Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
File: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json)
Hash identifier: LlEuTZ0VVTAJOrwL78/IPT0s3J91iSSVa1LBwms8/i4=
Subject key identifier: BE:B9:E7:55:06:A9:F8:1B:80:9C:C7:8C:DD:F6:BC:66:5B:3C:6D:4A
Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Certificate serial: 01A1C77B1F9D750DD3AFA0D29D24685BCA0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
Manifest number: 1224
Signing time: Tue 10 Nov 2026 22:01:37 +0000
Manifest this update: Tue 10 Nov 2026 22:01:37 +0000
Manifest next update: Wed 11 Nov 2026 22:01:37 +0000
Files and hashes: 1: U0fRXYHgtW5Lj2ILWS5wUzrlnN4.roa (hash: rlb8IZvmVYRTy9dDl5LBuhuMRpChfmFYGPXw/aHFukE=)
2: Zu2YCOMNdF6aNceeKzP2XiSPhlU.roa (hash: cnBeGVbEPlV3dfTfeIQYswJCwcZDweKXTvgV5NLGKQU=)
3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: Zzk9LOFT7Czn6RI88gyHuXqS2NOXXrLBtCyjI18rPrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c7:7b:1f:9d:75:0d:d3:af:a0:d2:9d:24:68:5b:ca:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Validity
Not Before: Nov 10 22:01:37 2026 GMT
Not After : Nov 11 22:01:37 2026 GMT
Subject: CN=beb9e75506a9f81b809cc78cddf6bc665b3c6d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2b:b3:3d:7e:f9:68:20:3c:d8:d3:73:b9:de:
31:8b:36:0d:1c:91:95:09:8a:60:3f:57:85:a4:57:
6c:2a:35:30:57:44:04:da:1f:7a:e8:5e:a6:00:bd:
50:9b:a8:c1:4a:a0:fd:d1:b8:a8:87:21:b0:c9:4d:
37:4b:f1:1e:20:dc:2d:5a:ee:bb:0c:d3:61:4d:12:
af:59:3d:04:ca:d9:92:fb:c2:70:6f:48:ff:55:cd:
94:e6:cd:3a:5e:8f:0e:7d:9a:b9:df:31:ff:ca:82:
82:56:aa:52:2f:ac:64:fb:8d:3c:4b:e2:c3:5c:c2:
5e:10:1e:24:35:6c:1c:ae:2e:f0:c8:84:d1:1c:6a:
f4:ac:43:cc:46:a8:9e:6e:e6:7d:52:57:52:81:91:
05:44:ca:9c:48:b9:0b:d5:28:c0:41:36:de:5c:73:
e5:86:c7:43:23:ba:a6:b1:c7:46:f8:d0:aa:7a:8d:
0f:92:61:b0:9c:1c:5b:d4:7e:f5:f0:e1:9c:6a:69:
f6:63:df:a4:47:00:2a:db:f5:ae:a3:81:ef:64:41:
a2:bb:12:49:e0:de:ee:58:9a:d5:93:c4:e9:c4:c6:
62:27:d3:c9:ac:71:3e:a5:28:23:38:92:ad:5b:b3:
d8:b9:dd:2a:bc:6d:f1:5a:4d:18:92:cb:15:4b:34:
f1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B9:E7:55:06:A9:F8:1B:80:9C:C7:8C:DD:F6:BC:66:5B:3C:6D:4A
X509v3 Authority Key Identifier:
keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ac:5d:b5:f0:da:a9:18:8f:55:13:6f:2c:6e:60:07:d4:a9:
af:57:c3:b5:19:3d:50:b3:c9:0a:73:66:99:c2:f0:a0:20:58:
92:b9:2e:a6:7c:8f:34:5e:2d:10:3c:d2:31:29:33:a1:da:6d:
34:b1:95:3d:3e:0e:ce:ee:0b:30:2a:87:b8:dc:e9:16:8d:6c:
c0:26:e0:8e:16:a2:e5:e6:3c:99:47:df:62:a8:ad:c0:e2:5a:
39:d9:63:52:c9:08:2e:5a:0d:52:9c:f1:18:de:e8:e9:be:c0:
8c:4d:0b:16:22:3b:6c:79:cf:f9:ea:56:f9:e9:50:5a:57:58:
ce:cf:6b:1a:ba:58:f4:47:03:3f:6a:3b:6d:2c:a1:76:41:3e:
7b:75:90:0f:55:55:72:03:44:af:d7:fa:11:90:48:49:f7:50:
3b:92:dd:78:15:1a:e1:92:eb:c7:32:2a:bc:5b:ae:7a:56:5e:
9d:92:b2:a3:b7:7a:ce:e3:94:12:56:2c:c7:bd:6a:08:2f:2e:
1f:ec:96:31:c3:4c:11:78:ff:82:ad:ed:0b:04:98:a2:82:9c:
30:32:49:02:2e:be:27:1b:84:96:7b:31:fd:e4:ab:cc:09:96:
38:33:22:61:6f:03:b1:cb:58:5c:7a:9d:95:d5:b4:28:f8:be:
b3:7a:f1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 03:52:55 2026 by rpki-client