Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.mft
File: eA-Kp9juLNFxq6aAElVCf5qr5UY.mft (raw, json)
Hash identifier: OBQx6gjiQLzsRClKQmoCG9mfyRESBdjtPEYEgmOnbCI=
Subject key identifier: C6:C4:EF:4E:8C:48:2F:85:B3:E5:92:8C:AC:94:E7:4D:7F:F3:AE:F1
Authority key identifier: 78:0F:8A:A7:D8:EE:2C:D1:71:AB:A6:80:12:55:42:7F:9A:AB:E5:46
Certificate issuer: /CN=780f8aa7d8ee2cd171aba6801255427f9aabe546
Certificate serial: 019FA82B98EFE07266410FE60021C70B3F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA-Kp9juLNFxq6aAElVCf5qr5UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.mft
Manifest number: 0108
Signing time: Tue 28 Jul 2026 10:00:57 +0000
Manifest this update: Tue 28 Jul 2026 10:00:57 +0000
Manifest next update: Wed 29 Jul 2026 10:00:57 +0000
Files and hashes: 1: 00GxFGgSEySvshhLvY9ijcX9cHQ.asa (hash: XgApdRt20J6F9KR7+CzL9K2aoKUuYUpSKhKCy3ZojEY=)
2: eA-Kp9juLNFxq6aAElVCf5qr5UY.crl (hash: VNmxnksMSh5r+1B8jyBJ+tdrWuQFnYIofc9isOGnSjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eA-Kp9juLNFxq6aAElVCf5qr5UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:98:ef:e0:72:66:41:0f:e6:00:21:c7:0b:3f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780f8aa7d8ee2cd171aba6801255427f9aabe546
Validity
Not Before: Jul 28 10:00:57 2026 GMT
Not After : Jul 29 10:00:57 2026 GMT
Subject: CN=c6c4ef4e8c482f85b3e5928cac94e74d7ff3aef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:4c:b7:1d:d4:28:b0:e6:90:26:87:f0:d6:
77:af:02:b4:fe:51:f2:2f:ac:d3:bc:6e:5b:80:f1:
f0:be:6e:b5:48:09:92:fa:d3:2a:d3:89:a9:62:8d:
3e:6a:c1:92:b8:4b:40:2d:62:53:a1:1e:cc:21:e2:
e8:32:46:25:cc:51:18:bb:d7:93:90:5c:ce:8d:34:
dc:79:c7:d0:84:5f:d6:04:8a:84:6c:e9:f3:e7:6b:
61:35:e5:c5:d4:b8:37:54:dd:f4:c7:35:35:94:9d:
fd:3b:5f:48:b9:13:d5:bf:87:e9:0a:7f:b2:d5:b5:
2b:1d:47:2d:ac:73:1d:75:58:9d:37:5d:53:4b:02:
04:33:5a:2e:ab:a5:36:e4:2c:9e:db:4f:49:9d:97:
3f:f7:1e:21:60:19:fa:fa:a8:a5:2f:8d:4b:4f:f5:
00:5e:17:4d:23:77:15:16:72:f6:2f:38:6f:72:c0:
ad:60:27:9d:8d:9a:43:31:97:08:ed:f7:3d:2b:64:
ca:e7:11:92:10:15:90:8c:6d:a1:4e:e5:f7:35:30:
a2:1f:8e:fe:62:d8:09:5c:53:50:fe:8c:8e:77:d1:
9b:b7:08:32:83:f1:6d:0a:11:eb:17:56:49:8c:5b:
35:70:b6:f0:1f:cd:13:8f:a9:04:ae:ad:cc:42:d9:
18:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C4:EF:4E:8C:48:2F:85:B3:E5:92:8C:AC:94:E7:4D:7F:F3:AE:F1
X509v3 Authority Key Identifier:
keyid:78:0F:8A:A7:D8:EE:2C:D1:71:AB:A6:80:12:55:42:7F:9A:AB:E5:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA-Kp9juLNFxq6aAElVCf5qr5UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f1:3c:87:dd:bc:ce:85:a8:ed:13:d3:87:4e:ab:c2:f4:6a:
df:3f:d5:e8:0a:13:bf:77:01:3b:48:e8:32:00:24:68:68:5b:
43:8e:5d:0b:06:25:33:34:84:3d:ca:b7:11:15:33:ed:0e:a0:
43:44:69:98:0d:56:dc:56:1c:00:6a:af:80:ba:f0:75:6d:d4:
b1:7c:bf:16:80:20:c3:83:a2:44:11:ae:13:45:cb:dc:dd:5f:
2b:b2:3d:f0:39:b2:e0:df:ef:d3:91:d2:d6:49:6d:31:7e:f3:
5b:f8:88:2b:31:0c:50:c2:9b:b9:0b:c8:1c:5b:f0:c3:4c:6f:
0f:7f:5d:47:fe:c8:ac:dd:48:c2:e4:b8:17:86:7a:7d:a1:57:
3e:b5:17:a4:ef:71:0a:5e:0f:a2:43:eb:bd:3f:5c:38:cf:24:
e4:f5:ec:47:17:b4:c0:a7:bc:82:66:6d:fd:7a:31:fe:51:6a:
58:c1:a7:c6:ee:6b:97:20:69:62:93:1c:93:3a:ef:53:7d:cb:
e1:51:7d:18:a2:56:7c:ba:75:15:27:e5:90:a6:a1:9c:26:a9:
fd:6e:55:38:56:8d:36:8b:5d:08:a6:94:d7:ea:3a:f0:1a:54:
ce:ac:1e:23:d6:73:07:81:5a:e4:22:07:d3:0a:e7:9b:00:97:
6b:af:9a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:11:59 2026 by rpki-client