Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
File: eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json)
Hash identifier: XKYZvNuvCSFHozzkg+wU/v9UfiBAcYoRi/APj2+V7xo=
Subject key identifier: 48:9D:D4:86:77:DC:02:F2:87:E7:FA:EC:DB:22:8C:01:04:4C:92:09
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Certificate issuer: /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial: 01A12DD774F7E1C76C02E670D063560A0A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
Manifest number: 1078
Signing time: Mon 12 Oct 2026 02:00:57 +0000
Manifest this update: Mon 12 Oct 2026 02:00:57 +0000
Manifest next update: Tue 13 Oct 2026 02:00:57 +0000
Files and hashes: 1: 0YhVfBsZbIu7A5iYA94enjAmzkk.roa (hash: HsOjFTzanM+rOeHfu6ck2x7MS7PSUK04NQ5MvXhA+ZA=)
2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: zCOKrpQEJEQPOItbVHNpFaLv0JWYJbSRynfCYJ5HSRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:d7:74:f7:e1:c7:6c:02:e6:70:d0:63:56:0a:0a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Validity
Not Before: Oct 12 02:00:57 2026 GMT
Not After : Oct 13 02:00:57 2026 GMT
Subject: CN=489dd48677dc02f287e7faecdb228c01044c9209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e0:85:db:81:f6:d1:41:05:0e:63:b4:85:1e:
72:44:52:b6:16:3e:12:90:43:e2:13:2e:52:73:72:
9b:72:9d:76:ed:1f:40:d1:fc:83:8a:0b:66:71:0f:
f5:98:8d:5b:eb:8f:b0:4a:6e:b1:9e:0a:4f:a0:9d:
1f:4c:2b:cf:98:54:b0:d0:8f:84:3a:15:c8:f0:24:
34:a6:b4:88:c5:e1:a8:c7:84:84:c7:1e:3f:d7:58:
f0:cb:ff:d5:ff:5d:ce:93:a6:2f:8f:69:ce:1e:91:
e3:e8:8a:72:f6:12:06:b0:c5:a3:86:e9:2c:77:3f:
1a:8f:32:ce:fa:11:9e:8f:aa:14:ec:f5:88:14:9a:
61:8b:c1:8b:6c:6e:e1:92:b8:58:a4:e0:b2:5b:d7:
15:ec:fe:62:b8:8e:65:62:dc:3c:43:2f:d5:7c:cc:
74:b5:62:5e:b0:67:b5:c2:1c:cb:25:f8:7c:ce:dd:
58:ae:b3:67:03:c6:37:e2:4e:0c:0c:fe:6c:3e:12:
47:d3:ec:69:8f:4b:48:ef:eb:f1:5d:ac:7a:9b:45:
df:76:92:fc:90:70:2b:56:3c:bd:a8:28:66:c3:74:
bb:a9:85:ff:f4:ae:86:96:34:39:17:ba:32:d9:5d:
2d:a1:f8:3d:f5:c9:cb:98:3c:2f:36:27:bc:6d:40:
7f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9D:D4:86:77:DC:02:F2:87:E7:FA:EC:DB:22:8C:01:04:4C:92:09
X509v3 Authority Key Identifier:
keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:88:18:d7:40:95:c8:8f:b1:52:1f:b4:aa:4e:b7:c7:78:b2:
02:b0:f9:e0:47:4d:dd:a0:81:6a:1c:70:e5:db:b6:38:77:5a:
d8:fe:51:9c:22:8f:20:56:20:39:9e:54:f1:10:fc:7e:c3:b0:
d7:83:1e:c2:a0:42:00:c0:b8:1f:14:3f:8e:e4:f4:f4:af:14:
03:c4:15:51:0a:c6:cf:76:08:25:08:8f:7d:73:fa:ad:5d:4a:
3b:2b:2c:ca:64:00:13:55:e9:b7:07:10:aa:0f:1c:ad:28:a0:
b3:b7:27:0d:2d:f6:ee:c5:bd:c5:b7:7c:08:ac:42:d0:71:0b:
9a:9d:a1:d3:a8:8a:fc:68:12:67:9b:89:79:ba:09:13:c0:72:
af:e7:24:7c:9c:44:4d:3b:fc:96:b3:5b:b6:51:7f:12:ad:25:
e7:97:6c:35:99:4c:a4:ef:42:fc:0a:24:df:c7:f6:8f:73:76:
f9:a2:be:cb:8a:f6:f3:5c:3c:f7:24:d4:72:77:b4:8c:83:3a:
c8:b3:25:08:72:c8:01:34:20:31:45:eb:85:dd:a1:3f:36:8a:
a0:6a:16:99:aa:f4:9e:82:50:3c:a3:c2:45:ee:f3:79:7a:c7:
39:34:33:c8:12:5d:ca:29:89:0c:35:85:d0:8d:1b:b2:9b:e7:
d9:fe:1f:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEt13T34cdsAuZw0GNWCgpFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZmY5YTMzMGQ1M2Q2MjEyMzRhNmQxNDk4Y2U1YTQzMzAz
ZTllZjkwHhcNMjYxMDEyMDIwMDU3WhcNMjYxMDEzMDIwMDU3WjAzMTEwLwYDVQQD
Eyg0ODlkZDQ4Njc3ZGMwMmYyODdlN2ZhZWNkYjIyOGMwMTA0NGM5MjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+CF24H20UEFDmO0hR5yRFK2Fj4S
kEPiEy5Sc3Kbcp127R9A0fyDigtmcQ/1mI1b64+wSm6xngpPoJ0fTCvPmFSw0I+E
OhXI8CQ0prSIxeGox4SExx4/11jwy//V/13Ok6Yvj2nOHpHj6Ipy9hIGsMWjhuks
dz8ajzLO+hGej6oU7PWIFJphi8GLbG7hkrhYpOCyW9cV7P5iuI5lYtw8Qy/VfMx0
tWJesGe1whzLJfh8zt1YrrNnA8Y34k4MDP5sPhJH0+xpj0tI7+vxXax6m0XfdpL8
kHArVjy9qChmw3S7qYX/9K6GljQ5F7oy2V0tofg99cnLmDwvNie8bUB/vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEid1IZ33ALyh+f67NsijAEETJIJMB8GA1UdIwQY
MBaAFHj/mjMNU9YhI0ptFJjOWkMwPp75MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVAtYU13MVQxaUVqU20wVW1NNWFRekEtbnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82N2RkOWEtMzdlMS00Mjg1LTk1ZGEt
ZjI4OGQyMDk3YTMwLzEvZVAtYU13MVQxaUVqU20wVW1NNWFRekEtbnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82N2RkOWEtMzdlMS00Mjg1LTk1ZGEtZjI4OGQyMDk3YTMw
LzEvZVAtYU13MVQxaUVqU20wVW1NNWFRekEtbnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4gY10CV
yI+xUh+0qk63x3iyArD54EdN3aCBahxw5du2OHda2P5RnCKPIFYgOZ5U8RD8fsOw
14MewqBCAMC4HxQ/juT09K8UA8QVUQrGz3YIJQiPfXP6rV1KOyssymQAE1XptwcQ
qg8crSigs7cnDS327sW9xbd8CKxC0HELmp2h06iK/GgSZ5uJeboJE8Byr+ckfJxE
TTv8lrNbtlF/Eq0l55dsNZlMpO9C/Aok38f2j3N2+aK+y4r281w89yTUcne0jIM6
yLMlCHLIATQgMUXrhd2hPzaKoGoWmar0noJQPKPCRe7zeXrHOTQzyBJdyimJDDWF
0I0bspvn2f4fDA==
-----END CERTIFICATE-----
Generated at Mon Oct 12 10:21:51 2026 by rpki-client