Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
File: ehJ9Y84cnzVXOQryH8BhBypSX04.mft (raw, json)
Hash identifier: zlZlCF/ExKmOzcGjuqXOwDF5wlQa3WXU2dHt4PtOI1w=
Subject key identifier: C0:66:74:B9:D4:BE:BC:43:14:4B:0E:95:7F:93:9F:35:74:F7:E9:67
Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Certificate serial: 01A0FDFE613A0A87F4B1096DE2B3861F5BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
Manifest number: 05DA
Signing time: Fri 02 Oct 2026 19:01:41 +0000
Manifest this update: Fri 02 Oct 2026 19:01:41 +0000
Manifest next update: Sat 03 Oct 2026 19:01:41 +0000
Files and hashes: 1: ehJ9Y84cnzVXOQryH8BhBypSX04.crl (hash: sWPh2PEKLXy8t+Zyt4JxpWWuWM0+0EF33xXHAFP3wHA=)
2: mryfSMsiVc0yv4FSUpt7qiqcwh4.roa (hash: 0IMb7oddMwh/zy5T4EnTss9mtPc9VXAUaEOcmqL1xfU=)
3: o_rtVjzkw0KDuX61bKwdi27cJvI.roa (hash: /gFVliPW+JCCvNfNfgkacSugBlyQGtqR4HbJDxkhEjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:fe:61:3a:0a:87:f4:b1:09:6d:e2:b3:86:1f:5b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Validity
Not Before: Oct 2 19:01:41 2026 GMT
Not After : Oct 3 19:01:41 2026 GMT
Subject: CN=c06674b9d4bebc43144b0e957f939f3574f7e967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:5d:28:6b:66:7e:6d:45:86:54:96:23:3c:
b2:e0:c6:5a:71:e0:1f:10:55:a2:15:21:be:68:e5:
2e:7c:b7:c6:db:36:34:bd:a9:12:82:c3:24:ca:85:
a0:f0:64:8f:eb:7c:6b:86:a7:98:69:cb:f0:d6:01:
d1:62:64:c5:b9:6d:7d:b3:79:1a:b8:ec:5a:93:ff:
f1:8d:ec:8e:7a:60:7e:e0:15:74:af:d0:d1:40:b4:
32:d2:ca:cd:2b:e0:6c:96:16:2c:dc:ab:b1:f0:d4:
d9:63:64:2b:72:0d:87:19:db:4c:13:4f:89:5c:23:
26:f5:5e:fd:a2:b4:45:f3:61:91:1b:92:99:0c:65:
5e:76:7e:fd:60:27:36:31:37:18:fa:d9:80:d9:44:
27:8c:44:c3:30:92:44:b1:ec:29:b0:26:c0:0a:d9:
ef:62:04:6e:c4:a6:5c:50:97:74:7e:f4:b5:c7:0d:
a8:a8:4e:cb:d9:c9:8d:ff:e3:a5:b8:45:f9:bd:da:
e1:e9:ff:c2:a4:cf:dc:7e:0e:51:ac:c8:ba:73:85:
39:fa:a7:4d:00:a1:87:37:92:9b:71:54:ca:92:f9:
1e:c9:9a:da:94:0d:0d:b5:47:6c:cc:eb:04:4d:fd:
92:49:38:87:12:07:cc:3f:b1:3f:3f:7d:76:58:92:
e1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:66:74:B9:D4:BE:BC:43:14:4B:0E:95:7F:93:9F:35:74:F7:E9:67
X509v3 Authority Key Identifier:
keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8a:06:57:88:41:e4:91:e5:6d:50:e7:a7:5d:00:23:7a:41:
80:5f:59:76:ca:dc:86:3e:75:6e:23:3e:31:fb:ed:08:1c:31:
12:09:77:f8:fb:8f:88:89:38:0d:52:73:3f:19:b8:8c:17:f1:
3f:ad:f8:17:42:cc:96:82:34:16:86:46:21:7f:44:b1:3e:61:
a7:6f:14:f7:ad:6c:c1:87:96:71:0c:2b:42:14:ff:7f:1e:32:
36:6e:bb:23:1e:c0:22:bf:d0:3e:11:db:b4:31:9b:95:c0:72:
40:14:4d:58:6d:8c:5a:91:5e:41:08:90:57:c9:fb:e2:20:97:
c8:1c:8f:82:bb:8a:a2:b3:88:b7:6c:c3:ac:59:ee:b0:30:88:
8e:53:a7:30:bb:ce:10:cd:7d:50:b5:df:ee:84:38:17:f5:66:
56:e0:6d:e9:cf:eb:13:35:f8:9b:86:b1:ce:5c:12:d1:9d:70:
8e:4a:39:7c:b0:c4:a6:e6:47:21:c8:09:f1:36:74:52:b0:2a:
29:94:81:7a:95:11:76:12:36:97:74:5b:9d:fd:b5:65:ee:eb:
fc:e4:5e:eb:d8:1a:e7:5c:d1:df:60:5f:fa:65:de:bc:69:26:
88:8b:fd:08:56:99:90:e6:f7:d7:db:8f:fc:84:e7:45:b9:c9:
62:9f:28:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 05:58:51 2026 by rpki-client