Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
File: EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft (raw, json)
Hash identifier: LA6+XDIk8/S7FO8wW0pLxIYRI75rb4TLKDHhnPD63O8=
Subject key identifier: 0D:71:9B:71:A3:82:F5:78:DF:8E:7D:29:87:57:DF:19:88:E8:82:ED
Authority key identifier: 10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
Certificate issuer: /CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Certificate serial: 01A14083752FA76D515C2CFB41F4451840EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 17:01:59 +0000
Manifest this update: Thu 15 Oct 2026 17:01:59 +0000
Manifest next update: Fri 16 Oct 2026 17:01:59 +0000
Files and hashes: 1: B_eufKACcye9RNL9zWFuL3O0F2Q.roa (hash: u51nAFunJxaWbsLgaW5TM9elEVLvvbw93zNAlf1WyzQ=)
2: EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl (hash: dnY+8g79d5lwaEhYNsX8W/piw3EwQYxNmvspRZUsd8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:83:75:2f:a7:6d:51:5c:2c:fb:41:f4:45:18:40:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Validity
Not Before: Oct 15 17:01:59 2026 GMT
Not After : Oct 16 17:01:59 2026 GMT
Subject: CN=0d719b71a382f578df8e7d298757df1988e882ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:26:2f:f6:e2:c0:8d:e4:76:42:d3:7e:59:
47:a5:8e:dd:44:04:ef:d6:af:6a:86:05:f3:3a:26:
b1:9e:4e:c3:1f:05:92:8f:ff:a1:1e:77:d7:97:9f:
12:f4:e9:ee:7e:b6:62:47:51:52:05:da:db:0a:67:
10:e4:5a:e7:32:ef:cd:5f:4b:4b:e8:fd:a7:da:56:
e7:9f:d2:44:d0:03:ab:07:bd:0c:d2:97:ab:c1:ea:
07:d9:bb:6d:1e:e6:1b:d4:34:9a:1c:18:df:c2:68:
8e:07:42:ca:73:8e:26:5d:94:3a:67:96:f6:3b:30:
f0:2e:48:a7:73:bb:81:d1:a3:a8:bd:57:b7:a8:5d:
e3:7f:a9:d9:9d:d1:cd:7c:19:54:11:18:fb:52:2e:
04:7f:be:e8:04:5c:19:a8:c4:e0:48:65:45:26:f2:
0f:55:63:3e:af:12:cb:73:58:ef:b4:79:13:28:50:
c2:8a:5c:0d:aa:b6:b0:61:6a:2a:84:ca:31:96:0d:
d7:03:c6:cb:c5:bd:f2:cb:52:45:47:05:9f:dd:f7:
e0:cc:f6:b9:e0:54:d8:e9:76:40:ee:ca:35:dd:17:
cd:75:e8:04:29:c0:71:cd:77:ef:1b:48:4d:3f:6c:
2d:02:b6:da:bf:8e:ea:80:d6:89:38:82:99:e2:6f:
9d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:71:9B:71:A3:82:F5:78:DF:8E:7D:29:87:57:DF:19:88:E8:82:ED
X509v3 Authority Key Identifier:
keyid:10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:05:1f:21:db:da:b1:69:e0:0c:61:df:18:40:8c:e0:8c:d7:
25:82:e7:d1:fa:ee:47:33:14:30:e6:44:de:3f:7e:54:85:ce:
d2:ea:96:89:35:9b:2d:af:bb:d9:96:55:76:64:85:a0:10:51:
08:07:1c:27:f7:d4:04:2f:98:50:80:71:d9:be:0b:24:5c:6d:
18:8d:81:a4:63:44:60:93:b9:b3:0c:3c:f5:b8:0b:67:88:e7:
ad:a5:bf:47:29:ec:2d:29:dd:8b:12:a3:37:82:c1:19:51:89:
1a:33:98:87:ec:d4:ff:fb:67:5c:67:9c:f3:21:7a:d5:ec:67:
28:67:f2:aa:bd:f1:47:1c:74:39:28:fd:fd:6a:02:43:1c:ed:
81:2b:a6:df:7a:85:31:0b:31:64:a8:cf:3f:c6:7b:12:d6:7a:
8f:fc:14:04:62:4e:d0:bb:29:ff:e4:4e:bf:b8:2b:cb:0f:9c:
2a:de:6b:9e:3e:eb:85:00:9b:cf:3d:9a:01:c2:e8:fa:61:16:
90:8e:74:0d:1a:aa:a5:be:f3:97:95:c1:37:9a:99:ce:6c:fc:
21:3e:6c:8e:ae:ec:ad:1d:e8:74:29:0e:79:4c:b9:e7:71:11:
5c:76:eb:63:00:73:2a:de:f4:ec:87:44:2c:0b:8c:f2:62:37:
11:d6:f1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:19 2026 by rpki-client