Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
File: eKwxY10JG-YVV0MxH-HbfHrzR3s.mft (raw, json)
Hash identifier: UYfsicif+b8d53yYY25rC3zJgN7UwhMYlwE3n+FjYyU=
Subject key identifier: 73:44:44:73:AC:1A:EB:93:C7:28:17:45:0F:91:17:4B:52:CA:69:AE
Authority key identifier: 78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
Certificate issuer: /CN=78ac31635d091be6155743311fe1db7c7af3477b
Certificate serial: 01A13C375DAB162F00468A700AF4C0FC6E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
Manifest number: 0EFD
Signing time: Wed 14 Oct 2026 21:00:23 +0000
Manifest this update: Wed 14 Oct 2026 21:00:23 +0000
Manifest next update: Thu 15 Oct 2026 21:00:23 +0000
Files and hashes: 1: VTBtuhupQkN3XNWCGG-SctrmNSc.roa (hash: MVRP12soTEVvkQMP4sWQe+ZD2ED7nGpPqffJ2oNbKlE=)
2: Yx6WCtdaJX-lZhNYpyoP3qTRTWA.roa (hash: SA4NVslryO/GKYfRH6uU7OXQ/zmv533QvWL9j3NGE/I=)
3: eKwxY10JG-YVV0MxH-HbfHrzR3s.crl (hash: QsveUuw7FcfvhD4RRvDgVMlrCyeidKuQo3EVyipAJ60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:37:5d:ab:16:2f:00:46:8a:70:0a:f4:c0:fc:6e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ac31635d091be6155743311fe1db7c7af3477b
Validity
Not Before: Oct 14 21:00:23 2026 GMT
Not After : Oct 15 21:00:23 2026 GMT
Subject: CN=73444473ac1aeb93c72817450f91174b52ca69ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5c:f9:53:f9:0a:55:10:be:83:36:8e:82:fd:
61:a6:06:9d:9c:3b:f1:53:3b:df:6e:35:62:e4:5e:
ab:b0:ae:9e:7c:d0:f2:3a:87:09:d3:58:4c:ec:05:
d4:c2:dd:98:7d:dc:44:e8:57:36:ba:59:70:6c:51:
a9:a1:0a:9e:96:1d:66:f5:a8:1e:e0:4e:65:55:db:
fe:87:1e:b2:83:19:f6:73:d8:a6:67:42:e4:a6:86:
f1:de:f8:b9:90:85:ca:5e:a0:c9:11:5e:f5:ab:92:
47:95:19:dd:c1:56:2a:43:1f:94:da:dd:77:83:bb:
f5:5e:66:37:5b:b8:7a:79:e3:03:2c:ca:92:83:4d:
77:42:1d:93:8a:b0:37:29:29:b1:a3:16:54:8b:d4:
3d:87:ac:cd:bc:75:d5:d3:75:45:c2:d5:74:2b:4c:
79:95:b8:9b:3a:b1:e0:18:46:0f:f6:91:4f:0b:f6:
08:0c:03:82:a5:f7:81:5b:ad:7c:be:0e:0a:18:b3:
48:11:ff:e6:0d:45:e7:1f:45:c1:9a:ca:87:9d:0c:
81:13:06:05:eb:b1:a0:93:71:c4:bf:08:a9:d9:1d:
c9:69:3e:a8:eb:a1:ef:5a:e2:cb:2f:6d:88:17:7b:
67:dc:44:b8:a4:2d:d5:2e:02:eb:95:79:6d:11:e8:
02:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:44:44:73:AC:1A:EB:93:C7:28:17:45:0F:91:17:4B:52:CA:69:AE
X509v3 Authority Key Identifier:
keyid:78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:87:79:24:71:b2:a7:49:db:87:18:ca:49:2b:48:d8:e7:a5:
de:75:3a:9b:32:a4:a1:c5:a9:f6:e1:71:bc:bc:61:5c:dc:53:
60:f1:35:24:b1:16:50:9f:7b:e2:6b:70:d2:0a:6e:0f:4a:f2:
2c:f6:10:0c:9a:19:e9:2b:df:5f:0b:09:0d:8b:e0:5c:a6:96:
67:8a:e9:8a:32:7f:c7:7c:f6:fb:9d:82:ef:c3:d1:4b:56:7b:
51:8a:e8:41:5b:8b:c4:91:5d:9a:ac:bc:f5:31:0a:1c:78:0f:
59:77:e8:1b:aa:c9:3e:57:d2:03:c0:75:9d:c0:c9:48:77:ff:
61:70:f8:cb:15:db:cd:f9:4c:1e:98:19:fe:a3:65:40:23:5e:
8b:ba:54:0a:e4:3d:1d:5f:e5:8c:02:ad:e7:ab:a8:57:29:6e:
0e:ff:2b:f4:6a:cd:6e:9a:77:79:13:fa:9a:80:07:6b:d5:75:
81:b8:57:e5:d3:5b:5d:d1:33:e4:21:fc:24:3b:57:ee:5e:78:
be:c9:8c:78:3b:60:29:90:8c:c7:22:b8:27:d5:b3:0a:cb:3d:
7b:f4:c4:87:1b:7a:ca:ab:97:bf:1d:2c:01:8d:aa:91:17:f7:
1c:1f:e3:b6:af:4b:89:2a:c6:39:e5:52:3a:40:88:f6:21:0a:
11:d5:ce:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 08:11:56 2026 by rpki-client