Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
File: eA3hbu6UewqMdXFPxdpqAlnKG5A.mft (raw, json)
Hash identifier: kHV9YRkjaOOSPFH8OO9wLTFtgbtiUxwAYTgNJ5JGGEU=
Subject key identifier: D4:0F:30:EB:2A:11:CF:BE:55:47:71:B4:0A:7B:54:A3:65:56:3E:1A
Authority key identifier: 78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
Certificate issuer: /CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Certificate serial: 01A0D64C1ACEE99C9101C168FDFE921577C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 02:01:46 +0000
Manifest this update: Fri 25 Sep 2026 02:01:46 +0000
Manifest next update: Sat 26 Sep 2026 02:01:46 +0000
Files and hashes: 1: FZe1NTnwQLaVEwa5nKYFvYoYApc.roa (hash: LyCQTa9+bhAOhJK8DWlraV43+IT6fvhRPfMpiyuGQl4=)
2: cbfZrsYOtkfTsvATyxudQ2krwIc.roa (hash: LFDpBEhBWBZpbTCNf+xEuq+zB73JcCsNfl6NSUtgKtY=)
3: eA3hbu6UewqMdXFPxdpqAlnKG5A.crl (hash: q5l68ByTGzyumJDH0roVz39gygqwbpGdX/aNfNxhI4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4c:1a:ce:e9:9c:91:01:c1:68:fd:fe:92:15:77:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Validity
Not Before: Sep 25 02:01:46 2026 GMT
Not After : Sep 26 02:01:46 2026 GMT
Subject: CN=d40f30eb2a11cfbe554771b40a7b54a365563e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:aa:d2:fd:2b:49:35:96:02:c0:f4:97:60:23:
81:bc:15:38:de:df:89:58:af:81:c6:09:4c:19:c1:
ed:f5:02:a6:18:d1:7d:8a:63:b8:87:da:fa:a8:bb:
5f:8b:88:f2:35:fd:93:7f:46:57:85:16:c1:c1:06:
08:30:f5:95:29:3f:12:d0:70:65:49:e7:65:dd:fb:
9f:78:d6:2e:e5:d4:a2:0f:c4:44:b6:70:d0:a4:33:
ff:04:d0:ee:04:2e:12:39:12:12:4b:b7:2c:d0:7b:
99:b6:a2:a1:1d:a0:2f:99:7b:d7:cc:61:7a:2d:3d:
c4:6c:08:55:54:0f:98:40:13:7b:2c:2e:17:a1:db:
c0:0e:fa:23:bb:5d:25:a6:7b:19:01:ca:4b:60:60:
a8:1d:ef:b6:f2:2d:7d:79:09:35:45:e6:af:4b:ac:
f7:ce:8a:10:5a:54:49:59:8a:5f:2f:5c:1a:48:11:
01:29:7f:a9:ad:51:98:51:bd:e9:b2:e5:0d:9a:24:
cb:7c:a5:08:d0:2a:cd:67:63:80:41:bd:2b:c2:ba:
98:cd:fb:cf:50:41:52:c3:1e:c8:8f:e9:26:27:33:
78:77:7d:06:15:1d:2e:d7:bf:c7:06:79:41:65:bb:
e6:8e:19:b2:ae:27:07:7e:f5:54:ad:2e:a2:a2:18:
45:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0F:30:EB:2A:11:CF:BE:55:47:71:B4:0A:7B:54:A3:65:56:3E:1A
X509v3 Authority Key Identifier:
keyid:78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:d2:b4:38:c9:a6:24:52:d6:5b:72:28:72:d1:17:6e:98:7d:
96:a3:bc:73:d6:23:69:1a:77:ef:41:44:5f:b0:da:39:6a:6e:
40:27:fb:24:8f:f4:15:33:e8:a6:23:0e:9d:c7:ea:1a:7b:47:
cf:d0:88:76:24:8f:dc:76:8e:dc:0c:4f:c8:9e:2f:3a:ae:c1:
0f:37:ba:ed:d0:99:c5:96:4d:78:df:ae:74:c3:97:a7:f6:5a:
0c:20:8c:e8:6e:5e:5b:73:73:10:7e:8f:74:c1:ff:14:fd:87:
6c:77:59:7f:43:bc:6e:0f:c3:db:bc:fe:6a:75:3b:fa:24:9e:
5a:44:28:06:e1:0a:e9:e0:3c:42:fb:82:af:0f:dc:6f:72:db:
51:4c:20:8b:dd:17:90:ae:b1:63:3a:1d:e5:c1:51:5d:fc:1b:
36:f0:79:a5:88:48:4a:54:39:b3:9e:22:d4:81:a9:28:be:11:
d8:58:98:57:a3:1c:21:36:38:e4:9f:1e:30:48:75:9e:8c:c0:
e1:f7:c8:be:c0:a6:31:db:56:aa:6d:4b:23:0c:a4:75:09:44:
a9:b3:4f:d8:07:ae:b6:be:71:e6:3b:b8:04:09:1c:45:3d:15:
15:38:4a:d8:60:03:d7:1c:98:6a:48:ca:44:88:5f:a7:b7:5d:
3e:a4:23:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWTBrO6ZyRAcFo/f6SFXfIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MGRlMTZlZWU5NDdiMGE4Yzc1NzE0ZmM1ZGE2YTAyNTlj
YTFiOTAwHhcNMjYwOTI1MDIwMTQ2WhcNMjYwOTI2MDIwMTQ2WjAzMTEwLwYDVQQD
EyhkNDBmMzBlYjJhMTFjZmJlNTU0NzcxYjQwYTdiNTRhMzY1NTYzZTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KrS/StJNZYCwPSXYCOBvBU43t+J
WK+BxglMGcHt9QKmGNF9imO4h9r6qLtfi4jyNf2Tf0ZXhRbBwQYIMPWVKT8S0HBl
Sedl3fufeNYu5dSiD8REtnDQpDP/BNDuBC4SORISS7cs0HuZtqKhHaAvmXvXzGF6
LT3EbAhVVA+YQBN7LC4XodvADvoju10lpnsZAcpLYGCoHe+28i19eQk1ReavS6z3
zooQWlRJWYpfL1waSBEBKX+prVGYUb3psuUNmiTLfKUI0CrNZ2OAQb0rwrqYzfvP
UEFSwx7Ij+kmJzN4d30GFR0u17/HBnlBZbvmjhmyricHfvVUrS6iohhFnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQPMOsqEc++VUdxtAp7VKNlVj4aMB8GA1UdIwQY
MBaAFHgN4W7ulHsKjHVxT8XaagJZyhuQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUEzaGJ1NlVld3FNZFhGUHhkcHFBbG5LRzVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xMDcxOTUtY2M1MS00NzFiLThkYTIt
ZTAwNTU0M2YwMzc0LzEvZUEzaGJ1NlVld3FNZFhGUHhkcHFBbG5LRzVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8xMDcxOTUtY2M1MS00NzFiLThkYTItZTAwNTU0M2YwMzc0
LzEvZUEzaGJ1NlVld3FNZFhGUHhkcHFBbG5LRzVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1NK0OMmm
JFLWW3IoctEXbph9lqO8c9YjaRp370FEX7DaOWpuQCf7JI/0FTPopiMOncfqGntH
z9CIdiSP3HaO3AxPyJ4vOq7BDze67dCZxZZNeN+udMOXp/ZaDCCM6G5eW3NzEH6P
dMH/FP2HbHdZf0O8bg/D27z+anU7+iSeWkQoBuEK6eA8QvuCrw/cb3LbUUwgi90X
kK6xYzod5cFRXfwbNvB5pYhISlQ5s54i1IGpKL4R2FiYV6McITY45J8eMEh1nozA
4ffIvsCmMdtWqm1LIwykdQlEqbNP2Aeutr5x5ju4BAkcRT0VFThK2GAD1xyYakjK
RIhfp7ddPqQjWA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 10:42:58 2026 by rpki-client