Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
File: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json)
Hash identifier: Ky8AwlmUyBoZ8kPTkelEAwGnVZJkCB3xbi+fxf5ZcUM=
Subject key identifier: 66:18:63:85:49:D3:35:EE:CA:80:A3:4D:8E:A5:86:EB:2B:0F:10:82
Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Certificate serial: 01A0C0D5C406FE9E78BFD314E7A92BB7C806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
Manifest number: 119C
Signing time: Sun 20 Sep 2026 22:00:29 +0000
Manifest this update: Sun 20 Sep 2026 22:00:29 +0000
Manifest next update: Mon 21 Sep 2026 22:00:29 +0000
Files and hashes: 1: U0fRXYHgtW5Lj2ILWS5wUzrlnN4.roa (hash: rlb8IZvmVYRTy9dDl5LBuhuMRpChfmFYGPXw/aHFukE=)
2: Zu2YCOMNdF6aNceeKzP2XiSPhlU.roa (hash: cnBeGVbEPlV3dfTfeIQYswJCwcZDweKXTvgV5NLGKQU=)
3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: azH7NsgNWQnRTCvfSyFT5Q/PSGkGjQTv22YxlfLF/mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:d5:c4:06:fe:9e:78:bf:d3:14:e7:a9:2b:b7:c8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Validity
Not Before: Sep 20 22:00:29 2026 GMT
Not After : Sep 21 22:00:29 2026 GMT
Subject: CN=6618638549d335eeca80a34d8ea586eb2b0f1082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:a6:f4:ce:eb:e7:4d:a2:62:de:47:09:99:
4e:fa:8f:6a:e1:c2:ca:dd:79:62:87:2d:35:e6:38:
68:7d:9e:4b:0b:52:c0:13:a4:3a:df:f5:d8:f4:23:
dd:f0:70:0b:0d:7b:4e:06:91:28:a2:7b:b2:82:ec:
e8:9b:52:9a:4d:cd:17:ab:55:5e:c9:f2:03:c7:bd:
0e:f6:06:af:dc:cd:8b:50:84:3a:0d:9a:fb:76:10:
ab:22:2e:8e:4b:71:97:ba:58:06:12:18:73:87:56:
c3:d1:69:5c:b5:44:91:84:28:75:ac:0c:c3:e4:30:
89:04:ee:94:16:b3:02:92:19:fb:3b:44:08:88:e3:
08:cb:74:45:8a:98:cd:12:7d:1e:af:95:75:a9:d3:
66:11:2b:9b:a5:de:1b:15:08:0d:fd:95:f7:c6:ba:
5e:b9:32:c5:80:63:6c:b3:c1:31:07:0f:85:5b:08:
a8:09:73:39:e8:67:94:31:47:24:08:31:d2:98:15:
c9:df:13:1e:f8:02:6e:87:2d:7b:fe:2b:64:51:57:
3b:df:f4:f2:74:a3:4c:b4:c1:9a:a8:ab:0c:0c:86:
61:9e:69:81:91:d6:ea:70:e5:22:82:0a:ca:e0:d4:
74:03:ed:cd:38:be:2f:6b:12:e8:af:7d:2c:47:7e:
9c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:18:63:85:49:D3:35:EE:CA:80:A3:4D:8E:A5:86:EB:2B:0F:10:82
X509v3 Authority Key Identifier:
keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:cf:bc:8d:fd:4b:95:70:37:4e:25:14:e7:5e:30:48:d6:d3:
94:59:57:fb:df:c2:ef:86:34:c1:a4:aa:50:58:e0:6d:d5:1f:
06:bc:37:85:17:f7:82:92:8e:6b:9f:86:1a:b1:e8:16:8d:61:
bd:c0:c7:60:73:ea:ea:92:66:5c:5e:0b:6e:2d:e7:02:3c:38:
96:93:15:da:77:71:8e:78:1d:93:ff:ac:76:9d:9b:90:03:28:
90:f9:2e:b7:2f:03:4d:69:7b:84:69:62:40:c3:73:a6:c1:08:
25:79:46:8c:a3:14:13:09:ef:5e:33:30:1a:fa:db:15:99:6c:
ec:84:5a:65:f3:c2:58:41:54:43:61:d3:4c:a5:37:46:23:14:
ce:69:c3:16:1b:48:8a:27:49:8c:14:da:db:57:8c:13:cc:ed:
e5:40:60:0a:54:9c:57:bb:2d:0d:b5:b7:77:f4:df:d4:f4:3e:
44:f0:47:6d:14:5a:ed:2d:23:90:0c:e8:28:f2:83:c0:85:96:
6e:51:f5:58:eb:5e:7f:2a:0d:65:a7:1c:62:34:ec:c5:54:22:
34:63:e0:4d:0a:f5:d5:62:09:da:dc:c3:67:de:15:db:a0:3f:
06:d3:27:5e:26:88:74:52:86:8e:97:4e:fa:c5:47:53:32:08:
2a:3e:18:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:35:05 2026 by rpki-client