Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
File: eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json)
Hash identifier: sXPu5lNLG40MndUWsn1gyQ/+Yssth3kmB322fwZXJTo=
Subject key identifier: CC:12:D4:49:E6:D7:06:5B:D8:A8:49:24:83:ED:3C:27:52:46:FC:62
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Certificate issuer: /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial: 01A1494EA328BC06E5DA2B6263077F3621C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
Manifest number: 146C
Signing time: Sat 17 Oct 2026 10:00:52 +0000
Manifest this update: Sat 17 Oct 2026 10:00:52 +0000
Manifest next update: Sun 18 Oct 2026 10:00:52 +0000
Files and hashes: 1: Ovz5_uXaopmCFA2hM3c3dActUxA.roa (hash: c9mXjNhTNI7nbpo+Q8eDzbpgYffEF1OmRMytYW5lsxc=)
2: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: fr6v9lGqhuFwPKp4j8uel7Mes9HR+y+DREDrATSOibU=)
3: iiLRQTaQQ6IVIkbg2il6ZXlFwVQ.roa (hash: tutx4i5TMPBaqEME1ocqA/S91MUf42k0v3h4figQjcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:4e:a3:28:bc:06:e5:da:2b:62:63:07:7f:36:21:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Validity
Not Before: Oct 17 10:00:52 2026 GMT
Not After : Oct 18 10:00:52 2026 GMT
Subject: CN=cc12d449e6d7065bd8a8492483ed3c275246fc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:fd:b0:0d:53:6d:04:8a:75:f9:38:1d:1c:
f5:f2:c3:a9:5a:30:e9:70:3a:e2:ec:b5:1e:4e:7d:
03:cc:7d:09:e2:73:72:2e:18:14:e8:15:18:2e:ef:
c7:2e:35:cb:cc:83:de:f6:45:23:8b:88:ef:76:73:
d7:ee:f6:49:f7:ba:cd:01:d5:e6:8d:c8:ce:05:7b:
12:8d:b5:9f:ea:f1:0f:af:53:16:65:62:b4:db:d4:
9e:a6:5d:25:31:3c:2d:86:3e:30:8d:db:39:6b:9d:
07:8c:74:4c:e0:ed:81:e4:ce:62:26:4e:8e:f7:24:
8c:77:87:ea:ae:1a:e9:4f:d0:68:cb:e0:28:d5:b8:
8d:98:9f:f0:a7:c9:aa:62:fb:1f:8b:5d:d6:f6:f5:
a0:bf:49:7e:61:0e:c9:a5:94:b0:01:30:a8:52:09:
12:f1:70:46:6c:dc:61:09:0b:6d:ca:6d:ee:33:62:
08:b5:ab:3f:9e:33:b7:d0:ad:b0:e7:b4:34:84:b9:
f9:9a:14:6b:c9:e1:68:49:cb:9c:05:c7:e1:98:29:
98:43:85:3d:35:55:e3:b6:cc:82:c8:1e:a5:32:81:
39:1d:87:c2:b0:53:6d:08:97:2d:97:7a:49:71:aa:
9b:03:cf:11:96:40:28:a4:62:5f:60:34:42:02:1d:
af:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:12:D4:49:E6:D7:06:5B:D8:A8:49:24:83:ED:3C:27:52:46:FC:62
X509v3 Authority Key Identifier:
keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:41:2f:5b:55:1d:b8:76:30:b3:11:d7:a2:7a:fd:a8:36:97:
74:9a:71:61:7b:4c:18:61:6f:36:f4:9d:7a:91:c8:f8:04:93:
5c:d3:17:d7:40:74:07:00:8e:d7:4f:7f:1e:cb:9f:5e:14:77:
47:28:18:bb:cc:51:e2:4a:ba:60:59:fc:d9:bf:a0:32:7b:32:
f0:58:01:9f:0d:af:a5:90:59:91:fb:29:99:69:d9:5e:5f:d5:
da:8e:c0:5e:1c:69:d8:16:66:97:cf:22:61:bb:d9:9a:bd:e2:
72:2a:b0:c3:22:fb:2d:99:de:94:cb:63:01:dd:7c:95:33:3b:
57:00:1e:de:89:63:c0:8d:55:c6:da:e7:5b:08:9f:cd:1b:de:
0a:fe:88:90:2c:90:84:c1:5e:95:51:f4:83:24:66:32:68:d1:
74:79:09:ac:75:33:25:ed:a1:99:05:8a:b5:9c:4c:b4:b1:95:
73:e0:7e:1a:0a:18:bc:3e:71:e8:57:78:8f:57:92:93:ec:c2:
ff:2f:95:03:12:25:4f:f4:b2:93:17:25:e7:fb:3f:ef:05:d0:
8f:f6:24:5f:5a:a6:24:a2:80:a7:57:99:59:94:61:88:d4:bf:
45:83:28:da:16:31:ba:5c:b0:f6:3a:5d:e2:2f:80:94:df:0c:
c3:fd:72:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 16:31:26 2026 by rpki-client