Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
File: eHnrndYtUa-lAS76Gp0QxmQAxEU.mft (raw, json)
Hash identifier: KoQQELPMr3cVEgVV3+aqYzy0HjWcgfNsSrx3Phtv9Yk=
Subject key identifier: 68:57:64:D8:37:C9:C5:5F:38:EF:4E:1A:77:CD:71:08:1C:BC:A4:3F
Authority key identifier: 78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
Certificate issuer: /CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Certificate serial: 01A1DDCBAB6D44E52499EA83307729BA315A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
Manifest number: 1AFB
Signing time: Sun 15 Nov 2026 06:01:14 +0000
Manifest this update: Sun 15 Nov 2026 06:01:14 +0000
Manifest next update: Mon 16 Nov 2026 06:01:14 +0000
Files and hashes: 1: eHnrndYtUa-lAS76Gp0QxmQAxEU.crl (hash: RkVX+Q1BOkmn+Lm0b1/kjryKYuHf9tcLdZswXF/RzUQ=)
2: u20Y3FANdfmda1Xtsnh_0s435JM.roa (hash: S9BpRBE4oWaa9W/9qIMquDTbVfqR1JKGeq8wj5z0rN4=)
3: w2BN5Okc8CAi7WJd5D6lCmGLa9o.roa (hash: U6ZbAgCOETb02sjUGl8fc/vrWrB/9CMYg74fhgDMPO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:ab:6d:44:e5:24:99:ea:83:30:77:29:ba:31:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Validity
Not Before: Nov 15 06:01:14 2026 GMT
Not After : Nov 16 06:01:14 2026 GMT
Subject: CN=685764d837c9c55f38ef4e1a77cd71081cbca43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e6:b9:92:89:15:ad:08:03:af:52:cc:3f:70:
83:7a:25:78:a0:88:a2:06:d4:a5:7a:4a:bc:e9:be:
ca:f5:f2:26:da:0c:3f:65:44:db:33:ca:75:32:f2:
26:43:c6:6a:53:b2:69:2c:7a:fb:3c:19:16:09:00:
f8:36:59:55:ff:2f:5c:5b:6f:f3:e4:75:63:6a:e8:
ea:ce:23:bd:d6:7c:40:90:3a:cd:4e:54:ec:ac:e5:
c5:9e:ab:c0:85:a6:4e:b3:82:cc:7c:c5:e7:20:b0:
1b:b7:c4:45:31:0a:bf:f1:b3:f5:06:0e:56:5b:b0:
bb:b8:88:18:06:5c:c6:32:77:2d:f5:5a:21:3f:6a:
40:ca:3d:88:ed:9e:b6:47:e2:85:5e:1e:67:ef:a5:
52:6d:5d:cb:96:7a:56:61:89:b9:ee:91:03:57:8b:
24:62:dd:84:65:a7:ec:50:ec:e5:9d:ee:6c:9d:72:
88:1a:07:f9:bd:db:c9:bf:07:56:0b:f5:04:bc:ea:
74:3d:79:08:fb:20:1f:08:fa:08:c2:05:d3:e9:e8:
34:7d:a3:88:ba:86:88:65:12:b5:b8:dc:b4:51:86:
44:04:d4:91:55:f7:e8:e4:76:5f:a6:f2:03:f4:16:
38:2c:b3:8a:bd:b6:25:e3:34:86:11:e6:8f:59:87:
ff:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:57:64:D8:37:C9:C5:5F:38:EF:4E:1A:77:CD:71:08:1C:BC:A4:3F
X509v3 Authority Key Identifier:
keyid:78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:87:a0:00:12:1b:af:f2:6c:24:0c:81:74:3d:cb:50:a2:01:
b2:8c:d6:a9:e3:3c:53:b9:35:22:11:20:51:35:74:a6:1e:de:
e9:0f:07:1a:c4:56:53:c8:f0:98:8e:2b:95:7f:4f:2d:b2:a8:
b9:90:bb:8e:68:f8:cc:91:16:de:7e:24:e7:89:36:29:28:d3:
4d:a1:45:ad:27:23:ac:e3:70:cd:e5:e1:cf:62:68:4a:87:25:
49:fd:cc:a4:68:bd:ed:e0:c4:e2:90:97:3e:d9:c2:b5:c7:1a:
4e:81:65:b7:5f:fa:4a:f7:1d:fc:5e:8a:cd:0d:e1:7b:ee:fb:
32:15:41:34:07:3f:97:32:9d:3e:1f:79:be:57:c2:1b:05:78:
6f:ef:a9:c3:fc:dd:9d:61:e7:b5:9c:37:23:37:ad:4b:00:47:
3a:0a:5b:30:9e:26:50:55:24:6e:48:70:aa:e3:59:53:ce:ef:
19:cb:db:56:81:57:12:74:68:27:3d:47:fc:86:77:d5:fe:9e:
2f:bb:90:d7:e0:39:8e:b3:5c:03:71:0f:a8:a6:5e:7a:19:ab:
7d:53:fe:6e:98:15:14:dc:02:dd:19:4d:8d:87:b9:5b:bc:ea:
1e:9c:d0:2f:71:de:d1:ef:ca:c9:be:0f:12:fe:71:3e:98:f4:
0b:f9:f7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:18:25 2026 by rpki-client