Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
File: elsD4kg77RNDh7_DBHoTmJ_epB8.mft (raw, json)
Hash identifier: ko90saD3Da3JEAZusCCk0dEKJOadUQibrKIGDtCSbwc=
Subject key identifier: 01:65:A5:62:F5:98:06:CE:AC:BC:2C:9F:5B:32:AF:A9:9D:4D:F3:D1
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Certificate issuer: /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial: 01A0D983A03174100577DFF518E5C67AEA00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
Manifest number: 0AC9
Signing time: Fri 25 Sep 2026 17:01:16 +0000
Manifest this update: Fri 25 Sep 2026 17:01:16 +0000
Manifest next update: Sat 26 Sep 2026 17:01:16 +0000
Files and hashes: 1: 1jLJCus46gm-AStfLL9q2M5Ho3g.roa (hash: XrU3m/+eSwJdl/VMMh61KI+6fAsJ3/LwxcvviYIdgKo=)
2: QdrNcN-oAM5Z8NA93nywrdwjlpY.roa (hash: dR7J85RI6taLvzWRGM0v5+kdTnGBa4MyfOc9jNOLw3w=)
3: elsD4kg77RNDh7_DBHoTmJ_epB8.crl (hash: 7Jvpg2PnKBJ6DFskOHfouC3L6giBU98tMl0bfupl3Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:a0:31:74:10:05:77:df:f5:18:e5:c6:7a:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Validity
Not Before: Sep 25 17:01:16 2026 GMT
Not After : Sep 26 17:01:16 2026 GMT
Subject: CN=0165a562f59806ceacbc2c9f5b32afa99d4df3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2a:57:18:3e:ae:22:3f:7d:e9:d4:50:24:cd:
5d:ea:44:35:86:3d:54:12:6b:e2:40:d4:a0:18:ac:
35:f3:8c:c8:e6:28:a9:e5:6c:1f:71:ab:d6:06:d8:
ae:f2:87:e6:58:8e:e1:b1:21:2f:e5:8a:ab:0f:06:
f5:ee:9f:82:7b:10:06:58:df:cd:1e:22:68:1a:38:
ba:a4:f8:ab:0e:c3:b5:72:4a:5d:16:f3:d4:99:85:
08:24:0a:df:bf:ba:3b:fc:d9:17:31:32:ff:60:6a:
73:80:09:1b:78:91:9c:f5:d1:91:51:70:a6:bb:1e:
31:fd:ab:11:bd:1e:47:65:78:9f:e9:4f:2a:54:fc:
12:a0:19:93:fa:e4:1e:69:d2:d7:75:85:0b:69:f8:
59:e5:d0:98:de:46:30:af:c5:c2:46:e5:d8:d1:a7:
d5:85:7b:b9:96:17:9c:c4:4f:1e:88:62:8b:33:af:
b6:16:c6:85:cb:b9:ac:6f:26:a9:97:aa:7f:f8:27:
71:34:4b:69:bf:c0:a8:c4:65:7f:f6:30:db:4b:ff:
5a:14:db:16:d6:92:9c:cc:94:3e:c3:94:94:2c:b3:
9f:46:93:fc:3c:47:31:23:fe:3c:1a:7e:60:19:f0:
88:68:6f:ae:15:6a:d8:5f:65:2a:b0:ba:82:b7:53:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:65:A5:62:F5:98:06:CE:AC:BC:2C:9F:5B:32:AF:A9:9D:4D:F3:D1
X509v3 Authority Key Identifier:
keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:aa:1b:5c:3c:0c:ec:57:b2:0a:f2:fa:5d:53:a0:d4:d4:fd:
61:5f:1b:36:26:be:ec:dd:9e:2a:d1:72:e1:64:29:73:6a:45:
2e:fd:5d:e3:5c:ee:97:82:a8:37:19:9c:15:04:7d:91:15:f6:
e3:73:0a:6b:99:c9:45:94:92:b6:0e:2f:14:54:be:62:1a:22:
5e:6a:94:41:de:87:68:79:2f:cb:c3:bb:ab:1d:fb:0f:37:cc:
c2:0f:1e:f9:e2:92:c2:82:82:eb:df:4b:56:42:a4:b8:3d:06:
97:3d:a8:5f:60:9b:95:ea:86:06:e8:4e:b8:bf:98:0b:03:7d:
13:a3:8c:6c:59:38:a0:62:6c:b2:46:6e:3d:23:b8:b3:3c:9a:
80:59:fc:50:bf:de:15:fa:9e:cd:c4:b8:1a:bb:c1:9d:2e:d5:
6a:fb:6c:52:e7:96:a8:a3:7c:70:27:9e:de:f2:57:ad:79:2b:
eb:01:4b:f7:37:43:e1:54:45:1e:a8:c1:eb:df:fe:5f:c2:a4:
52:fa:fc:0e:47:e0:8f:1e:d3:15:1b:09:c7:af:be:46:c1:62:
eb:95:e5:09:b5:25:93:30:d7:ef:bc:58:43:29:bd:c7:a1:88:
8b:0c:f5:d9:c1:24:83:d2:15:17:51:68:a9:3b:2c:47:03:b4:
7a:de:d4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:30:29 2026 by rpki-client