Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
File: elsD4kg77RNDh7_DBHoTmJ_epB8.mft (raw, json)
Hash identifier: cXEoXkelouuYD65Kk+7sttQBHtIHfKPBWvBE7yzxhT8=
Subject key identifier: 0C:ED:C4:E6:C9:4B:1C:C3:C8:46:13:67:BB:66:55:A2:8E:20:9C:FD
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Certificate issuer: /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial: 01A10211F082676C3D16A25CBF0255F1360A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
Manifest number: 0ADE
Signing time: Sat 03 Oct 2026 14:01:32 +0000
Manifest this update: Sat 03 Oct 2026 14:01:32 +0000
Manifest next update: Sun 04 Oct 2026 14:01:32 +0000
Files and hashes: 1: 1jLJCus46gm-AStfLL9q2M5Ho3g.roa (hash: XrU3m/+eSwJdl/VMMh61KI+6fAsJ3/LwxcvviYIdgKo=)
2: QdrNcN-oAM5Z8NA93nywrdwjlpY.roa (hash: dR7J85RI6taLvzWRGM0v5+kdTnGBa4MyfOc9jNOLw3w=)
3: elsD4kg77RNDh7_DBHoTmJ_epB8.crl (hash: KnFMd1tdCSvT1ZWcioX1QuYHPmKRdEz2470slo3LvU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 14:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:11:f0:82:67:6c:3d:16:a2:5c:bf:02:55:f1:36:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Validity
Not Before: Oct 3 14:01:32 2026 GMT
Not After : Oct 4 14:01:32 2026 GMT
Subject: CN=0cedc4e6c94b1cc3c8461367bb6655a28e209cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:a0:67:af:16:29:61:f7:bf:24:98:f0:6d:
69:5c:c8:e6:5c:27:a5:f0:20:00:ae:b1:32:67:55:
5b:37:03:7f:8d:0a:a6:85:96:5e:da:7d:68:c7:dc:
66:d3:78:a1:f9:52:ba:19:0f:be:54:3b:54:23:d8:
1c:52:51:31:d3:1e:46:4b:b9:4e:91:1f:6f:f7:e6:
d6:e4:69:70:a2:82:d3:9c:74:0c:94:2e:91:76:bf:
74:6e:6f:62:cb:fd:88:c9:80:61:95:6d:f1:5d:d3:
54:60:72:75:0a:a7:aa:22:5d:a4:cb:c1:dc:0c:cd:
e3:62:58:c6:78:f6:da:bb:d5:de:4b:72:1d:2d:5d:
8b:1d:f8:6d:38:9a:7b:6c:67:e0:b7:0a:a8:e4:6b:
3d:4a:4d:71:7e:e3:31:cd:2a:31:f8:cb:98:93:c5:
1e:95:4f:78:86:05:4c:e4:53:ec:9b:b5:d6:35:82:
b8:36:a0:a8:84:b4:7c:3e:de:71:51:27:06:1f:41:
5c:da:c0:e6:54:d6:a7:67:2d:c9:18:14:79:b1:c2:
ad:6f:2f:4d:a1:c7:45:c6:e3:cc:03:ab:ed:f5:e0:
ec:c6:21:a2:a4:da:50:78:d9:ba:97:2d:2e:d4:f1:
e2:67:f6:bc:43:be:f5:0a:e5:38:2d:41:c8:6a:46:
c5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:ED:C4:E6:C9:4B:1C:C3:C8:46:13:67:BB:66:55:A2:8E:20:9C:FD
X509v3 Authority Key Identifier:
keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:15:82:2a:87:b9:7f:4d:ec:c4:e3:0a:23:95:49:58:f7:44:
67:e2:83:88:ad:34:ca:37:57:ed:0f:48:8a:6d:b9:e9:21:4d:
e7:95:0f:35:0c:18:90:ca:9a:c5:45:c5:ff:2e:fc:ed:64:24:
0a:63:c8:c6:28:bc:8b:0b:1e:fa:fc:d9:ad:45:fc:31:4c:2a:
21:70:29:f0:51:88:27:47:d6:ca:13:73:d4:d6:19:8f:85:3f:
82:fc:05:ac:6f:bb:f7:38:10:98:fe:5b:c8:bf:ba:a2:49:eb:
ce:0d:4e:ee:66:2b:5c:cf:53:5e:3c:0e:fe:f0:92:dd:d5:c9:
cc:73:0a:ca:ca:7f:be:50:73:b0:5a:c9:52:e0:46:71:48:f5:
1c:26:6d:a9:9e:bb:81:e3:b5:30:c7:8e:6f:3f:75:ed:67:83:
b7:c0:50:93:fe:10:e4:1d:b2:34:b7:15:4c:d3:3f:4a:a9:4c:
43:e4:37:23:f8:67:9e:e0:f9:5c:e1:98:ae:23:51:ce:9b:06:
c7:b9:f5:9f:f9:b1:7d:c1:7b:2d:53:de:b5:f0:02:6f:6d:5b:
b9:4d:a4:5f:fe:83:67:77:77:7b:a1:3c:3e:42:34:5d:47:da:
2a:0e:2c:d5:20:8d:11:9f:4c:59:ae:80:53:be:ba:c6:ef:bc:
fc:9e:d6:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECEfCCZ2w9FqJcvwJV8TYKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNWIwM2UyNDgzYmVkMTM0Mzg3YmZjMzA0N2ExMzk4OWZk
ZWE0MWYwHhcNMjYxMDAzMTQwMTMyWhcNMjYxMDA0MTQwMTMyWjAzMTEwLwYDVQQD
EygwY2VkYzRlNmM5NGIxY2MzYzg0NjEzNjdiYjY2NTVhMjhlMjA5Y2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj6gZ68WKWH3vySY8G1pXMjmXCel
8CAArrEyZ1VbNwN/jQqmhZZe2n1ox9xm03ih+VK6GQ++VDtUI9gcUlEx0x5GS7lO
kR9v9+bW5GlwooLTnHQMlC6Rdr90bm9iy/2IyYBhlW3xXdNUYHJ1CqeqIl2ky8Hc
DM3jYljGePbau9XeS3IdLV2LHfhtOJp7bGfgtwqo5Gs9Sk1xfuMxzSox+MuYk8Ue
lU94hgVM5FPsm7XWNYK4NqCohLR8Pt5xUScGH0Fc2sDmVNanZy3JGBR5scKtby9N
ocdFxuPMA6vt9eDsxiGipNpQeNm6ly0u1PHiZ/a8Q771CuU4LUHIakbFPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAztxObJSxzDyEYTZ7tmVaKOIJz9MB8GA1UdIwQY
MBaAFHpbA+JIO+0TQ4e/wwR6E5if3qQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWxzRDRrZzc3Uk5EaDdfREJIb1RtSl9lcEI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zZDE3NjAtZTRlNi00NjY3LWE1NGMt
NzFlNTYxY2I3OGU5LzEvZWxzRDRrZzc3Uk5EaDdfREJIb1RtSl9lcEI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zZDE3NjAtZTRlNi00NjY3LWE1NGMtNzFlNTYxY2I3OGU5
LzEvZWxzRDRrZzc3Uk5EaDdfREJIb1RtSl9lcEI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBWCKoe5
f03sxOMKI5VJWPdEZ+KDiK00yjdX7Q9Iim256SFN55UPNQwYkMqaxUXF/y787WQk
CmPIxii8iwse+vzZrUX8MUwqIXAp8FGIJ0fWyhNz1NYZj4U/gvwFrG+79zgQmP5b
yL+6oknrzg1O7mYrXM9TXjwO/vCS3dXJzHMKysp/vlBzsFrJUuBGcUj1HCZtqZ67
geO1MMeObz917WeDt8BQk/4Q5B2yNLcVTNM/SqlMQ+Q3I/hnnuD5XOGYriNRzpsG
x7n1n/mxfcF7LVPetfACb21buU2kX/6DZ3d3e6E8PkI0XUfaKg4s1SCNEZ9MWa6A
U766xu+8/J7Wdw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 01:08:42 2026 by rpki-client