Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
File: e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft (raw, json)
Hash identifier: TnJyJShPWj+oqRYTlPA2z79PZcrjPXJXsH9eD/WQreU=
Subject key identifier: 3F:78:80:AE:38:D6:96:51:1E:F3:33:57:4D:27:B3:03:5A:16:2F:70
Authority key identifier: 7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
Certificate issuer: /CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Certificate serial: 01A1DCB8D4D1FC04FCB29E075F89EEE8A58E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
Manifest number: 18AA
Signing time: Sun 15 Nov 2026 01:01:02 +0000
Manifest this update: Sun 15 Nov 2026 01:01:02 +0000
Manifest next update: Mon 16 Nov 2026 01:01:02 +0000
Files and hashes: 1: RCrqoUHCiCj-_mCIijuiOb69DWo.roa (hash: N+TGC8nICgkfbZEg/ul2Bb4VOH/CDC8qHnBferdNNKE=)
2: e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl (hash: QewSA5ucfY04wRwuoOU3+W2iGfvXNEi3UByry26KJWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b8:d4:d1:fc:04:fc:b2:9e:07:5f:89:ee:e8:a5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Validity
Not Before: Nov 15 01:01:02 2026 GMT
Not After : Nov 16 01:01:02 2026 GMT
Subject: CN=3f7880ae38d696511ef333574d27b3035a162f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:58:9c:7d:da:8e:d4:4f:ee:a3:bf:89:ca:74:
6e:a7:14:9c:da:e4:5a:60:64:f4:2f:10:70:2a:4d:
e6:d9:33:fe:2a:d3:16:8f:fc:df:19:27:bc:ac:f0:
fa:1f:de:9c:0b:95:f6:17:24:b3:1d:80:cd:b1:10:
dc:e1:0b:c7:97:70:30:5d:7f:6c:5d:dc:1c:1b:26:
0a:fa:bd:7b:e3:5e:f1:2c:f6:f2:f5:2d:ec:9a:15:
00:f4:a6:fb:13:ea:ed:82:bf:3f:02:3e:d6:97:33:
e5:81:64:ac:53:af:3f:fc:f3:83:f5:a3:2a:91:bc:
c0:6f:2b:e5:43:84:95:74:4a:5c:44:ae:bb:5f:20:
9c:a8:7a:cc:4f:1e:ee:60:5c:38:86:24:2b:cd:1d:
39:6d:f3:8d:2a:32:6e:b3:0e:a3:d4:8d:a0:5b:94:
31:c7:a3:b3:5d:68:00:7e:2f:1c:07:55:43:f8:2c:
05:35:40:13:a5:b9:79:1f:2b:c7:39:0f:f7:a6:17:
7b:63:0f:64:49:45:f3:6b:28:53:48:9a:36:58:db:
b5:0e:7b:22:ac:a3:0d:d8:50:b0:db:d0:ba:ba:0a:
f2:59:d9:7d:39:cf:e6:88:4f:65:50:7b:bc:d8:62:
29:95:f8:3e:e4:55:e8:65:5d:14:72:11:16:ad:44:
9b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:78:80:AE:38:D6:96:51:1E:F3:33:57:4D:27:B3:03:5A:16:2F:70
X509v3 Authority Key Identifier:
keyid:7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:31:e7:be:c0:d4:25:1e:4e:53:68:da:18:85:ee:18:2b:61:
60:3f:a0:2d:a3:35:97:28:c4:83:66:4b:62:55:bd:79:c9:86:
6e:6c:5a:2f:7e:42:dc:bf:b6:dc:ef:a9:7f:cd:38:63:c4:33:
b8:1c:7f:30:4f:2c:af:f0:51:6d:80:30:f8:5c:02:a5:df:6e:
28:c3:e8:97:5d:2a:05:48:00:75:fc:9d:4f:1c:79:f5:a4:c1:
9d:af:53:7a:2f:2f:0a:92:a9:10:c0:4b:fb:9b:1b:f4:70:e8:
2d:09:e2:d4:f3:84:2a:51:f0:6b:97:52:84:df:ab:8c:6f:81:
ac:e0:aa:c4:9f:7f:14:ad:8d:c1:22:07:09:d1:32:67:3b:8d:
6c:ef:4e:96:57:7c:e4:28:f1:a5:fe:d5:25:5a:72:02:da:01:
46:63:bd:56:64:57:9a:5a:7d:59:41:1a:8c:44:87:4b:a8:90:
7a:3b:3b:88:af:18:1b:b8:fa:70:15:49:2e:28:44:96:bc:b4:
5a:2f:e2:30:f9:55:42:1f:7a:e4:f8:d2:d3:94:27:c1:b5:6e:
32:d4:56:eb:14:75:3c:3d:d1:5e:ce:70:5a:ad:be:db:16:ba:
f6:8d:51:93:af:fc:b6:ff:d0:e2:27:61:84:65:dc:0d:2c:3c:
00:e1:60:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:55:29 2026 by rpki-client