Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
File: E_hJa3nRwE0IKvg_G-al6rDGYIk.mft (raw, json)
Hash identifier: Wg6WPeUtzEighTcqCEuDj/e0TrCEEsmZJU9X8k2pqzg=
Subject key identifier: 2D:5B:89:14:0D:92:EF:14:4E:BD:14:DA:6E:D4:64:BE:07:AA:86:33
Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
Certificate issuer: /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Certificate serial: 01A0DA5FBE645461333B64DDB0EF45F0B7A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
Manifest number: 1A7B
Signing time: Fri 25 Sep 2026 21:01:42 +0000
Manifest this update: Fri 25 Sep 2026 21:01:42 +0000
Manifest next update: Sat 26 Sep 2026 21:01:42 +0000
Files and hashes: 1: 0-jMAvh0Spb5-xmRErQMwSZjKoM.roa (hash: +jeSUtpRT2LXECnK0ZPglZoRmjktcmKAgTbcZjeh29w=)
2: 5VOVi1zMcl_Rbz5StE6dbYv6zCM.roa (hash: 3HB3Pm/gwM+qHx/iqgvsnkZiNMNHUAb9tRWCmqy13kA=)
3: E_hJa3nRwE0IKvg_G-al6rDGYIk.crl (hash: L81a3ele/rZfzJs+kqsznHdUrkPkwQcwbdEkRS5k6LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:be:64:54:61:33:3b:64:dd:b0:ef:45:f0:b7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Validity
Not Before: Sep 25 21:01:42 2026 GMT
Not After : Sep 26 21:01:42 2026 GMT
Subject: CN=2d5b89140d92ef144ebd14da6ed464be07aa8633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:18:10:8a:49:94:d2:bb:51:74:87:85:f3:
ee:10:87:b8:bb:2c:95:01:f8:af:69:4e:17:0a:f9:
ce:67:e5:50:44:1d:7c:7c:1d:21:9c:34:86:7a:c6:
42:de:e0:54:87:40:e6:fc:b5:03:94:5c:26:b9:8a:
56:76:e5:cb:9e:16:b3:7c:44:6c:d4:9b:5c:c9:64:
32:b5:21:1b:13:7b:a4:22:03:05:77:d7:af:9a:75:
90:1c:70:f1:81:a7:ab:4e:05:ba:a5:f1:3a:a8:1a:
cd:64:15:4b:22:a7:07:41:5d:62:c4:57:a1:63:eb:
93:75:67:de:6d:3b:4f:74:44:e3:0f:7b:b9:49:4f:
15:89:bc:f2:f9:78:05:c7:d4:63:42:d7:f9:d8:d4:
91:2f:ba:b4:cb:d4:39:d6:85:08:82:35:dc:cf:ea:
87:d3:3a:dd:36:40:28:8b:cd:1f:29:52:41:d6:af:
43:6d:9e:02:61:fa:c4:4d:67:0f:7c:de:c0:4e:d6:
65:2b:7a:1c:bb:65:da:39:04:9e:2f:f2:b6:fa:82:
94:c5:cd:a6:c3:19:59:69:c4:75:5c:d5:89:15:07:
ae:e0:1b:ef:c6:f3:41:e7:2c:0f:d3:09:52:f5:9f:
c7:ad:1c:6d:1d:70:54:f8:37:25:46:e9:34:93:df:
a6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5B:89:14:0D:92:EF:14:4E:BD:14:DA:6E:D4:64:BE:07:AA:86:33
X509v3 Authority Key Identifier:
keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:08:a5:e0:e5:8e:fc:ff:d7:de:a3:a0:b4:09:5c:15:e9:7a:
53:5c:05:23:54:89:15:cf:83:d3:ab:03:6f:73:6b:85:57:e7:
02:47:11:4f:a4:c7:0c:1a:7b:e7:b4:93:c2:98:b4:18:06:c2:
59:79:1e:b8:57:e9:b8:c1:30:13:ee:ce:9b:51:9c:2c:01:0e:
2d:12:2f:26:63:5b:a4:a7:8f:c8:28:98:21:3c:0a:3b:2f:95:
62:b4:d6:cd:c3:11:c9:32:ea:5a:ef:9a:78:68:2c:e6:81:e5:
2f:30:d4:14:31:f5:25:b2:03:43:93:64:87:62:a0:bf:d3:8b:
0b:2d:74:ca:39:c6:cf:94:ed:61:88:82:94:de:e0:26:08:13:
54:e5:9e:26:b8:63:58:75:be:70:c9:d1:3b:24:47:26:25:20:
6e:f0:37:63:97:4e:70:3a:30:8a:50:9b:28:77:4d:99:dc:fa:
b1:f3:24:91:ab:ba:e6:49:84:9b:c6:92:5a:22:e3:9a:bb:81:
ba:23:71:6c:60:02:9a:eb:c8:d0:8b:d8:65:bc:a4:cb:e9:81:
27:16:59:ab:ac:90:38:7b:8e:f6:b3:b0:36:0c:8c:07:b3:51:
fc:9f:d7:54:94:cc:6d:61:1f:e1:be:69:36:93:7a:2d:e1:45:
d3:78:14:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:49:12 2026 by rpki-client