Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
File: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft (raw, json)
Hash identifier: Gq/a37vl2GeyA90r0kud3gzBEdTsoPe5Q4uKx6VaZ7g=
Subject key identifier: 86:B1:A8:12:D4:32:7C:2D:47:EC:DF:FE:B0:E6:4E:91:2D:E0:6A:0C
Authority key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
Certificate issuer: /CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Certificate serial: 01A0C40DB7C1C9DC651E8434B8AD00103842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 13:00:28 +0000
Manifest this update: Mon 21 Sep 2026 13:00:28 +0000
Manifest next update: Tue 22 Sep 2026 13:00:28 +0000
Files and hashes: 1: 1-871CmDX8fagFE4cCLtEOvFlaJk.roa (hash: XbD+Hd0tYqjM6KWUuuQ0xXPJOZgVOM/iQcoQQ4UP8I0=)
2: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl (hash: xV9qiBbHxXoNxhj5ZNVPQoG6pn7mFVzRv5mKeKkN6Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:b7:c1:c9:dc:65:1e:84:34:b8:ad:00:10:38:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Validity
Not Before: Sep 21 13:00:28 2026 GMT
Not After : Sep 22 13:00:28 2026 GMT
Subject: CN=86b1a812d4327c2d47ecdffeb0e64e912de06a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:a4:bf:ce:4e:58:08:80:88:92:47:2d:f0:
56:2a:4a:9b:0e:26:e1:c2:46:f3:58:a9:0e:78:4c:
e1:f1:55:28:44:77:ca:22:8c:fd:22:f7:eb:46:b1:
e2:f4:0a:0e:cb:a9:fc:76:73:26:c3:5d:87:89:b0:
32:eb:b6:f3:2f:e8:83:70:d9:f9:ba:a3:13:05:8f:
2c:8d:1f:3b:f3:61:62:b0:8b:83:fd:28:98:f0:84:
28:03:f1:33:ae:d1:9f:80:62:36:77:81:ce:7b:9b:
f5:2f:9d:1c:67:98:7c:30:2a:27:ee:8d:a6:a5:aa:
06:d7:7b:39:f4:13:67:73:ab:3d:cc:7e:49:40:38:
d6:6e:d8:b2:94:23:d0:62:3d:97:eb:43:83:69:7d:
a0:4e:3a:7c:a2:f1:38:59:a0:5d:91:53:8a:f0:cb:
51:96:71:e5:5d:13:f5:57:c0:0f:5b:39:ad:88:10:
db:4b:b2:85:b4:45:5c:33:a3:e3:2e:5c:8f:5c:95:
07:66:27:fb:a5:39:e6:50:1f:4d:38:05:92:db:f0:
26:17:aa:0a:75:43:5f:4f:c5:e4:51:b3:7d:14:30:
cf:d0:70:5c:c8:15:6b:10:87:fc:80:ac:78:7a:9a:
6b:89:2f:32:0a:92:02:f0:7b:c0:63:8b:78:2b:9a:
90:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B1:A8:12:D4:32:7C:2D:47:EC:DF:FE:B0:E6:4E:91:2D:E0:6A:0C
X509v3 Authority Key Identifier:
keyid:12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:4c:77:e9:c5:a7:8c:e8:41:b0:23:87:f6:be:d8:5e:5f:d0:
3f:41:5c:d4:5d:a0:a4:13:03:d1:2c:28:95:73:38:ea:8b:98:
b5:2f:14:dc:db:e5:30:3b:69:63:c4:8c:be:63:c2:5e:ae:ca:
dd:c9:54:7e:5a:e7:2c:ce:44:e8:a8:bf:a9:17:62:2e:85:6f:
52:e2:9a:d5:d3:34:2a:18:1e:1f:c8:cb:3f:d7:8c:70:31:5a:
b9:30:71:45:31:97:8f:04:1c:6b:cb:c8:7e:f3:ae:78:2c:0d:
11:c8:e1:c8:db:57:9f:27:68:fa:bc:d0:94:19:fa:ce:28:a2:
56:15:67:8e:6d:e0:8e:bb:0a:1f:8a:d7:af:7c:f6:14:9a:52:
86:88:9a:96:e5:dd:65:4b:41:15:78:d5:de:eb:2e:c0:d4:21:
bd:0e:c1:c5:a5:9c:4e:5c:60:9b:51:4b:46:71:cf:20:58:c1:
57:2b:2f:77:c7:8c:3f:c9:f6:af:83:06:2f:31:eb:8d:62:17:
91:6c:e2:0e:70:a1:a1:df:52:ff:4a:c6:c6:23:53:94:3b:17:
41:d4:18:d2:4f:c5:07:13:f5:91:67:33:e5:33:f7:e2:4e:33:
56:b9:a8:a6:8a:5e:ad:c8:e0:d5:ac:4c:31:a4:b2:64:6f:3d:
a1:a6:ea:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:02:09 2026 by rpki-client