Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
File: ezhehhZ9XMwi_YWJJWCudgtfKJg.mft (raw, json)
Hash identifier: KWIJYvQx68XNSqN/IBpiRMTj6ejOHFvsthdI710SGxY=
Subject key identifier: B1:65:51:F0:74:26:E6:00:5B:11:DE:95:F4:73:0E:17:62:B7:96:A9
Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
Certificate issuer: /CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Certificate serial: 01A15251D9A67E54D4B52BE8BAF3F0FE529D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
Manifest number: 1AB0
Signing time: Mon 19 Oct 2026 04:00:58 +0000
Manifest this update: Mon 19 Oct 2026 04:00:58 +0000
Manifest next update: Tue 20 Oct 2026 04:00:58 +0000
Files and hashes: 1: Az-iHkJejR0VdZYNnzrlZuh1_DI.roa (hash: sKSrtLFKb8T7tzu/qrkRHr+dbwySR1WM0V46K4Zjtg8=)
2: QBz4vHPmaaMrots9J1TfiJn6g8U.roa (hash: 1zuHsD0Vu63nJy0iEzu4F0kzfYEsfd1yuIUMu7fViHM=)
3: dr4ERfRqn_ghQRIttdnBh9fXjas.roa (hash: uHaHOk9OGRVoN05Lx2H15zjg2EWZadYEAqhzWiPC/Ak=)
4: ezhehhZ9XMwi_YWJJWCudgtfKJg.crl (hash: gyoN1imWaBvhPNPSIuWnj423pUbRtAFkoCRqujX7/9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:51:d9:a6:7e:54:d4:b5:2b:e8:ba:f3:f0:fe:52:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898
Validity
Not Before: Oct 19 04:00:58 2026 GMT
Not After : Oct 20 04:00:58 2026 GMT
Subject: CN=b16551f07426e6005b11de95f4730e1762b796a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7c:28:00:c2:c8:fc:5c:39:f6:40:64:ce:5a:
95:30:9b:c9:de:15:8f:e2:63:1c:2d:44:91:9c:45:
7c:30:f7:bb:ee:c0:ac:24:10:5b:ca:83:c7:c9:37:
c0:49:60:9f:30:30:12:fa:e2:60:7e:bb:8e:d1:ec:
09:61:8b:17:20:84:04:b2:9a:16:a9:c1:fa:6f:e4:
7c:3e:b3:5f:72:22:bd:c7:3c:50:c3:79:28:32:51:
01:7a:c0:53:e8:b5:c2:ce:e8:41:cf:d3:74:c4:5e:
ed:d0:07:70:60:0e:d7:cc:7c:c6:3c:8c:57:d9:67:
36:19:3c:9c:58:8a:81:b3:6d:06:19:71:a4:27:c7:
c9:6a:7f:46:a2:72:54:73:ad:87:46:d4:51:d9:56:
15:7c:10:99:43:1a:37:58:78:79:ce:5a:72:02:ee:
bd:57:de:7d:dc:d5:54:1d:1f:43:c9:3c:2e:50:a9:
b6:9e:66:ab:31:fb:f2:b2:d1:c0:df:d6:55:cb:81:
0f:ea:8f:49:86:2d:ba:da:c0:8a:2c:93:a2:c7:0f:
d2:61:19:97:64:b5:ec:09:19:c9:03:7e:c7:e9:80:
46:de:18:cd:35:44:cd:6e:82:df:be:ba:07:16:7b:
19:65:57:32:db:b6:9f:e9:67:5f:c2:e5:d5:1f:92:
c5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:65:51:F0:74:26:E6:00:5B:11:DE:95:F4:73:0E:17:62:B7:96:A9
X509v3 Authority Key Identifier:
keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c9:02:f3:c4:6f:5b:7f:0a:7a:c5:58:54:2c:c4:81:f5:71:
52:c6:50:16:91:53:f8:65:da:ec:cb:42:2e:3c:07:c2:95:f0:
1d:48:db:b2:11:6c:5a:f3:3a:e5:15:34:f5:11:da:5e:db:b4:
42:e9:7f:19:ee:9e:b4:35:38:00:2b:f8:5e:25:bd:94:1f:ab:
d9:d0:bc:54:1c:c6:c1:02:b8:77:28:81:86:36:2c:4c:e2:46:
aa:32:20:19:ee:e2:25:59:9d:40:d1:9c:9d:f1:bc:fc:66:21:
84:6b:c7:f9:2b:0f:f9:cd:df:27:4d:e7:b8:72:7d:22:91:2f:
82:ab:5c:3e:0f:24:0c:ae:8c:fc:24:8e:ab:f4:c4:3c:9b:bc:
4b:3c:f1:74:aa:98:91:40:35:1c:e5:88:f5:1a:ab:21:dd:70:
70:b2:73:70:9f:4b:83:e9:dd:08:7b:72:b4:c7:2b:87:51:4c:
b5:0a:20:d7:41:a3:08:2e:ff:8d:5f:31:46:21:fa:4a:b3:01:
24:be:ee:60:ae:f9:e3:c2:bd:cb:cb:9f:4d:f2:2e:bb:34:ba:
e3:b7:9a:8f:ef:2e:b7:90:73:b8:b3:a7:84:d3:1e:7c:2a:88:
28:60:01:5b:9d:56:94:32:8d:26:5b:7a:50:ca:f8:d0:96:db:
02:e4:ab:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:37:13 2026 by rpki-client