Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
File: eA3hbu6UewqMdXFPxdpqAlnKG5A.mft (raw, json)
Hash identifier: 22RSi6zML3JhPbZeutrFKYKWU8MJ18DxBQ6JLAQyabY=
Subject key identifier: 07:37:87:D0:AD:09:4F:DF:A8:F4:11:19:91:7E:67:AC:92:99:8C:F9
Authority key identifier: 78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
Certificate issuer: /CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Certificate serial: 01A0C2FB7B86F55A000ADDF954B842AE6DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 08:00:56 +0000
Manifest this update: Mon 21 Sep 2026 08:00:56 +0000
Manifest next update: Tue 22 Sep 2026 08:00:56 +0000
Files and hashes: 1: FZe1NTnwQLaVEwa5nKYFvYoYApc.roa (hash: LyCQTa9+bhAOhJK8DWlraV43+IT6fvhRPfMpiyuGQl4=)
2: cbfZrsYOtkfTsvATyxudQ2krwIc.roa (hash: LFDpBEhBWBZpbTCNf+xEuq+zB73JcCsNfl6NSUtgKtY=)
3: eA3hbu6UewqMdXFPxdpqAlnKG5A.crl (hash: 4rXUPH/vTtbBCKzXqY4UWz/yvgrmDxfAkxaSWloeneI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:7b:86:f5:5a:00:0a:dd:f9:54:b8:42:ae:6d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780de16eee947b0a8c75714fc5da6a0259ca1b90
Validity
Not Before: Sep 21 08:00:56 2026 GMT
Not After : Sep 22 08:00:56 2026 GMT
Subject: CN=073787d0ad094fdfa8f41119917e67ac92998cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:68:b5:db:41:62:9c:d7:f0:37:42:30:7f:c2:
33:16:0d:39:3b:65:b0:88:8d:60:b0:90:2f:18:7a:
66:aa:e0:b1:05:8b:a9:3e:6b:63:df:d4:2c:0d:72:
09:e7:6a:60:6e:d3:1a:ac:e0:57:d9:1e:39:00:60:
ac:66:7d:d2:e4:94:72:58:1d:f5:60:f5:28:bf:12:
b0:8c:e0:20:d1:b2:8a:4e:03:ea:f4:21:5e:36:74:
9f:a8:b4:70:bc:33:ec:08:28:02:97:7f:e2:7f:6a:
07:5e:67:4a:4e:54:38:6b:75:09:65:f8:d2:09:6a:
14:13:d3:4c:8b:71:fb:2c:7e:58:b6:68:60:4e:21:
4a:19:6a:aa:68:bf:47:04:db:f5:49:ff:0c:38:b9:
69:66:3f:4a:db:ca:83:e9:6d:85:35:f1:d6:bc:fc:
60:61:1f:17:0b:a1:89:ba:8f:62:a9:3b:44:f1:b1:
3d:73:09:56:21:9e:7c:fb:cc:f6:9a:ed:7d:40:ce:
7c:cd:2f:99:d4:17:23:f7:2d:ec:a0:c0:b9:b5:68:
3e:e5:48:72:ca:d8:73:a4:ed:ea:33:ae:59:97:2a:
13:5b:49:06:4f:10:f2:45:2d:2b:70:69:5b:6e:c0:
7a:01:53:81:8f:fb:1b:b1:03:27:d4:70:e3:a0:8e:
5a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:37:87:D0:AD:09:4F:DF:A8:F4:11:19:91:7E:67:AC:92:99:8C:F9
X509v3 Authority Key Identifier:
keyid:78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:13:fe:0e:da:26:16:5f:99:4d:cb:f0:97:b7:65:c8:c9:08:
46:0d:3b:be:a2:ee:aa:21:4b:97:eb:83:a7:9d:a4:a9:62:64:
4a:e5:b6:3f:82:ba:ca:dd:7f:28:97:88:f2:5d:2c:d7:95:6f:
35:18:ff:9d:df:25:bf:88:fe:93:3c:fe:89:14:43:81:f2:ab:
25:48:26:ac:eb:1d:e8:85:ef:5d:e6:5b:e6:85:3c:aa:d6:bb:
35:06:73:5f:26:29:40:31:88:da:64:58:e7:ff:66:3d:74:d0:
55:fd:ed:f0:27:8a:66:e3:02:5c:fd:55:b7:7a:d5:65:f5:19:
29:80:20:82:07:6d:bc:44:72:ff:2d:2b:29:54:91:e0:e7:5e:
b6:b5:2e:77:48:ed:dd:5a:f3:3f:4b:e1:0d:9e:8d:29:c4:18:
56:86:f5:61:f7:9a:22:f6:f8:d0:b7:39:a5:d3:67:3c:72:10:
3a:10:6e:ff:c8:d9:6a:78:8a:b3:84:d8:c2:1c:54:24:15:8d:
87:5c:82:bd:b1:4f:50:c1:a8:bd:35:d1:fa:fc:a0:1a:d6:88:
be:5e:4c:a9:94:ff:e6:09:d7:4d:da:6e:5d:97:c6:76:de:ab:
9c:c2:c5:d4:f8:12:8f:12:b2:68:94:f0:df:05:0f:e5:ea:ba:
37:9c:15:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:13:09 2026 by rpki-client