Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
File: E_hJa3nRwE0IKvg_G-al6rDGYIk.mft (raw, json)
Hash identifier: zP8NyKxWzSgcEg4lGGAKUod26iHCyoQAU4bCdNamhDg=
Subject key identifier: 28:DC:12:65:28:E4:F7:9D:A7:E8:79:AF:D9:5E:D5:69:45:CB:40:00
Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
Certificate issuer: /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Certificate serial: 01A1540967FAAE4A86D3C63E0C0D4DF4CAEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
Manifest number: 1ABA
Signing time: Mon 19 Oct 2026 12:01:04 +0000
Manifest this update: Mon 19 Oct 2026 12:01:04 +0000
Manifest next update: Tue 20 Oct 2026 12:01:04 +0000
Files and hashes: 1: 0-jMAvh0Spb5-xmRErQMwSZjKoM.roa (hash: +jeSUtpRT2LXECnK0ZPglZoRmjktcmKAgTbcZjeh29w=)
2: 5VOVi1zMcl_Rbz5StE6dbYv6zCM.roa (hash: 3HB3Pm/gwM+qHx/iqgvsnkZiNMNHUAb9tRWCmqy13kA=)
3: E_hJa3nRwE0IKvg_G-al6rDGYIk.crl (hash: 18H7rU3ES5nHdQUAbp1555thIm+1y3v94COMPWOFYO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:09:67:fa:ae:4a:86:d3:c6:3e:0c:0d:4d:f4:ca:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Validity
Not Before: Oct 19 12:01:04 2026 GMT
Not After : Oct 20 12:01:04 2026 GMT
Subject: CN=28dc126528e4f79da7e879afd95ed56945cb4000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:31:1f:b3:a7:d9:2b:e2:f3:b4:45:f1:ad:b1:
32:48:c3:82:22:c7:cb:63:73:0c:08:76:3e:5d:2c:
e7:ba:12:c3:86:7d:23:2d:92:9b:28:e1:dc:ce:3a:
1f:37:25:3f:51:57:15:33:ba:95:07:a0:fe:c6:c3:
07:ff:0c:5f:71:4f:99:55:0b:21:0a:a9:ee:5f:bf:
d4:4e:55:32:f3:59:18:1c:dd:75:ca:71:fe:ce:cc:
d0:a8:10:88:5a:a5:6f:d0:d2:be:1d:04:c4:97:2c:
46:1f:9f:01:82:1a:2d:de:cb:ce:b4:d5:e4:26:a7:
eb:3f:c7:b2:bd:80:89:62:4c:e5:93:f0:d3:3e:ee:
c7:7b:48:9d:f1:db:1c:ec:7a:1f:10:9a:eb:a8:77:
52:f2:59:b0:6f:a0:85:21:53:72:f8:00:a7:8a:a0:
8f:38:44:54:c3:e5:0e:80:09:67:19:33:30:a8:4a:
bc:8e:da:45:44:32:10:d4:bc:bc:61:56:40:4c:46:
16:d8:ee:15:54:18:75:70:17:ee:42:da:c1:a0:77:
f3:45:19:d4:81:ea:0c:5f:52:6b:5e:0f:f7:da:01:
18:2c:a2:f0:26:2f:c1:ae:10:1b:5f:76:75:60:33:
42:38:4f:bb:d9:5c:b6:9e:a8:4f:da:cc:e3:f6:00:
88:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DC:12:65:28:E4:F7:9D:A7:E8:79:AF:D9:5E:D5:69:45:CB:40:00
X509v3 Authority Key Identifier:
keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:46:90:b8:bf:50:3c:95:9c:bc:62:87:ad:b6:eb:c3:08:6d:
a7:23:3a:81:f1:15:9a:20:dd:ca:e7:16:fc:f9:0a:12:72:9c:
0e:0a:70:c2:3d:56:e9:04:3a:15:3e:a5:5b:30:2f:1c:30:e2:
77:07:dd:94:b5:0f:81:2b:4c:e7:88:c6:4a:38:ab:98:96:fa:
14:85:eb:84:63:8c:94:89:5f:57:73:b0:55:22:da:06:f9:7e:
07:2d:26:e6:f9:16:42:7b:e8:73:79:73:77:24:1b:40:a4:7c:
c1:b9:2d:46:76:48:9d:2f:63:68:cb:82:88:51:23:54:23:ba:
14:fb:57:6a:11:13:61:13:50:8f:73:f2:e6:fe:1c:4d:43:15:
55:e2:55:13:81:e0:52:03:a6:8d:fd:36:2b:d2:7d:56:b5:64:
6d:56:33:c6:c4:3f:b0:46:30:54:72:36:27:56:08:2b:dc:ed:
fc:29:c7:be:36:da:86:da:e7:fa:98:b6:6b:21:16:6b:63:21:
09:9c:76:5a:12:91:8e:82:39:9f:db:79:f7:04:1d:92:ed:97:
7a:29:e1:6e:3f:b1:82:04:3e:cc:b8:ee:d0:4d:6b:50:43:8f:
30:8b:91:c3:13:71:e2:0e:2a:31:b3:62:3c:0d:15:bc:73:e8:
7d:5c:a5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:45:18 2026 by rpki-client