Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: 4yAvp27Gc5o3c8tNfJC2EdRfVXgrSW0fYu4AF1oXu88=
Subject key identifier: 4E:5F:F3:E9:00:DF:97:95:74:BA:77:09:79:B1:4E:A5:33:2E:7E:28
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 019FAB9A60BA4F7678BD3E22B6A0D6E4FB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 1967
Signing time: Wed 29 Jul 2026 02:00:48 +0000
Manifest this update: Wed 29 Jul 2026 02:00:48 +0000
Manifest next update: Thu 30 Jul 2026 02:00:48 +0000
Files and hashes: 1: 03K81b7pfVVjypqVCITF7p4JxKM.roa (hash: PP40BChMOh4s2ABeNP+SORVGIO6bgC5+kty6waeJlqk=)
2: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: SWG8mvsDYVW71hSwdLma6GbSTGMbmI1Ok0KAJ75uSVY=)
3: kY0iPrlp2DFcIszfKgZ7jk3A9ls.roa (hash: B98fM5TLrUnwgXpz2kR4adHMCSlg8M1bTdaWmo1lkZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:60:ba:4f:76:78:bd:3e:22:b6:a0:d6:e4:fb:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Jul 29 02:00:48 2026 GMT
Not After : Jul 30 02:00:48 2026 GMT
Subject: CN=4e5ff3e900df979574ba770979b14ea5332e7e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:da:0f:1c:98:aa:9c:e0:e4:bd:e6:e4:3d:45:
ce:4d:a2:69:4c:f5:0d:48:33:bf:aa:47:42:8c:93:
b4:91:b2:8c:5e:61:e3:0b:3a:b9:6f:20:05:63:20:
4d:6a:84:22:0a:9a:74:0c:ff:54:9b:db:35:a3:a1:
72:08:97:91:2f:d5:0b:80:a6:8e:c0:2a:20:f4:07:
81:95:cc:fc:10:27:1c:68:f7:dd:33:14:d0:ff:7f:
0f:77:90:31:e5:22:aa:e4:5c:6a:a2:23:3e:fa:1f:
9f:c3:2c:31:50:2d:f9:08:4f:9f:88:75:d8:e4:bf:
69:f2:ee:6c:6d:1f:3a:e0:2a:3c:8d:dc:fa:53:c3:
2e:25:a6:41:91:10:30:32:77:27:16:10:68:9e:c4:
64:3e:77:3a:e5:30:44:e7:bf:3e:9c:46:5d:7e:da:
ee:81:b9:06:76:73:e2:1f:85:f3:b7:41:1d:7a:f8:
2b:cf:24:a5:2c:ba:63:49:12:0e:a2:75:ac:c0:38:
6f:a5:8b:de:d4:b8:e6:eb:dc:91:90:ab:ee:e5:30:
4e:55:a4:1e:f5:e3:8c:22:0e:a4:2a:86:9c:25:d5:
78:84:ce:fa:aa:ea:bc:9b:58:4f:39:14:ee:52:34:
8e:61:ee:68:b1:f8:08:fc:61:fb:68:8d:94:4d:63:
37:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5F:F3:E9:00:DF:97:95:74:BA:77:09:79:B1:4E:A5:33:2E:7E:28
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ee:df:2d:a4:98:1a:79:01:57:74:2a:28:00:5b:77:a1:37:
46:3c:8a:99:6d:25:b8:c0:74:42:08:d4:6e:21:5b:a1:7e:72:
a2:e4:ad:66:96:d3:48:5d:eb:1c:5e:73:0d:42:84:33:a1:2b:
d1:ed:2e:09:28:25:19:26:52:f4:59:59:ef:0b:67:0c:aa:cc:
11:97:6d:ae:d3:97:d0:81:bd:29:3d:58:b9:57:6f:ad:9e:ad:
57:52:48:83:33:5c:6d:88:79:07:e5:af:dd:8b:c8:19:ca:59:
6e:fa:25:46:f3:18:bf:28:60:d2:20:08:5c:34:24:e8:3a:91:
c2:22:98:fa:76:ba:bc:77:65:c8:ca:76:9c:dc:bd:ed:e9:b4:
34:b0:bd:3d:20:8d:10:e7:98:9c:77:8a:6f:8f:ab:9f:b7:9a:
87:49:d1:22:16:ad:8b:b9:5b:62:85:d8:09:fb:82:55:40:04:
15:1b:0f:20:b4:92:06:c3:b5:d2:ca:3c:e1:11:fa:f5:e6:13:
f4:20:9c:16:6d:0e:c2:02:32:86:bc:92:da:d6:fa:e6:e5:50:
16:f2:15:2d:c4:ba:fb:eb:dc:75:1d:a1:d2:0d:68:14:b3:63:
64:2e:35:31:46:35:a8:1e:af:3e:a4:0b:40:97:59:2b:5d:31:
c9:6a:fe:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:02:05 2026 by rpki-client