Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
File: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft (raw, json)
Hash identifier: w7+qVcxPjhfkA6+UKBtmVH4Vs0SjuxsKb7AJ8C0RvEE=
Subject key identifier: C9:83:23:26:E6:94:AE:1E:C7:42:BB:7E:07:EA:EF:FC:BD:BD:97:04
Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Certificate serial: 01A15F31C0FB2EA92664397715A96A2D6761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
Manifest number: 11EE
Signing time: Wed 21 Oct 2026 16:00:58 +0000
Manifest this update: Wed 21 Oct 2026 16:00:58 +0000
Manifest next update: Thu 22 Oct 2026 16:00:58 +0000
Files and hashes: 1: U0fRXYHgtW5Lj2ILWS5wUzrlnN4.roa (hash: rlb8IZvmVYRTy9dDl5LBuhuMRpChfmFYGPXw/aHFukE=)
2: Zu2YCOMNdF6aNceeKzP2XiSPhlU.roa (hash: cnBeGVbEPlV3dfTfeIQYswJCwcZDweKXTvgV5NLGKQU=)
3: e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl (hash: 1TUtUK6DDiidni7y0aQWksTu2tTxlNizjF0EhkhYm40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:31:c0:fb:2e:a9:26:64:39:77:15:a9:6a:2d:67:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Validity
Not Before: Oct 21 16:00:58 2026 GMT
Not After : Oct 22 16:00:58 2026 GMT
Subject: CN=c9832326e694ae1ec742bb7e07eaeffcbdbd9704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5e:74:08:61:c8:39:3f:f2:db:a8:f4:26:39:
c5:18:52:b9:be:21:e9:3b:4f:72:6c:40:4f:2c:b2:
8f:d2:dd:4e:26:50:eb:8a:3f:ae:c3:11:2d:09:8e:
61:d4:2a:fc:a9:b1:57:ae:5b:49:4f:7c:3f:d7:d4:
eb:de:fc:9d:16:a9:c2:94:4e:38:44:51:fa:45:21:
f6:2b:d7:f6:5e:10:5c:d5:23:7a:90:7d:e7:83:ec:
59:4d:06:58:f4:7e:dd:22:84:c7:73:9e:5e:ca:44:
29:1b:df:e5:d1:5b:5a:62:d2:ae:ef:b7:6b:1b:28:
fc:ce:2c:27:d8:36:96:bf:aa:1e:87:58:da:ec:7a:
c4:41:24:f0:58:da:1a:f3:f9:09:7a:11:35:86:d5:
f9:c1:c3:58:38:29:65:39:7f:b2:ac:03:cb:b2:2c:
8c:bd:ac:e1:06:c1:d7:f6:39:f9:03:4a:c2:9c:1a:
a3:84:0e:75:b2:ef:9e:38:c6:87:23:34:d0:b6:2f:
31:6f:06:ca:df:cd:e1:63:79:0a:33:6f:d6:5e:b1:
bb:d0:81:79:c7:ed:29:57:3f:c3:a8:53:16:c8:f2:
89:78:53:61:07:9b:0e:f1:60:cc:ee:c1:92:21:01:
56:d8:a8:d9:79:6b:65:03:bf:51:ab:3e:5e:29:14:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:83:23:26:E6:94:AE:1E:C7:42:BB:7E:07:EA:EF:FC:BD:BD:97:04
X509v3 Authority Key Identifier:
keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:44:77:ec:17:00:ec:55:21:cd:9f:1c:35:86:90:69:80:b3:
f8:ae:9a:e8:8e:91:b5:d4:7e:02:08:79:cc:94:61:4e:1f:0a:
db:b0:36:3c:57:98:bc:d5:da:5c:71:f4:16:5c:1b:dc:8f:ba:
ab:3c:7a:0f:3f:89:9c:db:98:8f:0f:ec:3c:91:c1:45:21:dd:
2b:5d:18:5d:84:5a:5b:2e:90:db:7d:ac:cb:86:f2:d1:e2:8f:
38:e9:4b:bb:1f:09:26:64:3e:dd:cb:14:62:2b:fb:0c:b3:20:
c9:54:77:81:59:7f:f6:66:98:9f:89:89:78:6c:7b:e0:1c:8f:
b1:08:90:ac:e1:ef:95:2c:fb:9f:13:72:7d:27:d2:10:da:ce:
3e:27:09:9c:7b:06:8b:03:32:f4:c8:97:1c:6b:27:11:db:ae:
81:bf:03:6c:6b:37:dd:67:6e:8a:2b:3f:2d:7a:d3:28:9d:50:
42:b3:03:f7:a1:96:c3:9f:71:85:62:73:48:69:0e:0c:08:28:
db:9a:56:00:52:ba:bd:6c:c1:77:61:3f:21:0f:16:d0:8e:48:
05:bb:66:ca:e1:da:68:da:1e:3c:58:a4:93:93:d7:01:bb:8a:
64:98:ba:33:aa:ca:58:0c:a4:10:43:f9:39:9d:74:95:4d:88:
c2:77:92:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 23:37:55 2026 by rpki-client