Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
File: eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft (raw, json)
Hash identifier: i4GH73FdKI4c1E7qu7f6OqAevpY8KAdbU/VlOzsV2sY=
Subject key identifier: 49:D0:AD:29:27:EC:7F:1C:60:3C:FF:95:27:F9:18:3A:F3:06:5B:06
Authority key identifier: 79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
Certificate issuer: /CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Certificate serial: 01A125426E3FE31B5D9D85463CD924141EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
Manifest number: 1A9A
Signing time: Sat 10 Oct 2026 10:01:12 +0000
Manifest this update: Sat 10 Oct 2026 10:01:12 +0000
Manifest next update: Sun 11 Oct 2026 10:01:12 +0000
Files and hashes: 1: 5zwZDxIuULUKjp1rgcwRTBY-pVU.roa (hash: mUMWXUGRFNqTfVs8CnS61wDQkaxlvFmZ/n69Cmi6CP8=)
2: eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl (hash: gRPZ/01pZ+6+lXPTA64LnpNYniHq8cdqHEdhrAyZ77c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:42:6e:3f:e3:1b:5d:9d:85:46:3c:d9:24:14:1e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Validity
Not Before: Oct 10 10:01:12 2026 GMT
Not After : Oct 11 10:01:12 2026 GMT
Subject: CN=49d0ad2927ec7f1c603cff9527f9183af3065b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:20:85:24:b3:69:37:6b:d8:29:61:78:2b:1f:
1b:65:ad:a9:35:b2:03:63:66:6c:c7:39:67:04:11:
69:d4:b9:ec:a4:08:49:51:ea:4d:ee:ab:17:55:08:
04:a9:ae:98:ab:c8:56:33:85:d1:39:f0:54:87:3a:
7f:eb:e7:1c:44:90:e9:98:4c:38:0b:70:87:e6:16:
5f:9d:af:22:6e:be:65:a7:a6:67:71:4d:4b:c8:66:
93:53:47:36:d7:15:e7:e5:05:b2:c5:dc:3a:52:08:
da:ba:c7:0f:5b:55:5c:9d:9c:ff:8a:0f:22:ca:7d:
4b:9d:d6:7a:44:d4:e4:6e:1c:d2:0e:28:24:96:e5:
b9:ce:54:74:5b:2d:17:ad:a0:ab:4d:b6:bf:82:57:
e9:67:86:09:d0:e2:2a:bb:b7:26:cf:ba:d7:fc:dc:
47:93:a2:bf:98:ea:ef:2f:e6:ea:4b:3b:bb:a0:a8:
ea:47:b8:13:bf:a9:19:0a:91:d3:39:69:29:73:34:
d9:72:ce:a9:db:be:8d:eb:17:07:ec:f5:14:34:1f:
67:91:5d:ff:1b:eb:e1:98:47:59:45:64:9f:81:61:
b1:a2:aa:cc:c0:5f:5a:f4:d8:9f:69:42:b8:00:bc:
5b:cb:f6:4c:75:e7:40:8b:9c:d1:a9:eb:fd:77:33:
80:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D0:AD:29:27:EC:7F:1C:60:3C:FF:95:27:F9:18:3A:F3:06:5B:06
X509v3 Authority Key Identifier:
keyid:79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c0:7b:f2:23:fa:2e:88:cf:00:a3:97:66:bf:eb:5f:47:d0:
03:17:52:19:e5:f3:ab:a5:69:fe:ac:96:02:87:a3:db:1d:de:
d6:ba:62:db:c7:f4:81:34:f0:95:28:b0:28:90:ec:89:ea:84:
89:94:78:76:87:b1:3d:f7:44:91:e4:da:fd:2d:98:6b:81:7d:
7c:f7:2b:11:c3:df:d6:bc:13:c3:d4:a7:53:0d:8e:14:ed:21:
98:2c:3f:ec:e4:e1:ee:ff:44:10:94:39:25:84:76:76:99:87:
b6:d4:db:0b:c4:f7:4d:4a:11:80:0d:ff:62:7a:ca:65:37:51:
0e:3c:84:a3:10:4b:c1:25:cb:f7:3a:25:19:0e:78:b6:bb:8c:
09:e5:d5:20:a5:c1:2b:cf:78:81:6a:5e:e0:fb:74:50:8d:eb:
fd:45:f5:31:fe:8a:de:85:6d:30:15:02:24:6d:31:8e:72:2a:
94:f7:84:90:68:2a:cd:9f:09:bc:28:75:37:73:9a:e0:31:4b:
78:38:13:e0:7a:d8:8a:51:87:10:fe:77:77:59:5d:c4:1a:a6:
f6:1d:ac:c2:5a:b4:e5:02:8b:c8:66:ed:56:a4:5e:70:89:a3:
4f:5e:e6:ff:38:07:58:e5:3e:dc:a7:72:b7:a6:aa:55:ce:65:
e2:57:99:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:48:33 2026 by rpki-client