Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: drYbxGWLhqCte6l1uJ1lvntyHm7TWUzmnCckfD4Cy+k=
Subject key identifier: F8:B3:40:B3:C7:EE:62:1A:6B:FA:8F:41:B4:1E:4C:58:E3:F6:24:E4
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 01A0D315203EBC7A0D2A09CE30155B612B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 1A00
Signing time: Thu 24 Sep 2026 11:02:52 +0000
Manifest this update: Thu 24 Sep 2026 11:02:52 +0000
Manifest next update: Fri 25 Sep 2026 11:02:52 +0000
Files and hashes: 1: 03K81b7pfVVjypqVCITF7p4JxKM.roa (hash: PP40BChMOh4s2ABeNP+SORVGIO6bgC5+kty6waeJlqk=)
2: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: 3JGhx2nuz4gN601Jfy/vrIOsK3L7qu3Dz0aESMeVUu4=)
3: kY0iPrlp2DFcIszfKgZ7jk3A9ls.roa (hash: B98fM5TLrUnwgXpz2kR4adHMCSlg8M1bTdaWmo1lkZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:20:3e:bc:7a:0d:2a:09:ce:30:15:5b:61:2b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Sep 24 11:02:52 2026 GMT
Not After : Sep 25 11:02:52 2026 GMT
Subject: CN=f8b340b3c7ee621a6bfa8f41b41e4c58e3f624e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fa:47:27:5c:af:f9:8d:05:2b:b1:11:53:af:
e0:db:dc:20:36:19:76:a9:66:f4:48:c9:8d:6b:22:
44:cf:21:1f:72:6c:e7:9c:d1:f1:ac:97:cd:f2:c1:
be:fc:3e:d1:70:e0:9d:41:e0:42:41:a8:59:82:d4:
10:b5:ba:79:3b:c5:f9:2f:cc:b6:1e:87:ce:ef:04:
b0:0b:21:2c:90:ec:45:bc:03:0f:f1:ca:b1:e6:0c:
3b:ee:c2:a6:23:df:4d:7b:cf:1f:f0:3e:9b:b1:5e:
81:2c:44:8e:f8:de:bd:30:c5:51:2f:48:fc:9d:a9:
c5:a5:13:08:cb:54:16:be:c7:a5:be:25:e9:e9:33:
43:e9:a4:a6:8e:a9:31:7a:4e:fb:99:72:22:79:e2:
c6:40:22:b5:c8:2d:6b:97:03:80:ce:71:77:41:dc:
46:b4:f4:99:09:fc:30:2f:ba:17:c2:7d:0f:95:67:
9b:43:c1:ce:80:91:39:c6:9c:73:ff:d0:49:9b:15:
b5:91:e3:e3:db:c5:1d:3b:43:af:d7:53:7e:d4:79:
ed:ca:ed:e1:fa:bf:09:95:57:d0:7a:fd:27:a5:9d:
5a:9a:d1:bd:7d:61:00:bb:75:eb:6a:cc:0e:71:1b:
94:ec:41:10:e5:76:b8:2d:75:75:70:0a:5c:6b:50:
b9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B3:40:B3:C7:EE:62:1A:6B:FA:8F:41:B4:1E:4C:58:E3:F6:24:E4
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8f:18:76:d0:3c:75:8f:4d:2c:12:bf:fd:51:a2:dd:60:5d:
64:60:40:11:6e:96:27:3a:c3:16:de:20:3e:bd:56:13:42:63:
94:08:58:50:95:df:ec:c0:cb:22:c9:e5:d7:cb:1b:8f:d1:a6:
07:fa:31:c1:bc:fe:e8:16:7c:ef:14:b4:f5:83:b3:11:8e:a7:
d4:0d:3e:20:db:3c:0e:c7:1a:eb:ac:78:32:ec:d7:6f:e9:7d:
5e:c0:cb:c1:d5:9f:0c:b7:b0:c6:12:24:3c:8d:f3:25:d6:32:
9f:84:cf:60:e7:5c:4d:da:11:03:d4:6e:e7:0a:87:26:d4:3f:
5b:8d:3f:87:bd:37:e7:b1:b4:e0:05:68:56:f7:24:59:4d:c3:
fc:20:d3:74:f9:fc:9d:f4:ca:b0:3f:e8:bb:84:08:8b:4a:81:
32:8d:09:dd:b7:fb:90:c1:fa:97:31:2b:1a:e7:7b:51:4b:5e:
2a:3a:ed:92:ef:6f:5a:59:fa:da:ee:8e:7a:34:a9:e8:3a:2f:
94:89:a3:dc:bd:9a:4b:f2:47:ef:39:c2:82:0f:17:6a:55:36:
a5:00:2b:7b:1e:58:37:56:93:8a:04:93:e8:03:ad:e7:79:69:
9b:f3:cc:d9:44:02:04:a3:c3:91:ba:a1:7d:18:bf:5e:a3:00:
47:29:9f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:46:11 2026 by rpki-client