Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
File: ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft (raw, json)
Hash identifier: UisgZ7Qy/q01PCpHy1iVYq9+UK7unStTd3iPoCOlBnE=
Subject key identifier: A6:D3:B3:6D:BF:F2:27:96:46:BC:8C:DD:71:9A:05:E2:AC:A7:BC:37
Authority key identifier: 79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
Certificate issuer: /CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Certificate serial: 01A0E4756DFD3DDD8A44F6F21E2F59AF33D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
Manifest number: 1A64
Signing time: Sun 27 Sep 2026 20:01:36 +0000
Manifest this update: Sun 27 Sep 2026 20:01:36 +0000
Manifest next update: Mon 28 Sep 2026 20:01:36 +0000
Files and hashes: 1: DHHjGMt7-3BtKh8jbUtHgjtd7Zk.roa (hash: AGrA4B/DyddJdpJQ+MaOxYEeNzNiJWqbWYvLiR+2oDU=)
2: ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl (hash: BjvxL40IOHLI5VjtSKPNpBS8INRuT95vucb2bk8iy74=)
3: ynu8tUDUEPguQB0iGrynuoA2iPw.roa (hash: johc23xrqxWrSzPXwvlfoLCZ1FTv0QQ+G+sZUcEYX8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:75:6d:fd:3d:dd:8a:44:f6:f2:1e:2f:59:af:33:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Validity
Not Before: Sep 27 20:01:36 2026 GMT
Not After : Sep 28 20:01:36 2026 GMT
Subject: CN=a6d3b36dbff2279646bc8cdd719a05e2aca7bc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b2:06:e6:aa:da:68:84:fe:a2:0d:99:02:24:
0c:72:36:be:d2:c2:19:83:98:44:f1:78:bf:09:a0:
34:57:23:54:3e:30:ba:8a:20:fd:2d:7c:c3:b2:88:
4d:13:99:f2:40:63:7f:40:d2:2e:72:cd:d4:69:2f:
76:16:cd:e8:fe:1c:3b:80:9f:f8:e7:b0:37:d4:30:
19:93:14:ea:b7:c9:bf:c5:c1:65:09:57:96:5b:01:
39:f9:c9:d5:15:1f:75:1a:de:e8:0c:50:9e:1f:ff:
26:12:15:c6:26:09:aa:aa:34:fc:f0:c4:db:d2:e0:
3d:f6:7f:06:1b:c9:79:10:21:6d:76:1e:94:ea:78:
14:72:71:2a:d1:0f:83:71:30:57:3a:a0:c1:cf:36:
5a:ad:6e:28:78:48:9c:34:34:14:d1:4d:60:87:7d:
a7:ae:47:35:62:ec:81:e7:fc:ef:f2:98:1d:96:99:
b7:54:e5:9c:20:90:46:c1:6c:de:c6:ea:7f:fc:a8:
11:c6:47:eb:1c:fc:37:46:85:76:23:86:fe:00:95:
ea:7c:08:26:48:1a:9e:f3:d3:48:88:86:b4:c3:b0:
2c:08:ea:99:5e:c6:07:fc:33:f6:f9:af:10:45:c0:
41:29:0e:23:a5:e7:95:a8:f6:31:c2:65:5e:4e:2e:
e9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D3:B3:6D:BF:F2:27:96:46:BC:8C:DD:71:9A:05:E2:AC:A7:BC:37
X509v3 Authority Key Identifier:
keyid:79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d7:2f:61:88:eb:2a:57:fc:75:89:cf:19:71:25:27:62:54:
46:0e:ed:b7:fa:13:5c:5d:7a:e9:e4:a2:75:a3:9f:44:42:e2:
15:89:1e:6c:8d:4b:94:39:8a:12:26:bc:ed:ab:36:68:f0:a6:
05:f5:7a:f4:e4:4a:e0:58:01:5d:85:2c:7f:ac:16:ef:a2:3a:
a6:b8:d1:ed:1a:14:bd:ca:47:0f:a0:39:99:83:35:ef:8d:e3:
85:22:01:6f:39:a8:13:95:10:a0:1f:b5:43:e0:b7:fc:55:74:
e5:8f:83:55:ea:06:4b:3a:59:fc:f6:22:8a:4d:3b:c3:32:9d:
bd:14:d1:a3:2e:3b:73:b2:95:86:b4:31:d7:c3:69:c9:4a:f7:
e2:d0:87:10:4b:76:23:3e:31:c8:38:58:59:c4:58:73:37:0c:
90:c9:88:97:12:9a:4f:bd:22:b7:a2:91:d4:96:85:7b:0d:17:
72:4f:4f:e6:b3:78:a6:0d:fa:d4:54:01:ef:90:1d:fa:3d:13:
2f:f1:4b:38:11:2e:ba:ca:25:ee:9d:0c:fd:c4:15:19:2e:03:
fa:4f:eb:e5:6a:12:7b:c4:87:03:d5:ee:59:02:d2:2a:8d:12:
a5:35:01:8b:6a:ed:4d:73:b5:5a:5a:13:ff:19:59:7a:d0:2c:
20:5a:4f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 02:40:58 2026 by rpki-client