Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
File: e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft (raw, json)
Hash identifier: LI/P+5dccJAioFvplYqRwT3mcaQ2hRDGhJLKWk2vBTw=
Subject key identifier: 56:8A:B1:4F:FA:14:E7:F1:7F:FC:9E:D4:28:5D:C2:67:1D:BD:DF:03
Authority key identifier: 7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
Certificate issuer: /CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Certificate serial: 01A0D23730FA36B96E0582540E71F1E199ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
Manifest number: 1820
Signing time: Thu 24 Sep 2026 07:00:27 +0000
Manifest this update: Thu 24 Sep 2026 07:00:27 +0000
Manifest next update: Fri 25 Sep 2026 07:00:27 +0000
Files and hashes: 1: RCrqoUHCiCj-_mCIijuiOb69DWo.roa (hash: N+TGC8nICgkfbZEg/ul2Bb4VOH/CDC8qHnBferdNNKE=)
2: e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl (hash: FqVQWkZgYEzjEFjDLWAAOQW1DEOJGxPFKVoIOPe4R7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:30:fa:36:b9:6e:05:82:54:0e:71:f1:e1:99:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Validity
Not Before: Sep 24 07:00:27 2026 GMT
Not After : Sep 25 07:00:27 2026 GMT
Subject: CN=568ab14ffa14e7f17ffc9ed4285dc2671dbddf03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ac:ea:b2:d8:c9:b2:4e:ae:ad:9e:b7:3e:e3:
28:cb:b4:fc:a2:a3:7a:d5:59:99:1e:36:ce:98:e0:
b5:a5:1b:b2:d5:98:fc:f7:c1:c8:fe:f7:9b:a1:61:
ab:e4:5e:82:da:e7:1a:74:26:7d:4f:9e:de:c0:a4:
63:d8:9c:5d:f3:33:29:4a:2d:13:8a:cf:46:97:f2:
f9:43:4b:ed:14:27:04:83:0b:1c:bc:0a:21:8c:ef:
b4:6a:fc:52:c3:18:18:93:18:02:08:87:b0:cd:43:
51:78:65:03:77:e7:ec:b2:3d:88:03:be:a7:bc:9f:
af:c8:66:35:de:aa:84:a9:75:da:f0:19:72:c7:bb:
41:8a:64:ad:d3:0b:e3:15:12:a9:61:6c:cc:45:8a:
1d:0e:fb:d9:12:a3:48:2e:86:30:a5:18:f0:b5:5c:
08:c5:8d:94:cf:03:81:d2:28:21:bf:db:52:90:64:
4c:92:4f:8b:6a:ce:99:f6:bc:89:5e:32:f0:39:07:
32:e4:b0:3f:c2:26:9b:1b:a2:7e:8d:5d:89:24:6a:
d0:c2:ec:7e:10:15:ca:f5:b1:c8:0a:4b:3e:98:c8:
31:ee:e9:e6:2e:03:fc:aa:7b:6d:b7:f1:b7:29:94:
0f:10:53:35:89:04:1d:e3:15:89:c4:80:84:e1:22:
6e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8A:B1:4F:FA:14:E7:F1:7F:FC:9E:D4:28:5D:C2:67:1D:BD:DF:03
X509v3 Authority Key Identifier:
keyid:7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fb:fa:60:8e:6f:de:4d:2f:d5:04:66:43:9e:fa:90:c5:06:
d2:9a:eb:02:78:5a:c1:0e:2a:a0:d6:82:db:bd:3b:1b:23:f6:
93:06:de:b9:29:7a:30:e2:72:f0:22:18:10:bd:70:36:dc:e5:
cb:f4:d0:f2:10:10:cc:50:12:2b:47:4e:2c:86:ce:26:91:ca:
cf:34:ad:1f:5b:b9:76:95:30:29:a7:04:62:58:b4:00:85:e3:
cd:f0:e4:57:4e:b3:95:56:5f:36:08:b9:52:7c:d6:2d:a0:6b:
a0:40:e4:82:7e:03:f1:84:42:7c:24:2f:47:62:95:44:57:dc:
ac:18:33:7d:1f:62:86:f0:e2:35:a6:ba:3d:be:80:27:07:02:
f2:96:d7:26:69:34:40:16:b7:c7:a7:59:b4:13:e3:0a:16:d4:
1d:cd:1e:5d:3a:64:23:a6:89:d1:02:8b:a1:82:5d:36:f3:14:
3d:82:ea:62:51:76:8b:a2:ca:22:15:be:a4:22:85:8c:96:3e:
01:44:49:85:8f:45:58:49:5c:ba:af:ad:d5:23:f5:e5:b7:8a:
6e:b3:1f:bb:23:01:1e:c5:72:a1:10:8d:c8:2b:d5:72:ae:84:
45:63:05:6e:7f:cb:c0:98:17:c7:17:04:b9:aa:ef:66:b5:30:
34:10:8e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:43:37 2026 by rpki-client