Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
File: eXpIzBPiAOLT84r4MxjRvK9vYzE.mft (raw, json)
Hash identifier: 3jtEI/PeLwrL29oXcexEjaKAdpbvbKz3PkLwFXGt3ZU=
Subject key identifier: 40:AC:86:A8:4F:A0:1D:6D:E5:F7:F0:77:26:1E:DE:12:25:A7:78:EC
Authority key identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
Certificate issuer: /CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Certificate serial: 01A12B0DC1F7A0D8C32C17F53F0C950002DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
Manifest number: 1A9F
Signing time: Sun 11 Oct 2026 13:01:24 +0000
Manifest this update: Sun 11 Oct 2026 13:01:24 +0000
Manifest next update: Mon 12 Oct 2026 13:01:24 +0000
Files and hashes: 1: 1-E7nKdbSLj90sJYSF-rtPPWicJo.roa (hash: OLXm33BZRZAegBXkAQ3qDZFLZUsJCzl2SnjPvzxon3E=)
2: CM5wA7_Mj4XNK2JxKM8h4YQ6N-c.roa (hash: vqRJimrGP27MPdv4zjttCm0+Djwer+Zrgp7ip8OhqNI=)
3: aXZJm2DRkarUBrcUWpvt5lbMMOs.roa (hash: ui+2DkUuL1ctf7u/JTyn3ysys3DhDdpt7LeK9bC8l08=)
4: eXpIzBPiAOLT84r4MxjRvK9vYzE.crl (hash: HoL29gYTNTziCVX4qaQM2SVGeB5aBvT/T0tXWzQdDe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:0d:c1:f7:a0:d8:c3:2c:17:f5:3f:0c:95:00:02:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Validity
Not Before: Oct 11 13:01:24 2026 GMT
Not After : Oct 12 13:01:24 2026 GMT
Subject: CN=40ac86a84fa01d6de5f7f077261ede1225a778ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:bf:96:0b:25:7b:b4:41:64:05:94:c0:7b:
40:d4:e3:ce:97:35:8d:05:73:69:6c:d8:31:18:b3:
44:f6:de:7a:83:9f:1d:2c:c8:2b:17:de:0e:c9:c4:
a4:8c:9f:a7:50:23:e5:53:63:5f:c2:73:8e:ae:91:
f9:f3:60:70:77:08:c3:94:a8:7d:99:91:9d:0d:ee:
5b:50:79:ab:da:04:3c:56:02:67:49:aa:f9:2d:c5:
75:cb:1d:28:f9:42:f2:3b:bc:03:f8:ce:8a:31:f7:
14:a3:90:76:fc:c3:8e:fd:ba:bc:e6:1a:0a:6f:97:
b0:a9:3d:a6:90:c0:8b:18:a0:4a:31:7d:6d:a4:1e:
c9:aa:0a:21:59:20:20:87:1d:a7:46:25:64:87:c6:
7b:30:9c:21:8d:f8:76:9a:db:53:4a:cd:09:22:81:
94:ca:e2:be:eb:92:be:7a:f8:f5:37:c5:eb:be:40:
3c:41:03:57:cd:40:fc:4e:e8:61:91:d9:ae:f6:fb:
db:a8:98:00:99:bd:85:60:83:e4:fb:46:49:b1:93:
7e:49:fc:d5:14:34:f6:0a:f1:30:a7:db:bf:34:2f:
a2:d3:ce:fa:b3:07:84:f6:7b:63:a8:8a:f9:ce:68:
4c:4a:61:ef:e6:e7:ec:e4:ef:e1:75:b8:d9:4c:40:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AC:86:A8:4F:A0:1D:6D:E5:F7:F0:77:26:1E:DE:12:25:A7:78:EC
X509v3 Authority Key Identifier:
keyid:79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:4c:de:40:ee:9c:39:e7:fb:4d:9b:be:f2:18:03:8d:ee:01:
9e:71:93:98:2a:f9:3b:48:c7:25:99:26:bb:8f:f2:05:7b:9f:
59:1c:64:2e:e1:dc:d0:3c:61:12:fc:97:a8:99:a4:09:ab:86:
6c:a0:2a:c9:33:bd:ab:0a:0e:6e:9e:48:43:15:71:4a:55:19:
be:0e:f9:49:9b:7f:2d:26:04:2c:d7:13:99:f1:71:a6:73:60:
91:0f:d4:9d:ae:b7:f0:82:ac:77:d9:e6:6c:22:f3:e8:30:41:
d4:cd:f4:c4:77:00:c5:93:f5:15:56:c6:4b:24:b0:51:bc:b0:
51:23:b1:c7:ac:17:07:63:44:91:ea:0e:20:32:0d:f0:02:17:
8a:7d:52:81:30:11:5f:4b:5b:63:b5:c7:86:b8:f7:93:96:4c:
26:03:35:6c:31:02:92:d8:12:dd:60:18:a0:44:a5:4e:64:8d:
39:cb:3b:fd:f0:8d:d0:21:5a:7f:19:76:7b:26:25:8d:75:76:
dc:0d:18:34:1f:a9:77:2e:d5:5e:6f:64:aa:af:26:0f:93:4c:
35:a5:ec:19:36:45:01:f0:1f:6a:a0:97:de:2b:98:5c:b0:c0:
18:41:3d:fa:7c:76:92:5b:13:55:37:a2:d4:d2:c6:9b:dd:62:
51:1e:0f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:29:20 2026 by rpki-client