
c0:9d:b7:94:c3:0f:8a:e1:29:d7:8e:f1:fa:31:4f:c3:d2:4d:
41:7e:23:cf:69:3b:ae:10:1a:ea:c9:b8:ca:34:b9:1a:c8:e7:
16:57:56:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:59:21 2026 by rpki-client