Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
File: eIehaWWHX29TvMMfDkk6lhVOt7k.mft (raw, json)
Hash identifier: xRcIEfVkg1I+ck45cRU9o+K8faxl6A6S4cBGeBZH9Wk=
Subject key identifier: 75:13:34:95:60:F8:B7:C9:D4:DD:49:FD:A2:5F:AF:10:3E:6E:55:20
Authority key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
Certificate issuer: /CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Certificate serial: 019FAAF57C664368C4030C7B882697E9CB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
Manifest number: 16F2
Signing time: Tue 28 Jul 2026 23:00:42 +0000
Manifest this update: Tue 28 Jul 2026 23:00:42 +0000
Manifest next update: Wed 29 Jul 2026 23:00:42 +0000
Files and hashes: 1: MJofjdkMEmgx2BydUOl_6hfgSP0.roa (hash: SYQp19hNRf4PycQPpMlkNy2V7oY/RHobHYkQy5EY5Uk=)
2: e3rUNCM0Xf2LeGKAo_m6z686FVs.roa (hash: /zRO4TdqdR87Zu84kUd28IeKppEjdoIpNzsSQ/9y0kI=)
3: eIehaWWHX29TvMMfDkk6lhVOt7k.crl (hash: 0ZNql8hHTRp2v1LgnFQAmYGcDsma20pqjLv4zcugtoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:7c:66:43:68:c4:03:0c:7b:88:26:97:e9:cb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Validity
Not Before: Jul 28 23:00:42 2026 GMT
Not After : Jul 29 23:00:42 2026 GMT
Subject: CN=7513349560f8b7c9d4dd49fda25faf103e6e5520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:7e:de:bb:de:b8:3f:3f:9e:bd:81:28:0a:
b5:62:e7:71:ba:e0:da:fd:42:f7:6c:25:82:1b:c6:
3a:57:f1:47:b7:7e:b0:f3:09:5c:62:17:e6:92:09:
b7:90:61:63:26:95:4d:51:29:0d:3c:f7:aa:67:6d:
eb:80:85:81:ca:73:fa:88:b0:03:df:f5:10:af:8e:
2e:01:eb:e4:9e:51:36:bc:69:e2:2c:9b:9d:f4:ed:
af:a2:d2:13:61:78:75:b6:b3:4b:f8:fa:a1:73:9f:
b0:47:1a:fa:8b:7f:0e:d6:4e:29:4f:b6:47:a4:d3:
bf:6c:66:38:5c:a2:a9:e2:94:c1:28:22:4b:2c:e9:
94:6c:83:b9:5c:90:ae:48:51:84:96:3d:93:7c:d0:
89:8f:78:67:6c:e7:7a:a6:3b:e0:7d:a9:48:45:d1:
ae:71:1b:64:b3:d5:bc:36:d1:df:f7:ab:6e:a2:18:
16:c5:cb:5b:a4:9d:66:47:3a:ea:9c:c9:43:2a:a6:
51:0f:d6:89:2f:5c:ac:18:ad:df:d9:90:a5:59:16:
8f:7e:13:35:23:d2:87:74:fa:07:53:11:1e:ec:2f:
10:2d:32:3b:cf:54:9c:5b:9d:17:df:56:b5:0f:6b:
d8:7c:af:f8:10:cc:89:e7:1f:9c:28:07:18:06:aa:
2e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:13:34:95:60:F8:B7:C9:D4:DD:49:FD:A2:5F:AF:10:3E:6E:55:20
X509v3 Authority Key Identifier:
keyid:78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:62:31:f9:e6:a4:c6:f9:4e:27:65:a5:3f:f1:7d:a0:89:df:
25:18:7c:02:f3:47:21:ea:0b:30:a8:e3:90:e0:4c:70:b0:90:
39:4e:a7:d6:55:0e:32:45:63:6a:77:43:66:e8:7a:01:0e:ca:
36:ca:c6:98:ac:2e:17:b7:87:07:4d:c9:ca:a8:6a:cb:97:f9:
79:9e:17:e0:86:86:ee:61:d1:54:ec:8a:ec:1f:0f:e3:26:8f:
a2:fe:66:db:5a:9b:fa:ec:26:4b:12:32:5c:73:3f:ef:27:01:
c9:04:38:d8:32:a7:e3:98:52:d5:b5:d1:49:88:30:15:18:db:
90:51:0e:14:84:93:20:06:cb:64:64:94:00:91:ac:ae:50:f6:
4a:3d:69:74:30:2b:11:16:4e:45:40:6f:9f:6d:9c:17:88:48:
45:ab:64:c0:28:93:fb:af:d2:95:08:07:ee:1b:0d:7e:33:ec:
ca:68:b6:d3:1b:70:db:9b:73:04:9f:ec:05:dc:1c:e1:94:26:
ac:bc:88:c4:1c:66:79:e2:ac:a8:ce:e6:0b:f8:b9:b8:67:62:
7c:1f:09:70:6b:1d:8a:a4:8c:a8:0f:e5:6c:87:b2:42:0b:f8:
13:d3:7e:13:22:b4:42:8a:66:0d:3e:9b:f1:27:a7:b2:61:5f:
f1:a2:e3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:40:57 2026 by rpki-client