Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
File: eD8ukq1ZxwyM3CiygCniKXBcbJE.mft (raw, json)
Hash identifier: K9yjQhH9Gy7QFHZxEYD/20M/9u5VQq2ANzZt8CqkYKw=
Subject key identifier: 87:D4:21:B0:69:B6:1D:B6:6C:B1:14:83:ED:34:3D:D0:10:B7:41:76
Authority key identifier: 78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
Certificate issuer: /CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Certificate serial: 019F834357A58B80EF5C7BDC0A10EC87D93C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
Manifest number: 0EB0
Signing time: Tue 21 Jul 2026 06:00:56 +0000
Manifest this update: Tue 21 Jul 2026 06:00:56 +0000
Manifest next update: Wed 22 Jul 2026 06:00:56 +0000
Files and hashes: 1: cqkPcUlhylPWROpeUvaKpM1IHzI.roa (hash: Vj/WfOnXkP6T4SuWUuZJIwljoQd2+9R6QoAl56Tye4o=)
2: eD8ukq1ZxwyM3CiygCniKXBcbJE.crl (hash: 0InCNhSd2FLbnuwA2g9PcJCfPWLbBBrTTOyZGrOZg/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:43:57:a5:8b:80:ef:5c:7b:dc:0a:10:ec:87:d9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Validity
Not Before: Jul 21 06:00:56 2026 GMT
Not After : Jul 22 06:00:56 2026 GMT
Subject: CN=87d421b069b61db66cb11483ed343dd010b74176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:07:c5:7a:06:70:eb:28:c9:7b:f1:1e:64:34:
60:b6:11:9a:cc:36:2b:b0:6c:eb:ab:9a:f1:25:56:
f4:7c:c8:4f:c2:88:ae:b2:2a:86:9f:e0:f1:c0:a4:
64:38:66:86:c4:5b:13:90:18:2a:8e:c2:c2:70:86:
ba:07:3d:fc:53:dd:b2:90:7e:66:50:b6:70:07:f9:
ce:65:de:5d:03:2b:9f:f6:50:b9:b2:2c:6b:34:36:
da:d7:0d:1e:d9:d3:c0:43:00:da:19:41:ee:bb:e2:
9e:4d:69:ea:25:12:3c:e1:5f:35:9c:1a:8d:27:85:
ab:23:99:0e:0e:6b:e9:b5:4d:48:ec:59:f3:54:4e:
b9:9f:e5:62:22:1f:d4:25:3f:3e:4b:41:b8:59:cb:
34:4d:82:e3:03:fd:d4:7c:66:05:f9:e8:5b:64:7a:
17:91:90:dd:d8:df:da:85:df:13:ba:31:1c:40:f3:
53:e9:d9:3c:e8:83:c7:64:e1:25:06:92:5a:46:a8:
24:78:7b:66:42:87:62:77:30:a8:22:17:b4:79:d8:
5c:d7:07:44:e2:71:cc:3c:b2:ce:4a:78:34:61:09:
fd:fe:f0:a6:84:85:0e:e3:be:12:b2:7b:c1:12:81:
11:c6:5f:b6:7e:b1:bd:97:6c:b9:33:c8:16:e8:a5:
99:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D4:21:B0:69:B6:1D:B6:6C:B1:14:83:ED:34:3D:D0:10:B7:41:76
X509v3 Authority Key Identifier:
keyid:78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:23:00:c7:b9:83:f2:4c:10:96:53:c9:55:ea:70:aa:88:f5:
36:a2:6e:9d:a4:b9:cd:fd:e7:4c:76:d8:4e:a0:77:a4:30:b8:
d4:19:1f:35:dd:2f:7c:46:92:19:ec:4b:16:aa:4f:a3:77:2e:
2f:47:ca:42:34:21:25:89:37:0c:41:e6:96:d6:63:d3:89:03:
73:b0:2c:cb:b8:97:3d:a2:c1:90:10:f2:24:e8:0b:54:37:79:
4f:e7:3b:b0:78:22:b9:38:bb:d1:a7:0b:14:ba:32:c3:5e:98:
43:c9:27:66:7e:53:27:90:42:e6:74:43:4b:86:b8:8f:58:73:
11:18:8a:11:bd:ee:e9:2e:ae:df:d5:fd:cc:4f:e7:81:9d:a4:
8b:33:b4:49:8c:ca:26:95:80:0d:70:95:aa:e0:57:94:95:3a:
85:cb:34:c2:fe:36:a8:55:ab:ce:24:47:b8:0f:6b:1c:45:57:
e0:d9:5e:2f:a7:5e:0e:70:99:15:4b:fd:c5:89:dd:5f:d5:85:
1b:7b:5c:72:ad:8f:af:62:00:08:e9:47:1b:e3:df:15:81:d0:
bb:8b:0f:77:c9:5c:e2:c3:50:0b:0b:bc:2e:70:2a:5d:ce:be:
94:62:9b:7e:db:30:fd:2b:ed:d9:cd:30:62:7d:77:f3:ce:93:
79:1b:06:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:08:29 2026 by rpki-client