Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
File: EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft (raw, json)
Hash identifier: EAyZzddQKBgGypXQT7kzvQ9THLG85wfgMR4H3XU+520=
Subject key identifier: B0:4C:9B:D7:06:9D:F1:F5:27:F1:68:5E:85:A7:07:C6:8C:5F:8E:15
Authority key identifier: 10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
Certificate issuer: /CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Certificate serial: 01A001DD49AB160D77E423095EFC9C4EA637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 20:01:14 +0000
Manifest this update: Fri 14 Aug 2026 20:01:14 +0000
Manifest next update: Sat 15 Aug 2026 20:01:14 +0000
Files and hashes: 1: B_eufKACcye9RNL9zWFuL3O0F2Q.roa (hash: u51nAFunJxaWbsLgaW5TM9elEVLvvbw93zNAlf1WyzQ=)
2: EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl (hash: 8h5jWRU4rOqL9b6SzlKcWDde44M0DkivFDEIPDN9ciU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:49:ab:16:0d:77:e4:23:09:5e:fc:9c:4e:a6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107a5af196b8a0ea960c28f6b3e75291c7e861cd
Validity
Not Before: Aug 14 20:01:14 2026 GMT
Not After : Aug 15 20:01:14 2026 GMT
Subject: CN=b04c9bd7069df1f527f1685e85a707c68c5f8e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:4e:db:b1:a2:a4:1c:2f:aa:c7:41:92:c4:
c7:c2:f9:95:fb:56:73:8b:19:1c:cf:9b:f0:c5:44:
b8:ba:7c:ba:52:50:75:8f:62:20:69:ea:15:c1:3c:
49:f9:cb:ae:2a:35:30:d3:03:2e:23:91:3b:96:16:
a4:91:90:f4:30:1b:65:61:c5:ac:2e:32:8f:6b:af:
8f:8f:30:29:20:4e:a0:a9:56:bf:59:ca:32:26:5e:
dc:66:af:05:64:13:32:83:93:02:df:bf:77:44:e3:
68:ea:12:09:43:41:a4:11:51:c0:34:2c:85:d6:b6:
67:1b:c0:12:ea:b9:0e:bf:f0:8a:a8:d4:91:19:26:
29:1b:85:51:5a:8a:85:27:2b:bb:93:51:cf:f2:a5:
ec:36:8a:82:3b:06:aa:b6:67:38:17:3c:76:b0:0e:
d7:a1:67:17:b8:3c:79:79:31:f5:a8:97:64:60:61:
e1:e8:02:99:10:c3:44:1b:e5:69:92:09:fe:c7:9b:
44:b6:8b:3e:7e:34:ca:c9:57:9e:4d:6e:42:d3:d1:
5d:d0:06:24:d9:67:69:58:2a:4b:38:53:39:2d:37:
c6:c4:98:e2:da:cc:3e:67:b2:70:a5:1c:38:fd:54:
8f:0b:c0:67:75:64:94:1d:4f:99:ad:01:30:e9:bc:
52:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4C:9B:D7:06:9D:F1:F5:27:F1:68:5E:85:A7:07:C6:8C:5F:8E:15
X509v3 Authority Key Identifier:
keyid:10:7A:5A:F1:96:B8:A0:EA:96:0C:28:F6:B3:E7:52:91:C7:E8:61:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHpa8Za4oOqWDCj2s-dSkcfoYc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bb23e1-46ca-464a-b3f2-f929e2551627/1/EHpa8Za4oOqWDCj2s-dSkcfoYc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:de:e5:98:7d:32:d8:cb:1a:c7:27:cb:3a:b0:96:2e:07:e4:
77:1d:28:79:86:9c:b0:6b:b4:3c:44:ba:c3:72:e7:70:64:bd:
2c:f8:78:24:5c:52:4d:2b:3e:f2:92:cb:a2:6f:6c:ad:fa:42:
45:f4:16:53:c9:51:13:a6:8c:7c:0e:0f:c8:ac:f6:af:56:2e:
60:27:cc:ba:ee:16:bf:81:de:e2:4f:bd:8d:0e:46:c8:5d:a1:
12:e3:21:6c:57:bd:29:4b:d0:4e:f3:3a:3a:1c:8c:f7:79:ad:
98:ed:eb:0f:66:c3:c5:e2:1e:0a:ee:f9:87:de:c8:3e:3f:70:
07:28:09:72:f8:d4:e3:4d:68:05:e1:06:96:3b:76:3b:07:14:
62:d9:3e:95:05:23:7a:4a:24:3c:2b:ce:26:29:79:0a:61:cc:
54:a2:9c:b2:2e:86:f5:4f:df:6e:97:38:34:d2:84:81:41:c6:
dc:6a:05:e0:fb:4a:d3:ab:51:ad:f3:62:e4:93:1e:73:71:a5:
79:d2:77:d0:5b:dc:fa:b8:88:27:4c:39:6e:03:53:1e:23:3a:
bf:e7:c3:d8:04:50:8d:9d:51:b6:02:ce:c3:4d:51:b5:c8:e6:
3e:be:4d:e2:c2:ff:49:1c:fe:4c:03:86:7c:3a:23:6f:9f:69:
b2:d5:02:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:37:06 2026 by rpki-client