Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
File: eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft (raw, json)
Hash identifier: n9aqB1MNUeBP3S5El3HFc57ouc7VF0UBYm6OUA6GLaY=
Subject key identifier: BB:AD:D8:59:78:86:67:1A:A6:99:3B:F8:9A:D1:7B:41:B0:E7:F5:88
Authority key identifier: 79:A4:B1:FB:BA:D1:CB:6A:8B:1C:7D:33:73:7A:D7:2B:CD:9B:8D:9D
Certificate issuer: /CN=79a4b1fbbad1cb6a8b1c7d33737ad72bcd9b8d9d
Certificate serial: 01A0A06F36DAF0B34753F78D17C8556050C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
Manifest number: 0286
Signing time: Mon 14 Sep 2026 15:00:38 +0000
Manifest this update: Mon 14 Sep 2026 15:00:38 +0000
Manifest next update: Tue 15 Sep 2026 15:00:38 +0000
Files and hashes: 1: MHfXLodJ1lTLubHBUzEu-y-nQd8.roa (hash: v+heG+utge9KSHpg0rUF2i0HpIa/3KcrihN3fHNBOZo=)
2: ad2pJPLMCY9-MtsOQUWfkJzvGjk.asa (hash: znBGDedW1a6RheuPxFAgpjdNY4UU36DMoXaL/AWeESU=)
3: eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl (hash: EnsqnObu3MxoR8k4EBwlRRGjwuZtdVnUW7qax7jGbh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 14:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:6f:36:da:f0:b3:47:53:f7:8d:17:c8:55:60:50:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a4b1fbbad1cb6a8b1c7d33737ad72bcd9b8d9d
Validity
Not Before: Sep 14 15:00:38 2026 GMT
Not After : Sep 15 15:00:38 2026 GMT
Subject: CN=bbadd8597886671aa6993bf89ad17b41b0e7f588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f4:2d:c1:4d:1c:50:3f:bc:81:9d:20:60:d2:
53:c4:92:78:d7:40:42:ca:b5:42:b6:bc:7e:0c:f9:
b2:e8:af:09:d0:a0:57:fb:3d:f7:db:36:98:89:32:
81:ff:1b:6e:36:06:c2:ae:ba:42:1b:69:9c:a3:b9:
6f:18:03:83:22:92:d2:20:12:d2:4b:fa:3b:b9:6b:
94:7c:90:88:f3:3b:7b:bf:92:83:d6:31:3a:ce:84:
7c:b2:01:44:cc:38:22:51:11:56:08:92:92:e6:b1:
09:f5:b9:e6:08:4f:5e:e6:2f:fa:12:db:dd:8a:3e:
23:2f:62:63:26:07:0b:7c:08:43:33:8c:8e:a5:1f:
a8:37:12:9d:f4:2a:c7:dc:d9:58:a0:5d:e9:84:0f:
4b:ef:c5:44:5c:17:6e:3c:76:c0:61:f6:02:11:33:
59:d6:f7:73:5c:a9:30:f9:05:df:d0:ce:0b:b1:c7:
7a:af:0d:c6:ac:7d:65:ec:ff:45:58:cb:7b:2e:6b:
94:9a:33:ce:3a:44:c8:d5:c9:3c:4c:3b:98:0d:6c:
75:af:39:02:74:ec:90:1d:b0:da:7b:1a:99:57:f0:
4b:a4:2c:e3:ff:e3:bc:dc:9b:19:c2:44:31:c1:1f:
64:df:8f:a2:a1:29:39:36:e2:14:e3:00:02:10:0b:
f5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AD:D8:59:78:86:67:1A:A6:99:3B:F8:9A:D1:7B:41:B0:E7:F5:88
X509v3 Authority Key Identifier:
keyid:79:A4:B1:FB:BA:D1:CB:6A:8B:1C:7D:33:73:7A:D7:2B:CD:9B:8D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:da:aa:38:fb:8f:5c:55:de:8c:65:3d:bd:8f:b6:7d:1c:98:
46:98:4d:97:65:8c:84:76:12:72:1d:23:bd:2d:fc:02:01:df:
26:07:e7:4d:77:6f:c1:c8:9f:89:57:02:da:6c:24:11:39:e3:
4c:71:aa:fc:fc:57:83:11:35:1a:2b:1a:89:55:ab:51:a1:80:
46:4b:83:56:f8:14:29:c2:7c:19:8b:77:76:c2:44:15:5d:66:
f5:dd:8e:12:e0:97:29:3d:06:9a:54:2b:f2:69:0a:10:a2:cd:
c0:63:62:2f:34:ac:56:ec:2a:cc:43:db:81:f2:33:fc:5d:b9:
8d:d8:1f:06:89:eb:85:c0:ce:92:44:39:8d:1f:32:8f:fd:37:
50:87:0a:22:19:78:88:23:a4:c0:ee:8c:b2:6f:fb:0a:d2:c0:
a0:c1:3f:14:79:bf:dd:b9:70:fd:b5:82:07:43:f3:76:91:ca:
5d:d1:9b:59:85:ba:e1:33:fb:d5:43:8b:e9:4e:d1:13:dc:5a:
3e:89:07:87:6d:c3:93:9d:6d:1c:66:a2:f6:1c:14:94:86:db:
95:69:36:88:d3:79:3f:81:e0:7c:41:c4:b7:f5:63:7b:71:9d:
de:e0:41:c3:ec:44:08:01:89:8b:6f:17:53:9c:0d:e9:b1:a3:
cc:e8:98:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 18:17:37 2026 by rpki-client