Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
File: eH4xzl1QHRqUr9q71OAkzCp4jvU.mft (raw, json)
Hash identifier: prtGLINlw4QcEVxU/CKnDV8mjNtlKllHQhTS5Shbi/w=
Subject key identifier: B2:34:17:DA:27:75:04:55:46:56:E4:98:E8:D3:6D:7C:35:E3:DE:B3
Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
Certificate issuer: /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Certificate serial: 01A0E3D0347BCB68F8ADA3B9AE9F93B62EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
Manifest number: 1A7A
Signing time: Sun 27 Sep 2026 17:01:07 +0000
Manifest this update: Sun 27 Sep 2026 17:01:07 +0000
Manifest next update: Mon 28 Sep 2026 17:01:07 +0000
Files and hashes: 1: 28QSm-nWPh3k170EUdx31IY1dMI.roa (hash: kWfNX41nTH6GHmC998QPitgxsJrbp8luPvyUsxQE9E4=)
2: 2e9LSNAqhLRT7BWU4DhRYt_D284.roa (hash: LhrPgLlELaQl4rIr+j03mkYm6Ou6QZ4My1odiBtlrTs=)
3: eH4xzl1QHRqUr9q71OAkzCp4jvU.crl (hash: 94LieS3mOiB5HtOwrLfTvWTid6mxITAa0WIZ8aUtDVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d0:34:7b:cb:68:f8:ad:a3:b9:ae:9f:93:b6:2e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Validity
Not Before: Sep 27 17:01:07 2026 GMT
Not After : Sep 28 17:01:07 2026 GMT
Subject: CN=b23417da277504554656e498e8d36d7c35e3deb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:95:08:cd:a4:c4:6e:e8:d8:9e:8d:41:a4:
b7:f4:63:9c:ad:b4:6c:76:36:23:d8:d2:96:f1:8c:
62:fa:98:5a:87:48:9d:94:e9:ea:e6:eb:a1:b8:1c:
ea:0a:76:e8:2f:31:c6:11:a5:50:97:f7:2f:0a:47:
2c:92:64:d2:83:d8:46:46:51:0a:fe:02:09:fa:5a:
8b:d7:e4:9a:54:32:02:d0:1b:3a:76:35:11:4e:36:
3a:5c:47:23:50:c6:c8:45:ec:47:66:df:d7:5a:ec:
9a:cd:af:7d:1a:dd:5f:e0:55:06:23:b1:cb:7e:cd:
e6:ba:9d:15:f9:e1:13:f5:aa:3d:4c:df:7f:8d:41:
d0:00:fc:37:90:ea:37:22:22:e2:82:23:48:94:a8:
e6:9b:2d:6e:69:d9:8b:68:69:7b:a8:9b:c5:68:36:
0f:ed:88:0f:a4:f8:e6:2f:ee:5f:a2:cb:93:81:aa:
52:21:85:03:e3:13:48:e7:65:04:52:d2:d1:ad:63:
f3:79:e6:0d:b1:ca:f4:ea:ba:c1:d3:ff:17:4a:c9:
60:e1:fb:09:4d:d2:0a:cd:a8:8d:67:00:31:61:ff:
61:11:52:01:d9:30:86:74:cb:1f:69:64:18:34:ec:
22:f2:68:e2:76:3f:43:50:eb:50:ce:57:a2:7a:c6:
6c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:34:17:DA:27:75:04:55:46:56:E4:98:E8:D3:6D:7C:35:E3:DE:B3
X509v3 Authority Key Identifier:
keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:83:2e:16:94:34:ed:41:fd:52:71:ff:ae:de:e6:05:f2:96:
d1:15:14:6b:ed:3d:26:0f:5a:7a:82:95:ab:75:e7:7a:31:6a:
b8:70:9d:1b:70:51:a3:fc:0d:e0:c9:82:e9:ee:d7:d9:d2:d8:
1b:a8:ae:1e:67:40:cd:f4:d8:a8:d4:d3:40:73:74:96:1b:66:
c4:39:25:2d:57:0c:e8:89:d9:8f:a3:97:1b:86:02:1f:a5:ce:
4b:5d:a6:d1:84:68:fd:54:32:74:49:f8:00:6d:9e:da:72:f1:
ea:d9:59:d4:54:22:d8:f2:48:c1:56:06:9c:65:36:be:0f:b3:
94:51:50:0a:b2:30:68:d8:bb:d3:7c:67:7e:fa:92:a8:fa:b7:
9b:55:a1:eb:15:b1:b2:89:c8:d0:88:b5:86:26:c6:a3:b2:52:
35:05:a6:b3:74:77:5e:ad:e6:b7:a9:d1:33:b6:ad:0d:2c:7c:
af:9f:8c:83:73:0f:ee:93:20:88:24:a6:0f:32:74:87:f7:a0:
b8:3a:a3:72:9f:23:81:65:bf:a3:8c:87:89:f1:f7:30:d4:20:
d4:5a:be:18:93:7f:36:14:e1:4f:e4:3c:26:4c:7e:6a:2a:ca:
44:6f:57:63:99:00:5f:50:a9:9c:b3:88:85:96:2e:a2:6e:a3:
a3:4a:c1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:40:42 2026 by rpki-client