Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
File: eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft (raw, json)
Hash identifier: 6KDr7j2ODL1kFEmcts9HgpvoQ/ZSToSO/c8NHUarOwY=
Subject key identifier: FD:7A:64:62:19:B1:1C:1C:41:50:2C:E6:A9:DF:AA:80:85:FB:CC:BA
Authority key identifier: 7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
Certificate issuer: /CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Certificate serial: 01A06E0329E728E2F647C8FF5E31CD338807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
Manifest number: 1A39
Signing time: Fri 04 Sep 2026 20:01:36 +0000
Manifest this update: Fri 04 Sep 2026 20:01:36 +0000
Manifest next update: Sat 05 Sep 2026 20:01:36 +0000
Files and hashes: 1: 1-gfSrWkkPBhxthfW3JrHoJC9spI.roa (hash: Rnl0mmrjcLaqzVvTvP650dcar9MAaD9eI+jcraf6cdQ=)
2: eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl (hash: Qo0wEK8e35nth4juX8kPUM2hfxASLybPGdfmnBq0LYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:03:29:e7:28:e2:f6:47:c8:ff:5e:31:cd:33:88:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Validity
Not Before: Sep 4 20:01:36 2026 GMT
Not After : Sep 5 20:01:36 2026 GMT
Subject: CN=fd7a646219b11c1c41502ce6a9dfaa8085fbccba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b7:34:db:fb:17:b8:57:6f:21:ae:2e:1d:54:
36:5e:8b:26:b0:b1:b8:d7:a6:84:54:6d:dc:04:7d:
12:12:14:4e:4a:e8:56:71:7c:63:74:d5:06:3d:80:
b8:4d:3f:47:b1:74:c3:c2:02:14:27:b2:d6:7e:da:
27:a9:d4:fa:a6:b7:25:41:86:f0:83:5b:14:79:a3:
d0:5c:97:9d:ad:bd:cc:19:07:67:c0:5a:29:00:4f:
00:ea:d6:4c:c4:09:5d:9a:9b:6a:85:4a:5f:14:76:
ca:f6:a8:02:be:0b:ad:f2:11:2f:14:5a:e1:59:61:
fb:71:4f:9c:b6:62:80:e7:1f:28:b4:3b:29:1d:d1:
2e:d7:90:eb:af:a2:ab:bd:bf:ea:9e:5c:7b:1d:cf:
35:02:5c:41:d1:31:d1:81:fd:ca:ef:35:57:de:84:
68:2b:13:c1:bf:1a:8c:fb:02:e7:fb:37:64:54:86:
8c:7d:b9:eb:01:ab:c5:67:85:47:6a:22:fe:fb:2e:
41:87:b5:06:2f:e2:d3:e2:bd:de:19:26:8c:0b:ab:
e3:e4:d1:cb:68:25:76:b7:fd:93:23:91:04:b9:b5:
1f:4f:3a:14:0a:18:73:0c:83:db:2a:76:de:50:b6:
e7:fc:81:c5:2a:ff:36:42:36:ff:63:55:62:34:cf:
74:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7A:64:62:19:B1:1C:1C:41:50:2C:E6:A9:DF:AA:80:85:FB:CC:BA
X509v3 Authority Key Identifier:
keyid:7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:37:40:45:aa:cb:20:26:01:69:8a:dc:1d:8c:7b:2a:b6:d0:
17:a4:83:3e:fe:bf:89:22:81:85:94:ad:56:7f:e0:eb:64:07:
0e:5d:87:39:26:a6:70:6d:7e:bd:1e:66:5e:c5:e6:26:4c:41:
3e:64:6a:3e:e3:37:62:45:71:fb:1f:ae:0b:81:c4:6c:57:f8:
91:e9:10:1c:f4:97:24:87:60:9f:ea:24:7d:68:43:23:49:61:
80:46:30:0a:73:4e:ac:ef:ed:b7:93:b5:93:67:fc:cc:ee:6c:
cf:57:29:a3:74:b1:55:e4:55:91:5a:c2:fe:3a:ab:77:21:7c:
3e:de:dd:ca:60:6c:c0:08:c5:f7:15:2a:77:6c:45:b8:d5:b3:
53:2d:e1:3b:88:d1:1a:f3:00:8c:c2:f8:f7:e8:86:9b:89:3a:
8c:6e:02:48:b6:60:e2:6d:9e:b2:31:da:76:c8:3d:2e:f9:2a:
b9:cf:d8:c8:a5:f9:5a:9d:2d:fd:e2:e1:ab:fc:e7:02:ef:43:
46:13:f2:a9:59:b0:5e:61:c2:e5:7d:e7:92:c7:1e:4d:ef:b3:
31:92:e3:13:0b:9d:34:7d:fb:c1:7c:34:d9:9e:8e:ac:fd:ba:
da:98:90:2e:35:51:5a:71:8e:92:7f:dd:87:1e:d3:1f:11:70:
ef:81:c4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:44:20 2026 by rpki-client