Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
File: rx7uIsUBU2MRinHSapRj3JN0uig.mft (raw, json)
Hash identifier: 5k58er4P88HG2/8HqJsL2nMvbzl0TjkJOzllQHNJgkk=
Subject key identifier: 3D:5A:4B:BF:4A:DF:EF:9C:5A:29:B8:9E:23:CA:71:04:2D:7C:5B:8D
Authority key identifier: AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
Certificate issuer: /CN=af1eee22c5015363118a71d26a9463dc9374ba28
Certificate serial: 01A1DACAD6D157CE12FB9DDCA2AA1B04897A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
Manifest number: 0EB8
Signing time: Sat 14 Nov 2026 16:01:28 +0000
Manifest this update: Sat 14 Nov 2026 16:01:28 +0000
Manifest next update: Sun 15 Nov 2026 16:01:28 +0000
Files and hashes: 1: lLnIh6czm0KWIQr0ccsD4cdToLc.roa (hash: kVLAgXuMBEFIQbZq7gNbnr/z2Vz4LT7MCr2JgEg80uc=)
2: rx7uIsUBU2MRinHSapRj3JN0uig.crl (hash: ZzIcTYY9dsi3CIaxgSlpFTFmUK73ZXENgnkezX643Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:ca:d6:d1:57:ce:12:fb:9d:dc:a2:aa:1b:04:89:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1eee22c5015363118a71d26a9463dc9374ba28
Validity
Not Before: Nov 14 16:01:28 2026 GMT
Not After : Nov 15 16:01:28 2026 GMT
Subject: CN=3d5a4bbf4adfef9c5a29b89e23ca71042d7c5b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5e:3b:d6:01:a7:82:30:89:73:0a:6f:c4:5a:
ca:a1:6e:b6:5d:c7:ed:a0:46:20:3e:82:0d:b2:1c:
83:1e:7d:ba:9c:1a:78:59:9c:c5:15:b5:b7:cb:83:
2a:05:cb:18:e3:a6:52:51:ad:37:28:e7:f2:79:28:
ed:63:d1:b9:f0:9e:48:5f:49:f7:cf:0e:6a:19:ed:
ee:39:97:b1:20:05:bd:11:61:51:b4:ab:03:02:f3:
78:62:e9:97:a4:7e:68:ae:f5:c1:4f:e0:6e:f0:09:
1e:ba:f2:8f:72:bd:48:e7:0b:70:a5:39:a7:ee:85:
45:bb:6d:03:3c:7d:2f:96:83:83:51:23:d7:70:a8:
28:38:b1:01:46:4c:b2:0c:df:92:19:58:e5:1f:d9:
8c:4a:f0:68:80:64:b2:bb:e0:24:f3:11:ee:cd:e1:
60:34:31:9a:a1:03:73:2a:1f:7d:49:c4:18:f6:a9:
05:0c:b2:9e:37:88:b3:0d:6e:c5:b0:fa:ac:5f:95:
14:1f:f5:ff:47:8e:b0:88:0b:eb:54:7f:d1:5b:67:
1e:b6:9c:fd:94:3f:dc:a8:53:e6:6b:33:38:2e:4c:
10:fd:be:17:5c:58:a1:43:45:18:12:df:0e:53:3f:
ff:26:db:58:c1:93:da:51:7a:dd:b4:5e:9d:6f:92:
80:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5A:4B:BF:4A:DF:EF:9C:5A:29:B8:9E:23:CA:71:04:2D:7C:5B:8D
X509v3 Authority Key Identifier:
keyid:AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b6:12:8b:5c:ed:bc:56:0c:11:a6:ec:a5:1b:70:65:ea:e0:
ff:a8:c7:bc:5a:ad:b5:61:49:f2:9e:6b:df:35:34:3d:e9:03:
66:17:1b:2d:7d:0e:3d:d6:c0:58:61:97:8e:08:42:7a:bb:a0:
3c:16:c8:c3:e1:f6:b9:62:bc:0a:1c:d0:5b:13:19:da:6c:39:
2e:a4:d8:f3:a7:11:a1:48:a9:e2:2f:1d:a9:47:41:8d:87:ca:
c7:33:14:8f:99:23:52:49:26:0f:0c:a5:72:82:03:53:b5:57:
f4:34:53:cf:41:d2:54:aa:98:94:14:a1:b7:c4:d9:17:85:4b:
ad:09:0d:8a:f4:60:4f:ae:89:5f:d5:aa:c0:35:1c:af:16:e2:
69:8b:bb:2f:16:ab:77:cd:ae:4a:86:38:69:f7:a3:af:9e:b5:
cc:d0:9d:33:96:11:de:7d:81:ba:53:1c:33:e0:2d:19:74:f8:
ff:55:81:04:01:b9:bd:34:2d:16:b5:5f:84:67:90:72:9c:e0:
a5:dc:bf:52:31:f1:d9:a4:45:d7:ac:72:c5:65:04:7c:27:24:
37:34:b0:b7:96:03:39:31:93:b2:cf:3e:b7:e4:0e:2e:50:fc:
e2:fc:5f:d8:cb:d2:c8:fb:99:b8:95:25:59:03:e0:aa:77:15:
6c:45:c2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:39:47 2026 by rpki-client