Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
File: ebUTSxH5QJEfD_MVyUjapT9zLuA.mft (raw, json)
Hash identifier: j77Cyw7fDNSBv4mIeY/LS4joy+cfHgi/SAhdDHg2q8Y=
Subject key identifier: 9A:35:D1:E6:15:CD:E1:19:92:4A:94:2C:B5:0F:7F:E3:7B:E0:DA:8C
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Certificate issuer: /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial: 01A1249DE43C893381C7B5986F839AF7A918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
Manifest number: 1AAF
Signing time: Sat 10 Oct 2026 07:01:29 +0000
Manifest this update: Sat 10 Oct 2026 07:01:29 +0000
Manifest next update: Sun 11 Oct 2026 07:01:29 +0000
Files and hashes: 1: NcDn26l6X1jaA0rTBfljUSQkQrA.roa (hash: DBP3tSVruTN+BPgGFJB1Pkmv6KFos1kOIWJAln1+ovw=)
2: ebUTSxH5QJEfD_MVyUjapT9zLuA.crl (hash: HOpIhS2wY0urJqnlHwMb1UZDBGyf5ilRuaS3HKtXJUU=)
3: et0olEFrB1y2vEuy1NWpl0biftA.roa (hash: o7zVoM3aaUFP3OzR2+EuOIiIDki9aymtbkBZVSrLD3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:9d:e4:3c:89:33:81:c7:b5:98:6f:83:9a:f7:a9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
Validity
Not Before: Oct 10 07:01:29 2026 GMT
Not After : Oct 11 07:01:29 2026 GMT
Subject: CN=9a35d1e615cde119924a942cb50f7fe37be0da8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:d4:59:9e:1e:9d:8d:1e:eb:01:62:17:56:
09:94:bc:63:cb:d9:fe:75:c3:a0:11:f5:e4:8a:9e:
37:75:e8:b4:fd:f9:fc:a0:1f:24:6e:bf:be:60:da:
fe:44:ee:fc:e9:0c:94:88:90:2d:43:2c:51:1a:1f:
49:a2:18:34:f7:9d:24:87:84:fb:a3:32:45:a9:0e:
2e:b8:f8:f2:f4:45:f8:98:2e:3f:1f:97:64:78:b9:
a1:7b:d8:72:ec:54:30:8d:43:a5:98:2b:5d:32:6c:
f5:e1:79:43:55:43:23:17:df:6c:3c:19:e4:3a:bd:
52:a0:be:f3:18:2a:ad:fc:ff:47:69:bf:f2:c7:ff:
92:62:ca:26:e5:8f:08:fe:08:0d:a5:2a:80:e6:53:
86:71:e6:bf:63:ff:88:be:7e:9f:0e:42:25:e8:b7:
17:aa:5b:28:b1:db:4a:e8:b2:59:b1:2d:3f:57:26:
06:01:83:02:77:32:c7:7b:69:ff:7c:3a:c9:51:c1:
c6:9f:b3:35:0b:c1:37:24:24:db:6a:ab:27:6d:cf:
75:69:04:10:9d:f7:63:46:d4:8d:9a:74:0d:2e:08:
6c:ef:79:d3:8e:1d:47:06:38:54:f5:c5:74:3c:6e:
05:a7:d9:e1:3d:15:47:15:2e:f0:3e:b7:0f:42:e3:
77:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:35:D1:E6:15:CD:E1:19:92:4A:94:2C:B5:0F:7F:E3:7B:E0:DA:8C
X509v3 Authority Key Identifier:
keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a9:91:5b:de:22:6b:62:85:d1:0a:cb:56:fa:9a:40:78:c3:
16:ee:c7:b2:c5:1c:4a:9e:dd:5f:fc:ca:bc:f8:61:d5:3f:09:
68:06:6b:c7:fc:f0:20:c8:5d:28:5c:6e:27:ab:59:8e:70:b7:
c9:d5:bc:64:fc:7a:7b:a5:e3:90:55:75:92:a4:20:f4:a5:3d:
18:6e:34:f2:17:1f:1e:48:97:42:e8:29:e7:96:16:3c:9a:35:
bb:38:00:61:1d:26:a5:8e:d0:5b:de:5f:9c:89:b3:88:73:b0:
b7:91:b6:36:d9:de:35:8b:ad:8d:bb:66:6f:0e:41:8a:8a:12:
84:5c:92:b7:07:42:12:f4:fe:cf:89:bb:c9:11:70:0e:e5:6a:
c7:91:e6:37:7f:86:f6:ee:f5:44:d1:97:15:b8:cc:fa:bf:45:
62:9c:53:37:ff:c3:2d:4f:09:2e:40:b7:5e:24:49:3c:b4:e1:
6a:33:33:b0:6e:4f:a7:c0:de:30:a2:b0:90:64:47:cf:9d:c4:
c8:59:dc:ec:3e:4f:0b:13:6d:1c:a8:c9:77:c3:b5:59:6a:29:
e2:0e:48:bf:c5:ca:73:e7:83:db:b0:7d:f8:c7:1b:78:34:08:
50:24:f8:17:39:0e:30:19:2a:94:aa:bf:85:26:3e:0c:c2:7e:
62:c2:ec:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:49:39 2026 by rpki-client