Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
File: eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json)
Hash identifier: oQLbFPHozzlUOY2uKx+1amdVGD1wInqKw4olYFHh3og=
Subject key identifier: 05:9D:B1:D3:A2:5A:FE:B9:61:0C:E2:E0:4C:12:32:49:F5:CA:34:DD
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Certificate issuer: /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial: 019F965BEB6041B9F4987973CF7CE98809A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
Manifest number: 0FA5
Signing time: Fri 24 Jul 2026 23:00:34 +0000
Manifest this update: Fri 24 Jul 2026 23:00:34 +0000
Manifest next update: Sat 25 Jul 2026 23:00:34 +0000
Files and hashes: 1: 0YhVfBsZbIu7A5iYA94enjAmzkk.roa (hash: HsOjFTzanM+rOeHfu6ck2x7MS7PSUK04NQ5MvXhA+ZA=)
2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: ET8d7ZffUqoJn1XEpN0JOlUDvUMieaiyznWRS8jiidM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:5b:eb:60:41:b9:f4:98:79:73:cf:7c:e9:88:09:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Validity
Not Before: Jul 24 23:00:34 2026 GMT
Not After : Jul 25 23:00:34 2026 GMT
Subject: CN=059db1d3a25afeb9610ce2e04c123249f5ca34dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:02:c8:c0:af:bf:da:27:69:1a:3a:2c:a5:
26:a4:4e:ae:a4:c1:9c:19:59:1c:f3:b9:ec:70:f9:
69:1b:9c:53:bb:1d:19:35:11:98:c1:f0:a7:be:a9:
8a:9f:b1:f4:0a:cd:d2:d7:ab:87:71:d2:71:b4:38:
81:79:b2:07:7c:72:09:8c:ab:1b:e5:2d:59:29:ae:
08:3d:a6:c8:63:2e:18:ce:97:32:eb:2d:e2:1f:8b:
08:a1:ad:05:ad:b7:c7:83:7c:00:57:95:d4:64:d1:
68:59:ab:a3:3b:e7:b7:87:ab:ab:02:d7:fd:2e:bb:
4b:56:e1:1b:b1:9b:df:59:7e:db:5d:e7:c3:fb:8a:
ee:04:f9:d7:88:84:dd:1b:4c:ed:7d:7d:6e:a9:b9:
f0:57:21:f9:61:50:45:ec:8e:b9:e0:81:e5:5d:15:
67:52:59:07:d7:bc:40:04:73:26:eb:c9:50:6d:ea:
f5:8f:be:97:13:74:42:57:88:03:a5:37:a8:46:5f:
a2:10:48:65:8d:43:bd:84:e8:c8:51:37:64:bd:bb:
53:66:9f:10:49:6f:3a:d2:8d:aa:4a:a6:d4:48:3b:
f9:b0:fa:8e:86:07:7f:28:9f:96:d6:63:b4:2c:72:
87:ca:da:f0:cd:1d:1b:94:97:e6:99:a0:4d:49:8f:
64:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9D:B1:D3:A2:5A:FE:B9:61:0C:E2:E0:4C:12:32:49:F5:CA:34:DD
X509v3 Authority Key Identifier:
keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:96:8a:99:89:41:ba:8d:f5:cc:75:e7:e6:95:a4:d3:b9:3a:
bf:6a:41:c5:d8:1c:f2:ac:26:a7:7f:ca:3a:48:26:95:50:31:
3f:f3:af:fa:50:30:3f:cc:60:68:fe:1f:ef:fa:42:91:68:a3:
09:42:cd:81:f7:88:3a:e0:80:aa:63:60:ee:1f:28:c2:13:04:
6b:9b:d8:e6:79:92:80:c2:4a:fd:56:2f:01:74:8f:a0:fa:fa:
7c:5e:9c:1c:3f:c1:8e:47:1f:bb:2a:84:8a:48:a9:05:50:4d:
3d:92:9e:61:f2:f5:98:77:de:7f:ef:96:1e:e9:8d:f8:eb:bd:
41:e6:51:46:5a:ed:bb:89:f3:44:4d:43:e3:88:8d:b4:99:52:
77:39:2f:8e:32:1c:cb:84:dc:b8:ff:55:28:4d:a0:2d:b0:50:
57:ef:79:c0:51:f1:a9:8f:38:f0:fa:e8:4b:7b:25:a7:86:cf:
37:4c:bc:bc:b7:47:b0:4a:91:cb:3d:c4:21:59:93:49:66:05:
04:86:64:cb:55:f9:84:96:68:a2:a1:f0:54:de:01:2a:26:18:
f8:78:d2:a5:27:68:99:04:79:4d:18:f2:d1:5c:7f:79:d7:80:
02:ef:18:d3:71:0c:3a:b1:e7:47:24:32:9a:47:7c:27:10:4f:
0c:91:c7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:11:38 2026 by rpki-client