Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
File: eNY2xQXVavQqQUwWfVJAfTVrPQs.mft (raw, json)
Hash identifier: 0SnOdufINBgtGuOIiWw8vsm+n+8eLnT+hK+lfTGUd4g=
Subject key identifier: 24:76:EB:EE:B6:1A:98:16:3A:57:73:85:58:84:37:F2:06:14:B3:53
Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
Certificate issuer: /CN=78d636c505d56af42a414c167d52407d356b3d0b
Certificate serial: 01A0E663AE00EDD5081D1B47F6B75E73EC21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
Manifest number: 1A7B
Signing time: Mon 28 Sep 2026 05:01:27 +0000
Manifest this update: Mon 28 Sep 2026 05:01:27 +0000
Manifest next update: Tue 29 Sep 2026 05:01:27 +0000
Files and hashes: 1: 91m9d-4rp7TRVtPcYvV9NGes_jg.roa (hash: I0D8Damt//4B0Kf8Q3SX0Wwm5LPekD0IgYEQxvGqNNI=)
2: eNY2xQXVavQqQUwWfVJAfTVrPQs.crl (hash: WPgJ0WsefaQ6d0KGqbbwsKe/28h6vK+XtQljkJ+h9Yw=)
3: zHOXRdXkiM-RbCdgutluwx22gJ8.roa (hash: ddTQ3xyy/qh9SFlJgrOiIvTTzcQtTPf5+YJxupFgPas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:63:ae:00:ed:d5:08:1d:1b:47:f6:b7:5e:73:ec:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b
Validity
Not Before: Sep 28 05:01:27 2026 GMT
Not After : Sep 29 05:01:27 2026 GMT
Subject: CN=2476ebeeb61a98163a577385588437f20614b353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:58:05:59:bc:ee:84:99:ab:75:79:cd:08:0c:
49:52:50:44:ff:17:46:bb:7b:de:e2:0b:97:82:73:
d5:09:5c:39:5a:0f:88:df:b8:ea:f7:97:bd:38:3f:
78:df:c3:24:01:d3:8c:45:fb:cd:7c:8c:d0:c9:7e:
7f:31:6b:05:37:96:ba:1d:69:57:b5:c4:e4:ba:ba:
e0:ea:74:70:a0:55:d3:c5:37:9b:06:f3:16:7b:ad:
3b:8b:f1:45:22:cf:08:cd:a9:54:30:72:99:35:68:
e1:d4:c6:12:8f:fe:53:77:25:18:36:ef:10:60:f3:
fc:f1:d6:e8:93:e9:87:44:66:d4:84:56:88:87:ad:
d4:fd:0e:cf:29:6f:dc:19:9a:fd:ad:b1:aa:a3:8a:
2b:00:84:af:38:de:a0:6c:d3:2c:dc:79:a7:61:a7:
59:ba:b9:e6:b4:77:50:ef:1a:5e:c1:31:0f:3f:93:
77:5c:97:10:32:45:6e:ca:b6:1c:28:fa:ec:98:ad:
43:4e:4e:df:2a:12:d5:b9:2e:c8:fd:0c:29:a2:19:
f7:bd:f9:b1:d5:72:24:e7:0b:9f:ea:3b:12:24:c3:
dc:b3:d0:5f:54:92:b0:d8:8c:ed:33:22:68:5e:c0:
66:bc:07:81:78:f6:d3:06:05:e6:fc:d7:74:2c:02:
51:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:76:EB:EE:B6:1A:98:16:3A:57:73:85:58:84:37:F2:06:14:B3:53
X509v3 Authority Key Identifier:
keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:78:fc:84:80:d6:b0:5a:65:bc:56:46:b2:38:ac:46:9e:bb:
4a:51:3b:d2:1a:11:24:38:e0:d4:4b:66:00:62:bf:ae:dd:c3:
9d:7f:04:0f:3c:77:9d:af:3a:66:dd:dc:b8:b1:be:32:fa:1a:
af:94:2b:75:2a:d4:7b:da:c1:e9:e9:af:d9:a3:73:c3:d1:f4:
c5:fb:b5:26:83:4c:c3:ba:16:11:96:d9:fb:56:bc:34:47:46:
fd:d5:c5:ea:4c:a6:5c:79:fc:a1:05:f0:aa:32:d4:5f:5a:d8:
e2:0c:47:78:0c:fe:aa:3a:d5:a1:66:51:6a:8d:3b:ee:56:5f:
9a:5e:f4:c7:0d:f0:3f:cb:ef:ef:b5:59:ea:ac:8c:df:d8:9a:
c8:96:d4:46:5b:01:7b:5b:3e:3a:59:42:f5:5d:eb:9f:e2:7c:
88:a8:e6:0b:43:de:a6:b5:24:dc:7c:73:5d:f1:b7:ec:8e:5b:
4f:76:c2:d6:2b:c6:33:56:a3:9c:03:d5:db:bb:9e:4b:96:7d:
95:a8:0e:7f:1a:39:57:2d:92:ee:b5:fe:e4:be:57:4d:68:bf:
42:15:89:e9:4e:4a:59:16:43:b6:47:4d:2e:b5:41:65:20:d4:
cb:07:e9:07:2f:0d:a8:b4:81:35:08:c2:8e:d9:15:42:10:9b:
f9:cd:a3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:44:05 2026 by rpki-client