Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
File: EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft (raw, json)
Hash identifier: xlwEDN1qcE8O4x5VByBWvFWi0w4b2iOlNfiQxOC4n3s=
Subject key identifier: D1:1D:C7:F2:80:F6:E0:2D:B7:A8:B7:75:22:0F:94:6A:46:C2:89:08
Authority key identifier: 10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
Certificate issuer: /CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Certificate serial: 01A11DBFAC92A59AB30EC9893365E8B67A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
Manifest number: 1A94
Signing time: Thu 08 Oct 2026 23:01:03 +0000
Manifest this update: Thu 08 Oct 2026 23:01:03 +0000
Manifest next update: Fri 09 Oct 2026 23:01:03 +0000
Files and hashes: 1: B_eufKACcye9RNL9zWFuL3O0F2Q.roa (hash: u51nAFunJxaWbsLgaW5TM9elEVLvvbw93zNAlf1WyzQ=)
2: EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl (hash: iWqzxxaDD17Bd2jRcJcg25djurAuY4xHLaTkq2kSYRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 22:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:bf:ac:92:a5:9a:b3:0e:c9:89:33:65:e8:b6:7a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Validity
Not Before: Oct 8 23:01:03 2026 GMT
Not After : Oct 9 23:01:03 2026 GMT
Subject: CN=d11dc7f280f6e02db7a8b775220f946a46c28908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:42:c6:14:f3:c7:df:63:4d:a7:10:1e:0c:28:
95:36:9d:2b:10:4e:f6:e7:83:a8:f7:4f:87:38:09:
76:67:12:01:55:8d:fc:33:c1:a3:d3:9d:9e:86:39:
41:e4:2a:03:0b:a8:d9:92:14:97:08:f0:e1:ea:a2:
fe:48:10:b6:6c:60:04:aa:1b:41:d5:f2:d0:fa:5f:
61:ba:61:15:bd:84:ab:a1:9b:ad:5f:73:37:cf:56:
1a:47:79:00:26:63:1f:43:89:8b:f6:e4:36:66:8c:
86:3f:15:4a:b2:f2:f8:0e:84:30:cd:4a:4a:f2:eb:
34:b5:0f:f5:8d:87:34:c2:38:bf:5b:5f:53:44:71:
aa:4c:d5:0d:4c:86:06:22:36:09:a9:7e:62:86:ac:
fc:16:3d:40:4e:1a:28:d2:0a:5e:fe:0c:4d:1a:ee:
fb:bd:4e:ba:9c:95:fe:2e:a4:ee:71:d9:85:c4:d8:
23:33:1e:e0:14:c5:8d:ee:ad:e7:17:67:3b:a6:85:
db:73:03:c1:57:6b:39:dc:99:48:28:9c:23:39:df:
95:a1:9f:27:db:27:4b:b4:ab:8e:4e:3d:09:5f:fa:
dc:49:d8:05:03:1f:cc:a0:83:5c:56:bb:0f:79:ef:
5f:9e:8a:45:3e:92:18:6f:44:05:5d:b9:9f:3d:95:
fe:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1D:C7:F2:80:F6:E0:2D:B7:A8:B7:75:22:0F:94:6A:46:C2:89:08
X509v3 Authority Key Identifier:
keyid:10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:75:93:77:5a:16:bd:fe:f0:03:3b:32:24:90:bb:35:4e:2b:
93:5a:81:9f:3c:63:c6:49:aa:e2:f1:db:9c:81:68:cb:47:1f:
c0:f8:2d:64:9f:e3:97:69:e9:3a:13:c5:d0:a8:9d:42:a6:ae:
e5:8b:c0:46:f1:ab:30:74:0e:40:08:71:9f:03:0f:ab:a1:92:
79:71:f2:64:50:df:95:fd:81:33:18:44:79:d7:6f:ae:35:fd:
46:97:9c:44:14:01:1f:ee:82:e4:90:ff:5d:58:da:f4:62:6b:
2f:2f:39:c0:c2:72:a5:90:1f:68:8a:a1:66:39:3d:81:67:e5:
59:69:ba:19:35:fc:4f:f0:47:38:0b:30:e8:ab:5a:05:11:af:
30:77:71:5b:a4:75:c6:23:e9:23:cf:a1:56:01:d6:56:40:6c:
fd:8b:71:0a:ab:b5:02:ab:e2:d9:4f:9f:8c:32:dd:f5:9f:3f:
33:c1:00:79:26:8d:c5:de:f1:72:ec:30:6f:41:0f:cc:bd:36:
e1:96:50:d3:15:b8:bf:2c:b2:e2:17:6a:2d:cd:53:6e:a7:44:
5f:3e:87:34:f5:e4:ac:7f:76:3b:0f:8e:8e:43:a9:d8:74:77:
c5:8c:be:2f:d0:27:df:bb:54:cd:3d:a6:d5:51:48:99:cb:42:
60:c1:63:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEdv6ySpZqzDsmJM2XotnpdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwN2E1YWYxOTZiOGEwZWE5NjBjMjhmNmIzZTc1MjkxYzdl
ODYxY2QwHhcNMjYxMDA4MjMwMTAzWhcNMjYxMDA5MjMwMTAzWjAzMTEwLwYDVQQD
EyhkMTFkYzdmMjgwZjZlMDJkYjdhOGI3NzUyMjBmOTQ2YTQ2YzI4OTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ULGFPPH32NNpxAeDCiVNp0rEE72
54Oo90+HOAl2ZxIBVY38M8Gj052ehjlB5CoDC6jZkhSXCPDh6qL+SBC2bGAEqhtB
1fLQ+l9humEVvYSroZutX3M3z1YaR3kAJmMfQ4mL9uQ2ZoyGPxVKsvL4DoQwzUpK
8us0tQ/1jYc0wji/W19TRHGqTNUNTIYGIjYJqX5ihqz8Fj1AThoo0gpe/gxNGu77
vU66nJX+LqTucdmFxNgjMx7gFMWN7q3nF2c7poXbcwPBV2s53JlIKJwjOd+VoZ8n
2ydLtKuOTj0JX/rcSdgFAx/MoINcVrsPee9fnopFPpIYb0QFXbmfPZX+JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEdx/KA9uAtt6i3dSIPlGpGwokIMB8GA1UdIwQY
MBaAFBB6WvGWuKDqlgwo9rPnUpHH6GHNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhwYThaYTRvT3FXRENqMnMtZFNrY2ZvWWMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iYjIzZTEtNDZjYS00NjRhLWIzZjIt
ZjkyOWUyNTUxNjI3LzEvRUhwYThaYTRvT3FXRENqMnMtZFNrY2ZvWWMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9iYjIzZTEtNDZjYS00NjRhLWIzZjItZjkyOWUyNTUxNjI3
LzEvRUhwYThaYTRvT3FXRENqMnMtZFNrY2ZvWWMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXWTd1oW
vf7wAzsyJJC7NU4rk1qBnzxjxkmq4vHbnIFoy0cfwPgtZJ/jl2npOhPF0KidQqau
5YvARvGrMHQOQAhxnwMPq6GSeXHyZFDflf2BMxhEeddvrjX9RpecRBQBH+6C5JD/
XVja9GJrLy85wMJypZAfaIqhZjk9gWflWWm6GTX8T/BHOAsw6KtaBRGvMHdxW6R1
xiPpI8+hVgHWVkBs/YtxCqu1Aqvi2U+fjDLd9Z8/M8EAeSaNxd7xcuwwb0EPzL02
4ZZQ0xW4vyyy4hdqLc1TbqdEXz6HNPXkrH92Ow+OjkOp2HR3xYy+L9An37tUzT2m
1VFImctCYMFjEA==
-----END CERTIFICATE-----
Generated at Fri Oct 9 02:17:03 2026 by rpki-client