Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/eXanO3wTqWbZU71ok8RChfwk7-8.mft
File: eXanO3wTqWbZU71ok8RChfwk7-8.mft (raw, json)
Hash identifier: G03K1YRuE/UqU3CHx9Zcx8uITdUqxbBkYkMDsP5Qnsw=
Subject key identifier: FD:9F:E5:1E:04:C5:29:01:39:8C:BB:09:E1:76:A2:98:31:FF:C3:31
Authority key identifier: 79:76:A7:3B:7C:13:A9:66:D9:53:BD:68:93:C4:42:85:FC:24:EF:EF
Certificate issuer: /CN=7976a73b7c13a966d953bd6893c44285fc24efef
Certificate serial: 01A1AA4CA159616F2E38F817041CF1E8B0FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXanO3wTqWbZU71ok8RChfwk7-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/eXanO3wTqWbZU71ok8RChfwk7-8.mft
Manifest number: 5C
Signing time: Thu 05 Nov 2026 06:01:51 +0000
Manifest this update: Thu 05 Nov 2026 06:01:51 +0000
Manifest next update: Fri 06 Nov 2026 06:01:51 +0000
Files and hashes: 1: 69dyOwruRqj66SetLH027OeIV3c.roa (hash: HCxhftpBnIA2rFHXS8WEzRsnIrsGSyzbbtWPmOSrBwU=)
2: eXanO3wTqWbZU71ok8RChfwk7-8.crl (hash: WQa4VZwHBPIQskeMWk0vWOTCkRmQObs27TFHmtnJX4M=)
3: uwz0si1SwVU9VQBKdbu7R8q5vms.roa (hash: qbkqCRHMCZSiQRFrAx9zDyfbeZmrRRF+Lxcz2PpqE4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/eXanO3wTqWbZU71ok8RChfwk7-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/eXanO3wTqWbZU71ok8RChfwk7-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXanO3wTqWbZU71ok8RChfwk7-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 06:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:4c:a1:59:61:6f:2e:38:f8:17:04:1c:f1:e8:b0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976a73b7c13a966d953bd6893c44285fc24efef
Validity
Not Before: Nov 5 06:01:51 2026 GMT
Not After : Nov 6 06:01:51 2026 GMT
Subject: CN=fd9fe51e04c52901398cbb09e176a29831ffc331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:96:7f:63:c6:ff:7b:15:ea:ac:af:7d:7e:
58:ef:e4:85:37:c1:0b:57:36:66:19:92:3a:39:ba:
0a:17:e1:88:ba:73:07:f2:58:77:9e:d8:e9:4a:f8:
5f:02:f1:49:6e:f6:d2:98:6b:e6:e1:e7:e2:1e:1c:
01:9f:66:06:da:e8:54:fc:7d:70:76:d8:a7:93:58:
be:d5:4a:e9:f1:f1:b6:a5:e9:3a:7e:8c:2e:78:49:
5c:b8:a6:1d:c3:f4:85:3f:09:f2:b8:93:de:85:b7:
d7:fb:71:5e:41:8f:4d:60:fb:77:a2:d4:c1:ed:ac:
29:8d:44:dd:13:0a:30:7b:19:24:25:66:c9:2f:0e:
42:9a:89:3a:c7:5a:e5:ff:f6:68:0e:d7:29:92:6d:
4f:4e:db:35:b1:61:5b:d6:f5:4d:42:80:69:19:e3:
f7:6b:99:c5:65:ef:b6:ac:fc:9e:ad:3d:75:93:3f:
c6:d8:41:18:28:4c:51:88:f1:75:69:1b:48:a9:83:
5f:79:5b:bb:62:2e:cf:90:31:5c:ae:4e:da:4d:f5:
5f:f3:a5:9b:e2:e1:77:b3:86:6b:2a:26:2f:75:0d:
d5:f6:2d:fb:5f:8f:c9:44:0d:c7:8e:b6:0b:9a:2e:
f3:b4:82:1d:b4:0f:c6:1c:5a:0a:3f:1f:83:e7:2d:
73:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9F:E5:1E:04:C5:29:01:39:8C:BB:09:E1:76:A2:98:31:FF:C3:31
X509v3 Authority Key Identifier:
keyid:79:76:A7:3B:7C:13:A9:66:D9:53:BD:68:93:C4:42:85:FC:24:EF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXanO3wTqWbZU71ok8RChfwk7-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/eXanO3wTqWbZU71ok8RChfwk7-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/eXanO3wTqWbZU71ok8RChfwk7-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4c:b5:62:60:59:10:67:33:d0:44:d8:c4:b7:fc:ef:9d:c0:
96:ba:c6:2e:7b:5e:19:25:e1:cc:f6:4f:97:a6:89:53:ad:e8:
ee:aa:67:a1:2e:79:d3:3c:26:16:1d:a6:f3:b2:61:3e:56:47:
05:56:0a:36:46:14:ce:ce:8b:8c:b3:6e:0b:43:59:99:c5:2d:
13:06:51:33:04:8d:71:f1:6d:ed:31:93:4c:7b:41:cb:41:33:
25:e4:4e:f6:88:a9:7f:09:e2:d2:68:05:d4:13:fc:2d:52:cc:
8b:be:97:52:7d:66:8d:4c:e1:78:20:bf:54:be:fa:0d:0f:59:
3a:13:59:73:30:13:13:bc:75:f5:a1:5d:d2:be:7e:3c:76:c6:
3c:8e:44:4c:00:79:70:46:5b:21:57:44:44:9f:fc:a9:c9:8c:
77:ad:17:dc:d6:b7:e9:f2:f0:d3:fb:6c:59:64:1d:47:e6:06:
10:12:44:6a:61:47:11:99:bc:f5:ca:eb:8d:56:f9:7a:18:c7:
16:ea:99:3d:06:70:d1:fd:88:86:6f:7b:a0:00:2f:7c:33:af:
77:7d:28:62:61:27:31:2d:32:92:b1:5e:a5:92:0d:43:1b:0b:
a5:8c:d4:3a:bf:a5:ad:af:c9:ac:26:6a:01:07:22:4c:44:ab:
2e:02:cb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:56:17 2026 by rpki-client