Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
File: eJkRG_1wuRdE36Skn_kDs5HFwzI.mft (raw, json)
Hash identifier: WVwr6K2CmlUQc1nGqSE+tvycTZALti8/o7YeRpLeTj0=
Subject key identifier: EB:25:02:17:2D:4E:43:4B:13:C3:89:A2:DA:5B:3E:32:F1:13:C2:7C
Authority key identifier: 78:99:11:1B:FD:70:B9:17:44:DF:A4:A4:9F:F9:03:B3:91:C5:C3:32
Certificate issuer: /CN=7899111bfd70b91744dfa4a49ff903b391c5c332
Certificate serial: 01A12DA0F1A5A39AFBA8BEDC5926863E7074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
Manifest number: 0229
Signing time: Mon 12 Oct 2026 01:01:24 +0000
Manifest this update: Mon 12 Oct 2026 01:01:24 +0000
Manifest next update: Tue 13 Oct 2026 01:01:24 +0000
Files and hashes: 1: SKxfM8vS1jvBfGto0Ag-UhpANXY.roa (hash: WZ4CjS7lVOS4kiwT/i3rrLplH1i4HTFPFyS0A+9Y2ZQ=)
2: eJkRG_1wuRdE36Skn_kDs5HFwzI.crl (hash: 2z4Ovvh0deQoZTQ+6UEZEStc1BprDxMAM4FvCLiTkjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:a0:f1:a5:a3:9a:fb:a8:be:dc:59:26:86:3e:70:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7899111bfd70b91744dfa4a49ff903b391c5c332
Validity
Not Before: Oct 12 01:01:24 2026 GMT
Not After : Oct 13 01:01:24 2026 GMT
Subject: CN=eb2502172d4e434b13c389a2da5b3e32f113c27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:57:8d:17:37:d2:c0:62:86:9b:58:25:0f:d5:
7a:42:ef:1c:91:25:fc:fe:ab:85:2e:55:af:3b:c8:
a0:f7:a8:8a:72:8c:3e:17:2e:a4:8f:84:d4:08:52:
07:cc:6e:26:95:27:61:c1:4c:3c:e3:1f:02:51:ab:
9d:2d:25:ad:89:50:11:13:0c:4d:94:77:64:d1:ed:
2c:7b:7b:ff:25:0c:3c:76:10:6d:9e:21:a8:c2:19:
73:c5:c3:f5:42:07:e1:d8:99:86:8d:7b:c7:09:c4:
6a:d1:8e:72:c2:b7:05:98:a5:af:69:cb:04:67:42:
a0:3d:60:07:f7:6d:11:32:db:f0:c6:b6:d3:e2:66:
f6:fd:5e:2b:6c:bc:43:03:9e:0b:ba:28:11:b7:9d:
1f:df:0d:b4:e5:30:e2:76:f4:b5:51:3d:f8:e1:39:
d9:f4:57:12:1d:33:d6:eb:52:50:1f:56:d3:63:eb:
be:ab:9a:9d:41:00:23:aa:00:e7:60:89:a3:0e:25:
61:d9:6e:25:fd:7d:63:ae:f3:01:46:05:40:c7:e0:
12:98:ef:73:60:bb:1c:35:e6:7e:da:31:e2:51:01:
e7:48:38:fa:35:1c:72:3b:64:e0:50:8a:1d:d2:a0:
cc:71:e2:15:68:81:0f:bf:71:fc:9b:3b:56:e4:9f:
62:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:25:02:17:2D:4E:43:4B:13:C3:89:A2:DA:5B:3E:32:F1:13:C2:7C
X509v3 Authority Key Identifier:
keyid:78:99:11:1B:FD:70:B9:17:44:DF:A4:A4:9F:F9:03:B3:91:C5:C3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:07:87:f5:a8:2b:07:a9:ea:56:c5:ca:7b:2a:d5:1d:fc:70:
27:7f:a0:25:c1:ef:45:3e:1e:8a:93:9e:82:94:b2:ca:fa:07:
33:6c:2f:ed:ff:51:2e:34:5f:b4:9d:48:9d:6b:b4:6d:9b:0c:
d4:d8:a1:2b:e4:2f:37:78:b4:09:e1:d7:45:74:2e:7d:ea:b1:
76:2e:c0:fb:72:6f:7b:1e:28:66:af:27:a1:f4:ba:db:c6:49:
39:7b:bc:4e:1e:cd:bf:ce:e1:40:52:ea:e1:51:4d:3f:5e:d4:
d1:07:61:1d:52:e1:b4:17:17:db:7c:48:da:50:d8:0e:f9:30:
8c:c8:40:e4:7f:09:ad:4a:ca:5e:2b:10:20:a3:55:4e:68:e4:
97:14:b2:d8:6e:64:f6:57:d7:49:13:11:ca:68:36:cd:cb:1b:
e0:aa:07:7f:72:d7:7e:b4:22:dd:e2:39:a4:b1:57:4b:57:47:
f9:df:13:5e:45:db:57:17:02:68:d8:25:1d:0f:9e:53:f8:34:
d0:f5:f8:86:51:9e:9a:5d:c9:6b:0b:63:c3:35:85:a9:0f:7e:
12:8a:03:92:d1:43:4b:b8:43:80:40:c3:0e:c6:e7:6c:8e:4a:
21:47:58:dc:d7:05:e5:b9:e4:3a:74:95:ee:57:a9:f6:99:83:
f0:b7:48:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:39:32 2026 by rpki-client