Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
File: eKwxY10JG-YVV0MxH-HbfHrzR3s.mft (raw, json)
Hash identifier: H5KkOQM6nv3Bi4lbIKQANgJVzsq060+9F/9nn4v+SMc=
Subject key identifier: D3:C2:D2:55:4B:1A:4B:8A:EC:50:A3:F6:97:84:4E:E9:2C:31:FE:16
Authority key identifier: 78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
Certificate issuer: /CN=78ac31635d091be6155743311fe1db7c7af3477b
Certificate serial: 019F85D647945AD24B6E91BE4955628433C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
Manifest number: 0E1A
Signing time: Tue 21 Jul 2026 18:00:40 +0000
Manifest this update: Tue 21 Jul 2026 18:00:40 +0000
Manifest next update: Wed 22 Jul 2026 18:00:40 +0000
Files and hashes: 1: VTBtuhupQkN3XNWCGG-SctrmNSc.roa (hash: MVRP12soTEVvkQMP4sWQe+ZD2ED7nGpPqffJ2oNbKlE=)
2: Yx6WCtdaJX-lZhNYpyoP3qTRTWA.roa (hash: SA4NVslryO/GKYfRH6uU7OXQ/zmv533QvWL9j3NGE/I=)
3: eKwxY10JG-YVV0MxH-HbfHrzR3s.crl (hash: 4SjHYSKSFMoWyg8Xql1ManteSMrU6KoIMMW8an3jGy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:47:94:5a:d2:4b:6e:91:be:49:55:62:84:33:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ac31635d091be6155743311fe1db7c7af3477b
Validity
Not Before: Jul 21 18:00:40 2026 GMT
Not After : Jul 22 18:00:40 2026 GMT
Subject: CN=d3c2d2554b1a4b8aec50a3f697844ee92c31fe16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:8a:b4:7a:f0:82:7c:82:85:b7:2b:02:87:
a3:8f:58:fd:07:ba:e9:3e:c3:4e:78:64:c2:79:05:
46:26:3e:68:1f:ad:f4:a1:c7:68:c9:67:ee:de:2e:
8a:01:d2:81:60:3b:72:f7:2f:99:22:ad:b7:97:5c:
da:15:0a:9a:63:aa:38:c0:24:2b:13:fb:b7:49:37:
61:61:5f:56:8c:ee:d2:77:de:f5:7b:76:27:67:a3:
e1:98:cf:cc:29:eb:59:65:95:88:4f:c7:95:1d:9c:
3c:15:73:81:74:cc:f4:32:ce:2f:19:66:e1:51:08:
68:5c:67:4a:2d:8d:d2:af:a5:0f:19:e8:8d:7f:11:
b2:81:18:6b:f4:f7:e7:6d:16:81:e5:e7:d7:4b:8b:
1c:07:9a:a3:87:5d:89:ee:3e:51:b6:00:29:ba:93:
4b:6d:92:ba:ee:8d:1b:1c:e4:4a:9e:38:07:26:f5:
dd:e7:23:4b:72:dc:aa:1b:37:2e:ae:fe:de:ae:3d:
1e:33:c6:a5:65:06:65:8f:d9:8b:50:ec:a7:fd:44:
91:be:59:ff:22:88:f1:6a:96:bf:bc:4c:b1:41:ff:
68:42:90:9e:b0:ff:91:24:08:f8:54:89:59:8e:d8:
44:c9:4b:a3:8f:44:61:78:7c:fb:54:51:98:38:21:
0a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C2:D2:55:4B:1A:4B:8A:EC:50:A3:F6:97:84:4E:E9:2C:31:FE:16
X509v3 Authority Key Identifier:
keyid:78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:eb:6a:1b:9b:e5:3b:3e:7c:ac:b6:df:55:d0:e7:82:9f:51:
c3:ec:09:f9:8c:35:ab:6d:88:c5:7c:2e:b0:76:6b:60:13:11:
d3:1d:c2:b9:19:a3:90:ed:23:48:5b:7f:6e:f8:aa:0f:b1:40:
92:9f:14:5b:a7:c3:42:98:15:48:cb:af:47:5a:ce:94:33:38:
28:05:91:60:e1:79:20:3d:d9:e8:60:f5:d6:ef:c8:80:96:23:
3a:e2:ee:b5:f0:49:d7:f8:9f:4b:ab:aa:bb:f1:7e:7a:ef:6b:
8c:8f:dc:1a:35:b6:4f:84:5c:a9:4a:af:92:09:d6:35:97:7c:
94:6b:79:dd:27:4d:5b:24:1b:99:ea:b2:9f:fa:6b:d3:23:3d:
39:55:49:f1:a9:72:bc:0c:e7:ab:de:96:21:51:61:bf:1d:56:
2f:b4:2e:62:be:26:3a:4b:ac:2c:42:2c:b7:40:83:4b:a3:97:
01:e3:8a:e7:80:c6:51:34:83:c2:e2:5c:46:94:8d:20:ba:a0:
14:4d:7a:23:26:8d:3d:d3:f5:e7:23:b3:70:7b:3b:e2:1f:55:
35:5e:f0:17:29:9a:fd:26:c8:89:90:8d:3d:80:b1:44:74:b0:
b5:0e:ea:81:c0:9d:6d:95:86:3a:fd:62:be:25:cc:ef:1f:ba:
81:9b:6f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:17:59 2026 by rpki-client