Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
File: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json)
Hash identifier: KMS6VDo9rVIEJPaKHdKV3nABo4BhfeisD4E/9bBefKw=
Subject key identifier: 86:46:9C:EE:5D:E7:38:47:BB:B5:DA:5A:0B:DA:2F:4C:70:5B:1E:90
Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Certificate serial: 01A0C2C41E1078439BA8A447CBB1DD94E292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
Manifest number: 119D
Signing time: Mon 21 Sep 2026 07:00:27 +0000
Manifest this update: Mon 21 Sep 2026 07:00:27 +0000
Manifest next update: Tue 22 Sep 2026 07:00:27 +0000
Files and hashes: 1: U0fRXYHgtW5Lj2ILWS5wUzrlnN4.roa (hash: rlb8IZvmVYRTy9dDl5LBuhuMRpChfmFYGPXw/aHFukE=)
2: Zu2YCOMNdF6aNceeKzP2XiSPhlU.roa (hash: cnBeGVbEPlV3dfTfeIQYswJCwcZDweKXTvgV5NLGKQU=)
3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: JFuLp+cV9VPefqYO2qbWP2QVCtlfgK/rQE7SRGkoacg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:1e:10:78:43:9b:a8:a4:47:cb:b1:dd:94:e2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Validity
Not Before: Sep 21 07:00:27 2026 GMT
Not After : Sep 22 07:00:27 2026 GMT
Subject: CN=86469cee5de73847bbb5da5a0bda2f4c705b1e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:61:ea:79:e7:d6:a4:70:0f:3a:27:20:81:07:
95:f6:0c:91:2e:20:17:df:45:ce:b3:87:e8:21:6c:
aa:73:27:d4:35:e4:2a:e5:79:6d:0f:8b:c5:54:eb:
f4:90:79:6c:d0:ed:89:68:c7:28:49:88:e2:ae:f8:
e7:0a:3a:14:3e:42:e9:2b:f8:90:7f:3b:7a:8c:c7:
28:0c:51:80:c5:23:c1:59:77:60:45:27:70:2b:dd:
c2:17:70:59:f5:aa:f7:2b:53:05:ca:d9:df:56:de:
a4:76:3b:30:87:a1:a0:48:41:28:88:36:0a:9c:10:
0d:53:53:2f:1f:f9:b2:72:23:89:5d:54:db:62:9e:
20:bc:0d:e0:f6:ee:bd:d6:eb:c5:7b:e2:a4:e6:f5:
40:e8:0d:e8:02:e4:36:35:ca:83:e6:a9:71:46:64:
89:5f:93:98:a2:87:83:bd:dc:0c:7c:45:69:c5:89:
b5:b6:4e:2a:11:20:45:ce:19:b5:08:81:36:f7:56:
65:49:2d:2f:4e:3a:fe:73:44:2a:4f:d8:5d:fc:c0:
19:d0:75:c7:c3:c6:5c:0d:58:39:d0:9b:c9:05:52:
32:b4:32:d6:90:a4:a5:6f:3b:ab:50:91:b7:cb:f6:
85:c8:95:80:98:88:b6:01:5a:63:d8:78:38:07:cf:
3e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:46:9C:EE:5D:E7:38:47:BB:B5:DA:5A:0B:DA:2F:4C:70:5B:1E:90
X509v3 Authority Key Identifier:
keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:97:4c:f1:35:18:51:80:61:1b:97:fb:3a:a7:77:aa:55:34:
95:b3:38:08:be:0a:fa:41:56:9d:0a:66:83:bb:36:60:6e:8b:
e2:a5:3b:90:cd:e5:eb:d6:76:87:7b:93:26:2f:a7:f6:23:c4:
f5:5a:77:d0:e9:39:76:6f:d1:1a:fc:dd:e3:79:c8:3e:c4:ff:
03:e3:1c:f2:68:78:c5:b8:c8:bd:0e:40:22:6f:d5:bd:2d:89:
a6:73:11:de:a1:c7:fe:72:93:02:d2:85:70:9c:ce:a6:50:e0:
5e:52:04:53:3c:b1:17:a4:3d:72:58:75:5b:61:4e:b1:c6:d4:
6e:cb:21:6f:91:42:1d:a5:c8:73:9c:a4:e2:05:2e:c5:2a:a3:
0a:7e:89:79:52:02:63:b3:58:a2:00:72:57:90:14:1c:ea:a7:
5c:5b:02:18:1b:7f:ef:a3:f2:40:02:a8:bd:e0:88:34:8b:54:
d7:aa:65:5d:30:b0:e6:06:ad:8b:24:71:09:d3:e1:b4:60:05:
1a:ae:0a:10:84:1e:3a:53:d3:63:e8:0a:6f:59:fc:d3:56:b9:
92:05:00:e0:3a:20:ec:27:9c:13:20:75:df:69:b9:49:0b:eb:
25:3f:ca:48:30:aa:ca:e6:59:dd:0e:f6:ac:e9:2b:63:cc:fb:
91:a0:8c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:37:06 2026 by rpki-client