Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
File: eIKlTbKvSuLgSGRxuNUPj6X36GE.mft (raw, json)
Hash identifier: yb3Ui6NPodlr+FyAIfp0MC/Kt8SPgCfZU/rW/0Hq6QU=
Subject key identifier: 12:41:DA:A7:E1:26:60:CE:7B:AB:4E:F9:0E:F8:52:1B:AA:64:BD:97
Authority key identifier: 78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61
Certificate issuer: /CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861
Certificate serial: 01A0D8DED83B88016D5FCEF3F90AD6E27CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
Manifest number: 038A
Signing time: Fri 25 Sep 2026 14:01:18 +0000
Manifest this update: Fri 25 Sep 2026 14:01:18 +0000
Manifest next update: Sat 26 Sep 2026 14:01:18 +0000
Files and hashes: 1: Sm4r_ZYf1TK-pmJlyZULA1V5IWY.roa (hash: WcFy3x0XhhNqCP1SgxYrQOhQpXbYRQ1TrY/aquk9Bhg=)
2: eIKlTbKvSuLgSGRxuNUPj6X36GE.crl (hash: 6Ir34ffnZw0eCuAxyXg753CIMm1RqSAXCAilg3rXzNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:d8:3b:88:01:6d:5f:ce:f3:f9:0a:d6:e2:7c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861
Validity
Not Before: Sep 25 14:01:18 2026 GMT
Not After : Sep 26 14:01:18 2026 GMT
Subject: CN=1241daa7e12660ce7bab4ef90ef8521baa64bd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:f5:e6:94:63:39:3a:76:0c:85:f4:69:f5:
9c:42:83:70:3d:52:36:32:da:78:0f:e4:6a:9d:36:
05:7f:7d:1f:8a:88:6a:50:e5:d1:63:f2:13:b8:31:
31:06:e6:c4:d2:95:23:c4:49:ab:06:7d:d4:ee:c4:
6f:15:f7:95:31:92:ae:6a:cb:44:e0:41:95:f4:d7:
f1:15:6d:9e:b3:ec:49:53:dd:53:b0:f7:a5:74:bf:
07:89:da:d5:ea:49:f0:7a:8e:a6:90:f5:e8:be:1d:
bf:16:28:8e:58:02:31:99:3c:1a:14:be:d6:9c:b0:
13:57:80:c2:0b:9a:4f:2e:ec:77:d8:dd:57:0b:c5:
2a:13:c9:2c:01:43:55:d2:40:60:4c:a7:7e:2e:6a:
1a:12:1f:aa:0c:74:78:53:82:2a:f8:29:3c:dd:6a:
a7:e6:bd:aa:4b:92:03:5e:82:20:b2:50:bc:d2:ca:
63:73:7c:a4:b3:e8:3b:5c:99:61:8b:2c:f7:09:31:
1d:4b:5c:33:5e:e2:0f:5c:12:fa:33:cd:15:4a:83:
2b:31:22:f9:12:23:d1:7e:e7:df:61:34:c6:8f:a3:
71:c1:8e:38:e4:57:f2:b0:78:c9:ae:c4:e3:ff:cf:
71:1c:cd:b7:29:2b:c7:ca:12:64:a0:59:e3:fc:50:
ce:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:41:DA:A7:E1:26:60:CE:7B:AB:4E:F9:0E:F8:52:1B:AA:64:BD:97
X509v3 Authority Key Identifier:
keyid:78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2e:71:2b:2a:2e:d1:c0:87:eb:5d:d7:27:51:66:bb:04:f8:
5e:4b:a7:2a:d1:52:ac:dd:7f:79:52:90:b9:69:cc:84:0b:f6:
66:bf:3c:87:c1:a2:70:42:ce:33:a5:4d:45:8d:c6:5d:7b:60:
36:a2:66:95:c7:3d:e3:fa:b1:94:d9:04:a0:48:3f:f3:63:fd:
00:e1:d8:17:f1:b0:c6:36:65:82:5e:fc:c3:1f:5e:65:a9:1a:
8c:25:9d:b3:9e:7b:24:f6:6f:b5:b4:8f:df:2f:d4:28:cc:ac:
38:ee:b2:c4:97:62:02:a8:70:fc:c1:c9:5f:e0:b4:93:ca:a0:
26:93:7b:1b:28:96:7e:b8:7c:8b:77:12:1a:b6:8a:3d:5e:4a:
55:0e:95:20:df:a5:ce:06:a1:1b:d0:be:92:b2:17:98:69:16:
71:e4:03:a3:fb:c8:c2:d8:b3:4a:61:61:3e:d4:cb:16:84:91:
c6:4c:5f:a9:5d:33:96:7f:b9:b8:61:a2:4f:0c:34:44:4b:b3:
7f:f7:0c:9b:8c:99:fb:30:74:72:f9:01:6a:af:21:4d:1d:d9:
9e:31:73:3f:15:80:de:8f:7f:11:36:db:19:7c:3c:77:53:c2:
ce:7c:7d:16:16:72:30:7c:19:65:a2:b3:75:cc:16:e3:3e:cd:
3b:8b:ff:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:38:59 2026 by rpki-client