Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/eO2JedPoFMUVCZPpyAidJVQm3wU.mft
File: eO2JedPoFMUVCZPpyAidJVQm3wU.mft (raw, json)
Hash identifier: XMTl2cj2q3xxI15Ydlb4adWEklsUDTYTgR/gObLi2/Y=
Subject key identifier: 74:BA:45:20:37:3A:7A:F7:A7:7E:D2:E2:BD:83:2F:E2:E7:86:01:BD
Authority key identifier: 78:ED:89:79:D3:E8:14:C5:15:09:93:E9:C8:08:9D:25:54:26:DF:05
Certificate issuer: /CN=78ed8979d3e814c5150993e9c8089d255426df05
Certificate serial: 01A0C10CE749559B3A1EEB3D49C6FC9E7AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eO2JedPoFMUVCZPpyAidJVQm3wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/eO2JedPoFMUVCZPpyAidJVQm3wU.mft
Manifest number: 14
Signing time: Sun 20 Sep 2026 23:00:43 +0000
Manifest this update: Sun 20 Sep 2026 23:00:43 +0000
Manifest next update: Mon 21 Sep 2026 23:00:43 +0000
Files and hashes: 1: RIy1eEWM1Cp_Qanw7hsjVqWm8sw.roa (hash: UZQxNkbTTX73jZ3JuNG/u4WDtmsa3ERMpqjLQ9cHbqw=)
2: eO2JedPoFMUVCZPpyAidJVQm3wU.crl (hash: +a6rc7KWQPjFUzsNJUKwzRn62lF8Kg0JX7BZVbWBTCU=)
3: wLTabeG6W9scPK-KgjhmQT_cofg.roa (hash: knKii4to9f3vWO2m5lSB+g8YQoY/mZRmcxoRXUr8ZI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/eO2JedPoFMUVCZPpyAidJVQm3wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/eO2JedPoFMUVCZPpyAidJVQm3wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eO2JedPoFMUVCZPpyAidJVQm3wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0c:e7:49:55:9b:3a:1e:eb:3d:49:c6:fc:9e:7a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ed8979d3e814c5150993e9c8089d255426df05
Validity
Not Before: Sep 20 23:00:43 2026 GMT
Not After : Sep 21 23:00:43 2026 GMT
Subject: CN=74ba4520373a7af7a77ed2e2bd832fe2e78601bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2a:44:4c:b2:59:f9:02:e1:78:86:0c:58:a9:
75:1f:bb:ce:e2:bf:f6:5c:27:d7:1c:e7:47:dd:f5:
f9:70:5c:3e:d9:35:c1:65:49:c5:c0:f7:73:ea:bb:
16:58:91:35:86:3e:e8:40:4c:32:2f:c6:0a:6d:45:
c3:f8:a7:47:22:3a:e3:89:a6:26:7b:d6:ab:57:11:
78:1b:9a:04:cf:76:02:c2:9a:28:a5:ba:cb:e9:9a:
91:b9:8a:32:7f:e7:29:ae:5a:dc:70:bf:18:00:c0:
d8:23:ba:b6:0b:ca:00:88:f1:09:23:f7:97:37:60:
7b:29:95:43:ec:e3:87:38:4d:c8:b5:33:59:58:e5:
2d:91:4a:20:8e:7b:18:04:f0:52:57:7d:e4:de:36:
4e:fa:3d:b4:48:58:2d:18:26:4d:b6:11:88:e5:d6:
aa:a0:39:0b:b0:77:a1:d8:12:5e:ee:41:93:25:83:
49:05:30:59:d5:80:d5:2a:04:10:e6:78:b3:79:ab:
5c:70:b9:97:ef:d1:32:db:ba:df:39:89:35:23:a0:
c5:cd:82:22:a5:41:81:cc:d1:12:38:23:b4:04:58:
53:56:1c:6a:a5:ab:a9:99:ca:f6:ea:d4:9a:dd:29:
d7:d8:72:d4:b4:4b:0b:f3:7f:8b:ea:88:90:2d:c1:
a1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BA:45:20:37:3A:7A:F7:A7:7E:D2:E2:BD:83:2F:E2:E7:86:01:BD
X509v3 Authority Key Identifier:
keyid:78:ED:89:79:D3:E8:14:C5:15:09:93:E9:C8:08:9D:25:54:26:DF:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eO2JedPoFMUVCZPpyAidJVQm3wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/eO2JedPoFMUVCZPpyAidJVQm3wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/eO2JedPoFMUVCZPpyAidJVQm3wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:47:42:1e:87:2d:38:51:20:e6:03:19:9e:35:26:ea:3c:fd:
00:ca:89:07:dc:5d:a9:b0:71:68:2e:ef:8a:e2:d2:f8:41:77:
57:8c:fd:bf:b8:b9:cf:de:9c:d2:46:62:c0:16:14:18:c5:4f:
1c:4a:20:e4:11:83:40:d5:10:01:85:2b:59:22:91:e6:f6:b8:
2a:0c:59:fa:de:aa:5f:2e:b8:14:7a:43:0d:73:ff:b4:f9:c1:
22:25:cc:da:8a:27:96:b8:55:56:c0:64:dc:2a:5c:fb:0f:f4:
9f:52:b5:88:7f:66:e9:74:93:07:53:3e:0d:ef:c5:0c:55:05:
a0:14:ff:c8:0e:e0:44:cd:77:54:db:0c:06:2a:4b:25:35:22:
8f:b4:c0:2b:20:f3:ae:02:d0:7c:4e:a9:43:2f:b8:90:bb:a9:
6c:c8:ed:70:1a:19:df:a9:9a:cc:8a:3c:cc:f9:b9:65:23:76:
20:12:b1:5f:b0:01:78:25:8f:a4:ca:5a:f3:48:53:e7:4b:4c:
9f:cf:f5:65:ab:2a:2f:48:c3:7b:f0:28:1e:0d:6a:30:6d:36:
67:6d:f7:ae:8c:93:8c:de:20:43:b4:89:a7:c9:55:66:34:3b:
85:c3:38:ab:9d:48:c2:c1:7b:17:5d:c6:79:67:a5:24:17:4c:
19:53:da:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:43:01 2026 by rpki-client