Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
File: eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft (raw, json)
Hash identifier: rvgq4MHjWy/ddblbOj343d8Taxff12SppqX4jECoVO4=
Subject key identifier: 90:13:16:81:4F:61:84:BB:56:44:6B:DA:D5:DD:C1:B3:E7:AC:D9:08
Authority key identifier: 79:A4:B1:FB:BA:D1:CB:6A:8B:1C:7D:33:73:7A:D7:2B:CD:9B:8D:9D
Certificate issuer: /CN=79a4b1fbbad1cb6a8b1c7d33737ad72bcd9b8d9d
Certificate serial: 019FA74F926E2E94F1FB9E648BEE95F9E7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
Manifest number: 0205
Signing time: Tue 28 Jul 2026 06:00:37 +0000
Manifest this update: Tue 28 Jul 2026 06:00:37 +0000
Manifest next update: Wed 29 Jul 2026 06:00:37 +0000
Files and hashes: 1: MHfXLodJ1lTLubHBUzEu-y-nQd8.roa (hash: v+heG+utge9KSHpg0rUF2i0HpIa/3KcrihN3fHNBOZo=)
2: ad2pJPLMCY9-MtsOQUWfkJzvGjk.asa (hash: znBGDedW1a6RheuPxFAgpjdNY4UU36DMoXaL/AWeESU=)
3: eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl (hash: nVAgkz6sD36pu5Bchw0PmCd92PUkpumoVJIZOdI9sac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:4f:92:6e:2e:94:f1:fb:9e:64:8b:ee:95:f9:e7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a4b1fbbad1cb6a8b1c7d33737ad72bcd9b8d9d
Validity
Not Before: Jul 28 06:00:37 2026 GMT
Not After : Jul 29 06:00:37 2026 GMT
Subject: CN=901316814f6184bb56446bdad5ddc1b3e7acd908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:a4:11:72:2e:2c:a3:e2:ad:a3:ea:72:7b:
46:a8:2a:4b:11:4d:29:af:30:d7:e6:55:36:25:6f:
d9:a9:c0:c4:37:91:04:90:48:6b:5a:b9:1c:46:f9:
5d:c7:29:5c:f0:f7:30:f9:b2:bc:ce:0d:03:93:d7:
14:82:4e:69:98:6f:8a:f7:20:e7:ad:ff:72:5f:8f:
58:67:f5:47:f4:11:9b:fb:4b:87:73:30:93:b4:cc:
84:81:31:ae:c6:b3:3b:9d:f5:70:00:49:52:28:11:
f8:f9:01:b2:dc:84:22:bc:c9:ce:06:2f:cd:01:c2:
21:14:9b:09:d8:b9:03:50:69:3c:75:b2:a3:7a:60:
7a:35:2b:e9:3a:7a:d0:c8:20:da:ce:f9:f4:bd:c6:
e4:01:1d:80:20:b2:43:30:61:f2:4c:fe:67:74:ea:
3d:33:a3:72:5f:4d:ae:c0:dd:4e:da:e8:6c:04:fb:
9e:14:dc:7b:b6:c4:7a:01:f3:e4:d6:60:1a:d4:14:
12:9a:1d:f0:55:33:28:e7:99:fd:82:66:2b:51:94:
0c:2d:a6:8b:f7:66:89:5d:74:64:ad:52:32:59:ce:
7e:d2:1b:00:45:9e:f6:d5:7a:83:65:d0:04:bd:2c:
8a:f9:b8:51:f8:80:68:a9:ff:2a:f6:d2:62:80:50:
1c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:13:16:81:4F:61:84:BB:56:44:6B:DA:D5:DD:C1:B3:E7:AC:D9:08
X509v3 Authority Key Identifier:
keyid:79:A4:B1:FB:BA:D1:CB:6A:8B:1C:7D:33:73:7A:D7:2B:CD:9B:8D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:69:83:59:86:3e:df:70:d0:08:6f:95:c2:ee:43:e1:7d:be:
7a:4a:ff:d8:88:aa:99:ad:07:1e:a3:44:5d:3c:ae:72:30:4f:
12:80:57:fd:dc:c6:59:06:1f:c9:0c:c8:da:49:4e:00:02:28:
61:7d:50:05:e6:73:5d:1b:9e:fe:c8:17:a7:b8:92:e6:35:6d:
40:84:16:5e:3a:f3:44:23:05:46:c1:75:c4:a5:ce:30:e4:11:
e4:15:f6:19:1b:99:bb:aa:32:0b:38:97:7d:b3:99:73:4c:c4:
89:8c:40:b7:92:a9:c7:9d:01:d5:01:87:11:36:09:f4:1f:a7:
01:7e:06:85:86:0b:fe:f7:7b:e5:43:02:19:0d:02:79:16:e9:
b4:29:90:80:2f:23:c8:ba:7c:51:15:05:89:cb:a7:a0:a9:75:
96:37:b8:56:ca:f3:c4:ac:74:33:44:64:ad:0e:37:33:e8:2d:
db:a6:b2:c1:77:73:b3:ad:fd:62:15:c7:b8:a1:ae:89:12:50:
2e:19:96:49:88:ec:d8:1a:ef:08:f5:38:8a:f1:98:4d:37:ac:
7b:61:88:47:9b:db:32:1c:ae:70:41:62:86:d6:a9:88:74:e0:
34:a8:1e:48:46:12:a8:d3:73:c5:63:b1:1f:4b:f2:cb:5c:8d:
f8:68:f5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:46:25 2026 by rpki-client