Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json)
Hash identifier: Lskf1NfG44p5oKT/zrZGrCSer8qyLa9CRKRbdkbc3GU=
Subject key identifier: 0E:2F:A2:EA:DF:FC:F6:46:46:5A:20:8E:68:33:5F:BA:56:69:C1:A2
Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d
Certificate serial: 01A00281E00CFD2DB29B48854291659C6F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
Manifest number: 1994
Signing time: Fri 14 Aug 2026 23:01:00 +0000
Manifest this update: Fri 14 Aug 2026 23:01:00 +0000
Manifest next update: Sat 15 Aug 2026 23:01:00 +0000
Files and hashes: 1: 03K81b7pfVVjypqVCITF7p4JxKM.roa (hash: PP40BChMOh4s2ABeNP+SORVGIO6bgC5+kty6waeJlqk=)
2: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: lRWUTa7AJGtViD7MWcbuhdHwsvYVZMAtqWyIGa3jaGE=)
3: kY0iPrlp2DFcIszfKgZ7jk3A9ls.roa (hash: B98fM5TLrUnwgXpz2kR4adHMCSlg8M1bTdaWmo1lkZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:e0:0c:fd:2d:b2:9b:48:85:42:91:65:9c:6f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d
Validity
Not Before: Aug 14 23:01:00 2026 GMT
Not After : Aug 15 23:01:00 2026 GMT
Subject: CN=0e2fa2eadffcf646465a208e68335fba5669c1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:30:b5:f5:bf:5a:18:e6:dc:a7:00:ed:4e:23:
1c:c0:18:db:98:59:32:48:97:f9:8d:88:49:bf:d2:
13:b4:45:ed:dc:01:a3:c5:e1:18:10:85:dc:c6:7e:
0d:70:48:24:8e:b3:45:0f:5c:4d:3e:c2:df:9a:25:
9d:b2:fc:ee:96:a4:a1:d9:c0:05:9e:a7:b7:98:96:
6d:c9:38:43:0f:63:0e:5d:4d:0c:2f:4d:8e:ba:64:
b8:00:8b:8f:9b:d8:fe:b7:dd:d6:09:7b:43:08:b2:
bc:65:22:26:52:6f:53:dc:02:e4:a0:73:c3:de:bd:
a9:c3:75:1c:f7:96:60:50:2e:75:1f:62:04:f3:c4:
81:cb:a5:55:d7:2f:f6:2d:0d:d1:1b:68:5c:81:f7:
f5:4a:61:b3:de:23:a8:b9:cd:b9:2c:75:cb:d9:1c:
ab:6f:c7:98:5a:55:ef:ba:4e:6a:61:55:5c:ce:37:
64:23:f1:33:10:ec:9b:c5:a5:95:82:d5:e0:5d:a5:
5f:fa:2d:f0:bf:63:f7:dd:5c:a6:e7:f0:78:ec:ab:
ce:1d:82:f4:9d:4c:60:d0:f0:4e:fd:d3:c8:10:f2:
6b:10:7d:ad:33:59:be:02:ce:18:0e:16:4d:9d:b6:
20:ee:f5:cc:e3:bc:e5:19:09:b5:d1:f3:d4:7f:97:
2a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2F:A2:EA:DF:FC:F6:46:46:5A:20:8E:68:33:5F:BA:56:69:C1:A2
X509v3 Authority Key Identifier:
keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:41:d3:39:cc:ad:fa:27:03:dc:e3:81:00:10:eb:5c:bf:25:
c2:68:59:2a:45:d4:0b:74:b0:c1:b2:43:03:d9:24:e2:31:40:
2f:e6:03:b7:cd:58:64:cc:7a:51:8d:ad:af:e5:7c:35:08:67:
c8:4d:53:f0:1f:61:7a:63:82:97:53:fb:69:23:90:54:0f:76:
ab:78:7a:4d:96:9c:5b:c8:05:d2:0e:47:79:be:0b:eb:98:20:
77:07:bb:68:9d:86:00:99:d9:d3:79:2f:6d:76:39:a6:bd:48:
78:3b:0f:01:44:37:3e:f0:cd:af:3a:29:21:65:4b:df:8d:b8:
5c:10:ff:6b:4f:0b:82:a4:c8:bb:68:12:b8:a2:76:16:20:42:
d4:a3:ab:ae:ad:72:76:0d:d5:df:92:96:f6:00:c8:be:41:1f:
40:76:f3:e1:50:13:3d:80:ea:2b:b9:cc:86:ea:f9:bb:d5:08:
b7:ca:95:f7:05:e9:c5:f6:a7:8f:f6:f7:15:47:45:60:00:55:
2b:a6:7c:c4:b7:7e:01:e0:ec:6a:5e:7c:f2:27:25:ee:29:ba:
21:5e:2b:de:3d:84:a4:08:b5:c7:8e:88:78:3a:08:01:4c:a1:
2f:fe:b4:7d:db:06:4e:b4:d6:61:91:ae:ca:bb:d8:dd:cc:5d:
3a:83:7e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:12:36 2026 by rpki-client