Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
File: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json)
Hash identifier: qGzKEbkkY0aUn1glr0Iv3IhJN3HYPj/aqQ2VdeHeWTY=
Subject key identifier: 42:DF:A0:7D:43:EE:11:7C:4C:25:E6:AC:AF:88:3F:DF:A6:87:62:F3
Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Certificate serial: 019FAABF002CE8407FE735EB9265231B1E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
Manifest number: 110C
Signing time: Tue 28 Jul 2026 22:01:11 +0000
Manifest this update: Tue 28 Jul 2026 22:01:11 +0000
Manifest next update: Wed 29 Jul 2026 22:01:11 +0000
Files and hashes: 1: U0fRXYHgtW5Lj2ILWS5wUzrlnN4.roa (hash: rlb8IZvmVYRTy9dDl5LBuhuMRpChfmFYGPXw/aHFukE=)
2: Zu2YCOMNdF6aNceeKzP2XiSPhlU.roa (hash: cnBeGVbEPlV3dfTfeIQYswJCwcZDweKXTvgV5NLGKQU=)
3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: h2/6gJ4nQvUPAwS1csarvYYdMutDjjJnwmH+tQmIVdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:bf:00:2c:e8:40:7f:e7:35:eb:92:65:23:1b:1e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Validity
Not Before: Jul 28 22:01:11 2026 GMT
Not After : Jul 29 22:01:11 2026 GMT
Subject: CN=42dfa07d43ee117c4c25e6acaf883fdfa68762f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:9e:6c:8e:d9:c1:d5:04:b6:42:be:d3:88:
cb:42:84:11:ed:52:d4:a0:b1:fd:c4:c2:fc:75:dc:
e3:01:98:10:fa:30:42:7f:1f:d8:c9:07:90:d2:93:
8c:a9:e2:6a:6d:ec:73:6d:d2:39:c8:4f:e3:19:b0:
eb:fb:1c:a1:b8:81:28:59:d9:ca:25:4b:86:6d:53:
a2:fa:83:98:bc:65:1f:1d:3c:61:30:93:35:79:95:
0a:3d:c9:6b:71:82:3b:8f:75:19:20:10:ea:d0:85:
2b:20:db:72:33:00:ec:7e:01:d8:d5:01:bb:de:11:
a2:d3:19:52:6f:d7:0a:45:72:21:29:18:18:0b:d9:
c9:42:35:c7:4b:15:0b:21:cf:92:d2:26:37:6d:4d:
2f:e7:9d:03:9c:1f:ce:ed:f0:cc:8a:92:98:c7:cc:
88:75:7f:71:6b:bf:31:33:a2:2b:94:8f:6b:cb:df:
55:bc:68:bd:c3:02:22:ac:59:9c:12:6c:bb:ea:0e:
fc:c6:15:78:0e:50:e0:21:39:2c:70:0b:90:60:d9:
77:4d:a9:ef:44:e1:b2:d6:6d:6d:12:3b:dc:e6:02:
f1:52:c0:81:4d:27:f2:56:61:e7:01:c4:a9:81:ad:
ef:c4:8e:56:98:9b:f3:95:8b:43:5e:2a:86:ef:e0:
08:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DF:A0:7D:43:EE:11:7C:4C:25:E6:AC:AF:88:3F:DF:A6:87:62:F3
X509v3 Authority Key Identifier:
keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0b:51:8e:db:7d:ac:12:a9:55:75:c1:7e:7e:ea:7d:96:b8:
a2:eb:ac:49:9a:dc:f5:2c:42:b0:ee:da:c1:13:15:78:16:78:
f1:3e:73:4f:63:7e:5d:8a:12:4e:4b:a3:fe:31:d5:f9:9b:fa:
be:9d:43:ac:ee:a3:d5:85:f8:e9:84:97:8c:42:a8:f0:63:5f:
73:c9:e7:d0:f2:51:37:67:c3:80:d9:04:35:96:9a:c5:9c:d3:
3e:1a:79:e2:5a:66:5b:10:06:14:6e:af:ab:56:e0:54:0f:0e:
68:99:de:3b:34:95:9b:53:1f:a6:d2:25:2d:34:c5:35:07:45:
c0:fd:8b:2f:9e:b3:84:79:94:2a:a9:c6:a4:71:12:bd:0a:c0:
02:2e:f0:bb:71:e9:00:9e:38:bf:d6:bb:68:58:84:08:c9:09:
6f:ee:23:c7:34:ff:a8:fd:2f:7a:63:7d:c1:66:19:dc:a2:91:
9e:94:56:61:29:41:84:c9:25:15:54:2a:2e:a6:9e:8e:7c:27:
c2:73:c9:8b:fc:72:17:bf:89:6a:e2:6d:58:39:c6:a4:5e:f6:
b2:c0:d7:16:42:13:85:b3:9a:ae:07:e1:96:29:aa:ce:71:13:
10:78:83:2a:de:a6:22:74:dc:6c:4e:ce:f3:28:fa:85:bf:f7:
48:1c:c3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:07:17 2026 by rpki-client