Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: 2jR6yP02PMFi6oyxEtJErzlH6oWQX+dzeBpjsy26VU0=
Subject key identifier: 14:61:6E:DF:E9:5D:86:E4:A9:5D:EB:4B:2E:46:6C:28:6F:78:E5:D1
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 01A15666167702AEDBA9F1A3F04E727F1441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 1A44
Signing time: Mon 19 Oct 2026 23:01:33 +0000
Manifest this update: Mon 19 Oct 2026 23:01:33 +0000
Manifest next update: Tue 20 Oct 2026 23:01:33 +0000
Files and hashes: 1: 03K81b7pfVVjypqVCITF7p4JxKM.roa (hash: PP40BChMOh4s2ABeNP+SORVGIO6bgC5+kty6waeJlqk=)
2: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: 8xiKu5B+3vXj+nb5mkR18upB3CLwwfvo4PEllX6O5nU=)
3: kY0iPrlp2DFcIszfKgZ7jk3A9ls.roa (hash: B98fM5TLrUnwgXpz2kR4adHMCSlg8M1bTdaWmo1lkZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:66:16:77:02:ae:db:a9:f1:a3:f0:4e:72:7f:14:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Oct 19 23:01:33 2026 GMT
Not After : Oct 20 23:01:33 2026 GMT
Subject: CN=14616edfe95d86e4a95deb4b2e466c286f78e5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a5:9e:a1:ef:cd:e3:88:02:24:fd:e1:e0:82:
52:5b:16:d8:d7:35:b4:a1:c5:90:39:df:fb:47:29:
1d:ef:57:9a:9c:64:3c:40:fb:66:27:d5:97:c1:e8:
ce:2f:93:83:e3:78:69:da:c0:01:bf:aa:05:18:ec:
bf:5d:b4:36:ef:e3:2a:40:a7:78:d8:51:8c:28:6d:
c3:0e:c2:60:25:7b:c6:c6:16:78:b7:44:1c:75:ab:
ac:28:8d:5f:a8:10:85:4a:18:1b:a0:95:73:29:c8:
cd:3c:e1:88:b6:1b:d3:f9:6f:92:b9:f7:ac:98:eb:
8e:f8:d6:8a:72:c7:87:7b:0f:91:09:a3:8d:8e:8f:
b4:0b:bc:1a:33:84:b7:4e:4a:6e:9b:50:b0:4f:43:
10:7d:55:95:20:69:56:55:2d:e7:03:f6:2b:41:8c:
7c:bf:c8:a4:d2:f8:c7:ee:f5:d5:cc:71:52:28:6f:
83:85:17:ce:6a:c7:8f:a1:0c:b9:d1:96:e5:37:a2:
6a:28:2a:4f:02:40:7e:e5:8b:54:a8:e9:ae:fc:f6:
67:8f:36:8f:58:7c:4a:f6:9f:95:1f:38:bd:cc:db:
ac:31:f1:3f:bb:4f:2c:02:1a:d4:c6:c1:4e:46:31:
e8:25:83:f1:ea:dd:21:8e:6f:79:ca:01:66:1d:9b:
9e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:61:6E:DF:E9:5D:86:E4:A9:5D:EB:4B:2E:46:6C:28:6F:78:E5:D1
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8d:d4:e7:b3:8c:06:07:c3:24:a0:c9:09:c2:f7:0a:cf:67:
02:54:96:2e:7b:9c:ab:23:ca:35:44:bf:f7:bc:cb:d9:98:5d:
69:79:28:46:6d:0a:8c:a1:d5:4f:c8:36:81:61:f3:0b:6a:9d:
c0:a5:3f:70:3a:20:fa:b4:fd:52:93:2c:c6:3c:b1:47:65:79:
ed:fe:bd:e4:97:35:8d:b3:d8:49:5f:2a:bb:7d:fd:eb:d9:be:
13:2b:8a:33:28:a4:7c:19:34:25:f7:f3:31:9d:54:cf:e3:6f:
b4:21:b1:93:1f:62:5e:0d:46:5c:f4:b7:e2:73:77:a1:61:9a:
83:3d:3f:08:04:83:e6:aa:77:99:75:ff:14:05:12:35:1a:23:
9a:87:db:dc:ca:91:3c:da:93:79:46:16:25:79:e8:1c:4d:81:
80:69:b2:16:1c:20:1c:b9:e9:03:af:e7:5b:bf:d8:9a:98:1e:
ca:79:07:54:c0:18:9d:63:97:30:5d:ae:e8:fa:fd:2d:47:26:
37:31:da:b5:c5:e1:f0:90:7c:e0:3c:ce:01:34:58:fe:22:7d:
b6:07:da:9f:1b:0d:0c:d2:ae:9b:13:e8:89:f9:30:56:b0:6b:
f1:5f:83:ec:25:e8:79:35:6e:c8:5a:d3:e2:ce:6d:04:c7:f9:
61:51:a0:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFWZhZ3Aq7bqfGj8E5yfxRBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMWYxMzg4MmRkMDZkMDk4ZWM0OWE3NTkxMDEzMjliMWYy
MDFmMWQwHhcNMjYxMDE5MjMwMTMzWhcNMjYxMDIwMjMwMTMzWjAzMTEwLwYDVQQD
EygxNDYxNmVkZmU5NWQ4NmU0YTk1ZGViNGIyZTQ2NmMyODZmNzhlNWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKWeoe/N44gCJP3h4IJSWxbY1zW0
ocWQOd/7Rykd71eanGQ8QPtmJ9WXwejOL5OD43hp2sABv6oFGOy/XbQ27+MqQKd4
2FGMKG3DDsJgJXvGxhZ4t0QcdausKI1fqBCFShgboJVzKcjNPOGIthvT+W+Sufes
mOuO+NaKcseHew+RCaONjo+0C7waM4S3Tkpum1CwT0MQfVWVIGlWVS3nA/YrQYx8
v8ik0vjH7vXVzHFSKG+DhRfOasePoQy50ZblN6JqKCpPAkB+5YtUqOmu/PZnjzaP
WHxK9p+VHzi9zNusMfE/u08sAhrUxsFORjHoJYPx6t0hjm95ygFmHZueQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRhbt/pXYbkqV3rSy5GbChveOXRMB8GA1UdIwQY
MBaAFBIfE4gt0G0JjsSadZEBMpsfIB8dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUt
MGQyNzc2NzM3NGVjLzEvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUtMGQyNzc2NzM3NGVj
LzEvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP43U57OM
BgfDJKDJCcL3Cs9nAlSWLnucqyPKNUS/97zL2ZhdaXkoRm0KjKHVT8g2gWHzC2qd
wKU/cDog+rT9UpMsxjyxR2V57f695Jc1jbPYSV8qu33969m+EyuKMyikfBk0Jffz
MZ1Uz+NvtCGxkx9iXg1GXPS34nN3oWGagz0/CASD5qp3mXX/FAUSNRojmofb3MqR
PNqTeUYWJXnoHE2BgGmyFhwgHLnpA6/nW7/YmpgeynkHVMAYnWOXMF2u6Pr9LUcm
NzHatcXh8JB84DzOATRY/iJ9tgfanxsNDNKumxPoifkwVrBr8V+D7CXoeTVuyFrT
4s5tBMf5YVGgvA==
-----END CERTIFICATE-----
Generated at Tue Oct 20 08:05:12 2026 by rpki-client