Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
File: eH4xzl1QHRqUr9q71OAkzCp4jvU.mft (raw, json)
Hash identifier: MtoTd9f0LGw1Y7SrujtWZnUcrroKmKDOGgXDDv4Tp9U=
Subject key identifier: B1:10:A8:B7:54:14:9C:9B:E0:E8:4E:91:2E:C8:FC:91:3F:EF:87:72
Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
Certificate issuer: /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Certificate serial: 01A1238AACB6D7ECD2435CAE21BD1EFCA504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
Manifest number: 1A9B
Signing time: Sat 10 Oct 2026 02:00:53 +0000
Manifest this update: Sat 10 Oct 2026 02:00:53 +0000
Manifest next update: Sun 11 Oct 2026 02:00:53 +0000
Files and hashes: 1: 28QSm-nWPh3k170EUdx31IY1dMI.roa (hash: kWfNX41nTH6GHmC998QPitgxsJrbp8luPvyUsxQE9E4=)
2: 2e9LSNAqhLRT7BWU4DhRYt_D284.roa (hash: LhrPgLlELaQl4rIr+j03mkYm6Ou6QZ4My1odiBtlrTs=)
3: eH4xzl1QHRqUr9q71OAkzCp4jvU.crl (hash: kOImJxxxWNrpUUS51Dv3Wqq/azYoFoeOeT645jG/GUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:8a:ac:b6:d7:ec:d2:43:5c:ae:21:bd:1e:fc:a5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Validity
Not Before: Oct 10 02:00:53 2026 GMT
Not After : Oct 11 02:00:53 2026 GMT
Subject: CN=b110a8b754149c9be0e84e912ec8fc913fef8772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:40:20:0e:f7:7a:65:e7:56:44:16:1b:1f:
f3:8b:3c:a5:b5:1a:4b:d9:d4:9d:4d:90:a9:44:74:
99:65:28:6b:f8:7f:13:44:10:ef:91:dd:98:75:76:
3f:cf:9f:5a:c8:6a:d4:96:6f:a6:78:2b:8d:21:89:
0b:25:86:48:a3:6d:f6:94:ec:c1:1c:a6:13:60:16:
17:0f:00:54:54:bd:d8:d0:1b:4a:be:b8:47:2f:08:
07:13:05:df:41:a0:2f:54:d5:11:13:72:da:8b:7b:
53:0e:02:b9:0f:d0:38:f1:78:f1:49:92:40:88:d6:
22:5a:69:b7:cb:85:1c:03:95:7e:eb:72:44:90:1d:
f3:f8:19:11:f1:cd:50:34:4a:90:dd:72:30:6f:5f:
8b:6c:23:b2:c5:5c:79:0a:ab:d7:79:42:86:b8:28:
69:8c:e3:e4:f0:7e:0a:1e:aa:5c:ae:f1:51:11:bf:
10:82:1e:20:03:2d:5c:3c:e5:a3:71:9b:c0:ef:b3:
57:64:2d:23:08:63:97:b7:99:92:d2:e1:9b:f1:f6:
33:d6:5d:bc:f1:19:60:9e:a0:e1:fb:8a:e5:42:5c:
62:95:85:81:70:8e:ad:9a:b7:7c:64:70:85:2d:97:
46:be:d6:a7:24:6f:67:06:1a:19:5b:30:37:45:69:
e0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:10:A8:B7:54:14:9C:9B:E0:E8:4E:91:2E:C8:FC:91:3F:EF:87:72
X509v3 Authority Key Identifier:
keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:94:98:33:8c:27:bc:dd:a9:c6:0f:b0:77:d2:8e:63:13:f2:
43:60:37:2c:a1:3e:7e:7b:86:89:41:f7:90:f8:4c:68:be:1c:
ba:e8:e3:2d:cc:60:b4:80:20:be:72:04:7a:8c:c3:11:e4:93:
42:be:61:43:cc:83:2b:c7:a8:84:b3:50:cc:e9:7e:a0:a0:25:
54:d3:6b:81:c8:c0:33:55:5d:a3:f6:43:9f:a5:9b:3f:a4:2f:
8c:d0:6b:13:75:23:6f:37:1e:58:7d:85:04:93:00:22:27:67:
e6:c0:54:e0:9b:7e:42:eb:17:94:8e:71:14:b4:61:2e:96:91:
31:43:ca:a9:62:9e:64:a9:dd:7c:72:be:c3:90:d9:36:53:c9:
7a:4c:02:5a:6e:3d:90:1c:10:1f:99:ed:89:36:c5:00:e2:e0:
7b:aa:7d:8c:61:63:96:cc:91:64:fe:e6:7d:47:99:4b:10:5e:
c2:2f:84:6c:0c:7b:be:56:db:92:a1:4a:42:73:ae:70:e0:0c:
29:21:e1:7e:17:a4:95:8b:eb:ae:3a:4a:40:40:19:93:1c:91:
b9:da:6c:28:ba:7a:27:2a:36:d5:53:3f:2d:8e:5a:bb:d1:55:
34:29:22:ad:44:20:3b:9e:7e:06:cb:7c:fc:a8:e7:99:53:cc:
87:dc:2a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:57:44 2026 by rpki-client