Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
File: ezhehhZ9XMwi_YWJJWCudgtfKJg.mft (raw, json)
Hash identifier: W+nHjBz0vSrIx2CR6Kx4gYGUqP52VAWCIXfwtnZzQC0=
Subject key identifier: F4:BE:FA:C2:CC:B6:FE:74:CC:0D:A5:73:56:BC:C1:6A:8C:B0:1F:A7
Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
Certificate issuer: /CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Certificate serial: 01A0CB2248D602A193BC663057740F3C9A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 22:00:16 +0000
Manifest this update: Tue 22 Sep 2026 22:00:16 +0000
Manifest next update: Wed 23 Sep 2026 22:00:16 +0000
Files and hashes: 1: Az-iHkJejR0VdZYNnzrlZuh1_DI.roa (hash: sKSrtLFKb8T7tzu/qrkRHr+dbwySR1WM0V46K4Zjtg8=)
2: QBz4vHPmaaMrots9J1TfiJn6g8U.roa (hash: 1zuHsD0Vu63nJy0iEzu4F0kzfYEsfd1yuIUMu7fViHM=)
3: dr4ERfRqn_ghQRIttdnBh9fXjas.roa (hash: uHaHOk9OGRVoN05Lx2H15zjg2EWZadYEAqhzWiPC/Ak=)
4: ezhehhZ9XMwi_YWJJWCudgtfKJg.crl (hash: 3I2q68H9C9qx94tTAydo3uLhk9IJF9d0J7teVzT33Xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:48:d6:02:a1:93:bc:66:30:57:74:0f:3c:9a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Validity
Not Before: Sep 22 22:00:16 2026 GMT
Not After : Sep 23 22:00:16 2026 GMT
Subject: CN=f4befac2ccb6fe74cc0da57356bcc16a8cb01fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:3b:e1:2c:c9:02:94:97:a3:63:2f:ac:50:
83:fd:4e:8d:c6:5c:c7:63:50:9e:85:85:91:df:4b:
bf:71:e0:91:3b:8e:10:f1:3a:c4:70:c4:3d:d7:37:
2f:5c:5e:55:13:b5:5f:4a:83:51:47:20:8e:c7:4f:
59:da:b1:fd:84:c4:c5:3d:fc:c6:1c:50:7b:5b:6b:
01:fe:a8:4a:5c:a3:96:8a:3c:53:60:69:25:99:41:
7a:c3:8b:84:88:58:e7:89:5a:52:da:6d:db:e8:d8:
d4:18:20:d1:24:20:72:7e:48:93:61:d8:8a:f1:59:
21:79:1e:f5:a1:ae:bd:17:cf:16:2f:72:50:7d:4f:
c2:21:ef:8c:46:6e:f2:c4:b6:ec:21:e1:d8:5d:cd:
51:74:73:6c:31:2c:5f:f9:55:2b:85:f4:18:b9:44:
45:31:f4:bd:f2:34:f6:15:b5:c7:6b:9a:8a:dc:3b:
97:2c:23:79:cf:04:e2:f9:c1:f9:d3:bf:04:ad:2a:
fd:e6:88:06:85:76:1f:7a:6f:2a:73:2d:fe:6d:84:
c7:bf:f1:d9:b0:d1:b3:b0:21:9e:b1:68:d5:b7:08:
90:b7:b9:2b:4f:c2:24:0c:f0:24:62:60:26:48:d2:
82:aa:ae:81:ce:04:d0:57:b2:d8:0c:68:6c:01:f5:
13:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BE:FA:C2:CC:B6:FE:74:CC:0D:A5:73:56:BC:C1:6A:8C:B0:1F:A7
X509v3 Authority Key Identifier:
keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:0f:fd:90:8e:f8:72:1d:33:75:37:4c:7b:c3:1f:65:ca:2b:
09:73:70:6d:f2:60:86:19:1a:86:5e:04:c2:31:9e:d6:01:c5:
67:98:b9:b1:a9:14:e9:6d:c2:e6:27:06:7c:d8:aa:a5:96:d8:
e6:33:e7:2f:61:09:b4:5b:35:d0:6f:42:3b:59:92:cf:24:7d:
4d:28:8c:ae:16:16:d4:9c:66:c1:b9:91:2d:30:a5:16:1a:0d:
0b:0e:33:a6:f1:7b:cf:d5:33:1d:70:c7:e5:44:c4:d4:49:67:
21:4e:40:22:ef:2f:13:5f:ee:79:42:a3:0e:c6:13:b3:c1:b8:
28:97:f6:a6:5d:4c:31:f6:68:c9:c3:dd:3a:2b:46:3e:cb:7e:
64:6f:a2:11:5c:bc:9e:11:47:19:0d:7a:90:70:a4:ac:e4:8a:
d2:de:de:88:4f:b6:52:97:76:f4:fb:1a:e4:f3:5e:87:16:ef:
04:a3:94:9c:99:cc:07:d0:94:94:6f:2e:4d:b8:aa:85:07:1a:
66:f0:fa:b6:84:05:a1:4b:ca:c8:cc:a7:b7:ec:33:a8:33:ad:
aa:7b:2a:ca:d5:24:61:15:d0:8e:d9:44:bc:75:36:6a:72:e8:
58:e9:bc:fc:2c:be:6b:70:27:8e:ed:4d:d9:46:d7:af:0d:fc:
91:d8:ab:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:35:36 2026 by rpki-client