Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
File: e6dzYuMUWG0NIYhNAaha23dmW3Q.mft (raw, json)
Hash identifier: 2+foAl6gZR2ahXqLoLvXwAP7Ipfgx3O2/LMe5A1vIPU=
Subject key identifier: EF:18:FE:E1:7A:48:7B:CE:7D:13:6E:C5:74:66:0C:F1:18:70:FA:F3
Authority key identifier: 7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
Certificate issuer: /CN=7ba77362e314586d0d21884d01a85adb77665b74
Certificate serial: 01A17A71A5BF6E543586858A04C3A5A6EEE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
Manifest number: 1AC8
Signing time: Mon 26 Oct 2026 23:00:30 +0000
Manifest this update: Mon 26 Oct 2026 23:00:30 +0000
Manifest next update: Tue 27 Oct 2026 23:00:30 +0000
Files and hashes: 1: IrrCu1SZ2AuOIXndqDUMakTHS3Q.roa (hash: cDrqltz5JUNSKHmEVA8KR/liv1EQj+DHA9UlbgBwDnc=)
2: e6dzYuMUWG0NIYhNAaha23dmW3Q.crl (hash: 0Mfd85qdmtgPXFzSjtIaxGAY8kCzpj8sgSZJzEiBdpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:a5:bf:6e:54:35:86:85:8a:04:c3:a5:a6:ee:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba77362e314586d0d21884d01a85adb77665b74
Validity
Not Before: Oct 26 23:00:30 2026 GMT
Not After : Oct 27 23:00:30 2026 GMT
Subject: CN=ef18fee17a487bce7d136ec574660cf11870faf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:64:bf:de:e9:19:11:78:f1:ad:94:df:60:9a:
81:cb:c2:cf:73:c6:3d:51:c8:c7:9d:cc:b8:01:d8:
6c:49:53:94:d0:aa:1a:25:69:b5:7e:1f:25:9d:bc:
83:42:57:60:fc:5f:e0:c4:f4:38:c4:15:ca:cc:94:
ee:c8:22:bc:2a:86:c5:90:b9:1c:aa:6e:9f:72:d4:
b9:f7:73:49:97:e5:73:e5:09:da:82:ab:7e:8a:bd:
99:fc:4f:b6:03:5e:6e:57:e6:1d:38:08:d6:29:2b:
00:6b:d8:a8:63:3f:d6:e4:d9:bc:79:0c:0c:d2:3d:
3c:38:32:f0:01:7e:c1:2b:f9:d5:31:bd:55:5d:52:
91:35:52:85:75:38:92:43:c3:46:01:d6:47:8b:76:
8a:68:f5:16:af:57:39:60:da:eb:f4:89:88:3c:81:
b0:bb:0a:95:3b:93:05:e8:58:ad:d2:32:3f:da:51:
c8:4e:ee:53:ac:13:ae:29:d7:a4:3e:61:4d:b8:ab:
0a:55:cb:b8:b9:a1:6d:6d:93:fa:5b:8b:de:11:94:
5a:16:5e:2e:47:ba:66:4e:65:cc:c8:2c:ac:a9:ea:
f3:ef:a0:fb:d4:68:ec:d4:43:eb:d5:94:64:0b:df:
06:31:e7:9a:38:58:47:e5:e6:82:ce:56:aa:4c:a5:
fc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:18:FE:E1:7A:48:7B:CE:7D:13:6E:C5:74:66:0C:F1:18:70:FA:F3
X509v3 Authority Key Identifier:
keyid:7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f6:28:a2:76:19:a9:05:ed:d3:fc:49:ab:58:8d:99:e6:63:
3e:be:a8:1a:37:71:8c:2e:32:38:79:96:22:2f:67:85:4e:3b:
d4:5a:0c:1c:33:4d:d7:2d:96:49:a3:f9:40:8c:a6:f0:47:75:
e2:7c:3b:ae:db:51:8d:14:55:93:16:e0:e0:f2:08:00:83:79:
90:77:aa:d6:d3:0c:de:6d:dd:a4:d3:1d:17:8f:84:1d:3d:9a:
d9:4c:76:82:1a:f6:8d:df:c5:18:95:df:94:6d:4b:ee:07:80:
b0:d9:ea:35:fa:bc:8e:b9:88:c6:c4:d6:9f:dc:d7:a5:9d:d6:
ce:a5:b2:84:a1:11:d0:36:1f:92:5a:16:02:82:10:b3:7d:58:
b7:ed:79:03:4b:04:a2:09:93:9c:0a:0d:55:6c:66:fa:a9:ba:
27:29:05:19:68:1d:ba:e4:3c:bf:3c:76:c1:e3:a9:43:1b:fe:
4e:82:e8:a7:20:79:86:8e:60:b0:66:6c:37:92:0a:23:e3:37:
72:ce:6e:11:53:ae:9b:c1:2c:d8:1e:c9:0e:50:51:fd:68:3a:
95:28:fd:3c:15:b5:32:9a:62:a6:dd:be:db:9f:b7:6f:57:de:
d1:cd:b6:19:bc:0f:7d:76:cc:54:b8:e1:50:8a:2e:ea:9c:74:
2d:a6:32:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:23:27 2026 by rpki-client