Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
File: eaHQ6nMPz8shSZlceCib8tbRhvw.mft (raw, json)
Hash identifier: Z092XzG5ot7sgNlzOUrg1d5k0eaW7YScbfoUC6yGpS8=
Subject key identifier: 2B:82:1A:F1:B5:3F:ED:5C:C0:B9:67:C0:67:72:82:D1:16:9F:C2:92
Authority key identifier: 79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC
Certificate issuer: /CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
Certificate serial: 01A0D12435F11FD2B741C12B2F667E8B7C0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
Manifest number: 08DC
Signing time: Thu 24 Sep 2026 02:00:06 +0000
Manifest this update: Thu 24 Sep 2026 02:00:06 +0000
Manifest next update: Fri 25 Sep 2026 02:00:06 +0000
Files and hashes: 1: FlcJyZz4eln8fJdce2z7NQ0wMnc.roa (hash: o606d+6FRBkMadGSOs+1vJgoFljdYGR0aPQGsULNpfk=)
2: RDXvE_B2DWqvEjcyr5sBg8RdScs.roa (hash: aY5giOaeNskYQX5A+kweygYFqHAOYhd++2QIYXY/F2E=)
3: eaHQ6nMPz8shSZlceCib8tbRhvw.crl (hash: 6xK/K0VGyTsGYppMX49Nr7rsDvS4tMj7IxKlEsu6yCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:35:f1:1f:d2:b7:41:c1:2b:2f:66:7e:8b:7c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
Validity
Not Before: Sep 24 02:00:06 2026 GMT
Not After : Sep 25 02:00:06 2026 GMT
Subject: CN=2b821af1b53fed5cc0b967c0677282d1169fc292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:20:e7:e4:9f:02:6a:04:d9:53:d0:0b:4a:ac:
a7:45:d7:96:d4:9b:00:2c:2d:83:80:4d:55:79:cf:
18:24:98:f1:7d:f6:2c:71:6b:50:18:3b:22:20:a2:
ca:af:cf:fb:8b:e5:2b:8e:57:03:0b:04:7a:df:11:
e3:c6:b9:cd:9c:9f:de:df:8a:2c:de:f0:c9:b4:8f:
3d:1d:d8:77:65:cb:50:12:fa:7a:57:57:39:a9:62:
9f:df:97:aa:26:54:ae:1e:e1:35:ff:a6:2e:df:7b:
98:58:05:7c:75:5c:7a:a8:61:2b:d6:c2:ea:dc:96:
0f:2a:44:51:de:98:7e:24:8b:8a:fb:8b:6b:dc:b4:
c6:88:ae:c6:22:4b:e5:d9:ea:52:59:c3:c2:89:d6:
01:07:3f:29:35:f0:53:dc:a8:4c:2c:f3:e9:e1:0d:
35:83:9a:b7:f5:b5:e5:70:76:73:d2:58:46:63:1c:
4a:ec:d3:46:27:f9:44:ec:8f:ea:fb:45:dd:8f:a9:
90:63:cf:df:c9:6d:92:b4:2a:a4:f6:47:38:40:e4:
16:2a:8c:d0:f0:0f:ba:d0:65:33:d3:e2:56:2b:9e:
11:0b:43:35:11:10:76:c3:41:ba:b3:4f:d5:03:d1:
6d:5f:57:34:3e:d7:79:c2:68:7f:b3:3b:0d:be:19:
d8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:82:1A:F1:B5:3F:ED:5C:C0:B9:67:C0:67:72:82:D1:16:9F:C2:92
X509v3 Authority Key Identifier:
keyid:79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c6:19:b8:24:17:99:ff:92:6a:3e:1b:f9:05:89:2b:91:1f:
52:cf:c4:00:d0:96:ab:b6:69:51:05:30:14:64:be:a4:fd:56:
ea:67:2a:b0:7e:06:ab:2e:d6:0f:f3:72:cf:6e:c4:83:36:b2:
82:9e:35:62:43:d7:86:c9:fc:84:d9:8f:45:66:9b:b4:6b:71:
01:73:29:dc:6d:12:a6:f8:55:b8:ee:04:fb:e8:f4:cc:fb:a5:
08:1b:48:66:e1:ea:99:0c:cf:bc:47:dc:73:b3:70:8b:d1:e7:
7a:fb:52:2d:33:31:e9:d8:f3:d8:2b:08:57:01:07:a4:f7:07:
f9:93:7d:0d:ab:21:84:aa:9a:91:f8:32:c4:ea:47:c9:a0:52:
ab:3f:23:a1:f3:c9:26:23:f6:4a:c4:82:63:a7:b9:01:21:c4:
00:4d:4d:ce:d3:8d:1d:28:8c:f0:be:17:d3:e5:7f:56:8a:73:
90:94:7f:31:f2:66:7b:95:7e:de:bd:8b:20:b2:8f:b1:c1:7c:
81:36:09:6f:4d:2c:6a:af:f6:0e:c5:66:14:60:ef:60:7a:78:
51:c2:e0:c9:e7:b6:fc:fa:c5:44:b3:83:a3:fe:54:c5:a3:25:
9b:00:dc:6b:cd:c8:e8:54:7e:1c:f3:79:f2:8a:ef:db:7c:e6:
33:f0:7c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:57:12 2026 by rpki-client