Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
File: eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft (raw, json)
Hash identifier: EFQAw82lDx8ehil/YWVKKiYz5XVo1FcICYRfJHTdrvE=
Subject key identifier: AE:88:E0:F7:80:D4:F4:D2:6E:82:2C:0F:50:11:14:E0:09:A5:7F:AE
Authority key identifier: 78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
Certificate issuer: /CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Certificate serial: 01A1938CD6239409CB4932240BCB7B2C2E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
Manifest number: 0B43
Signing time: Sat 31 Oct 2026 20:00:42 +0000
Manifest this update: Sat 31 Oct 2026 20:00:42 +0000
Manifest next update: Sun 01 Nov 2026 20:00:42 +0000
Files and hashes: 1: 5VmOpi03r_fL6ZM9_FCqD-4ELvY.roa (hash: 4huAnYa6nby7innz6R7TqYphvP6rJYEBi+2SzImbtCI=)
2: 770u0l1B70bIL0OjL2bsRR1d2sY.roa (hash: uO5mw4nMU516BWnsv4GqL4pOVudc9WSSFB2GhY5zuAU=)
3: eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl (hash: 7QYOIPHhvGpFHrFe7JEJmwlCCbobM9g/Wcl13JhKzKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:8c:d6:23:94:09:cb:49:32:24:0b:cb:7b:2c:2e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Validity
Not Before: Oct 31 20:00:42 2026 GMT
Not After : Nov 1 20:00:42 2026 GMT
Subject: CN=ae88e0f780d4f4d26e822c0f501114e009a57fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:c2:9e:71:3a:d4:a3:ef:8f:03:c4:e3:5d:
24:2d:92:60:cd:b4:39:54:49:ed:c0:db:37:2b:40:
2f:87:2f:b2:4f:12:16:e5:21:03:40:2e:a5:50:d3:
25:d6:4f:c9:b0:aa:d7:f4:a4:f8:67:17:1b:34:46:
08:9c:36:a2:67:d3:05:ba:08:f8:68:05:6d:59:ca:
07:4c:e8:ba:90:1a:0c:6e:a9:08:73:90:68:9b:a4:
8b:c7:2e:5d:fb:ef:b3:58:46:a4:8d:7e:87:06:7d:
92:3a:a1:6e:68:92:c2:e9:14:e6:d9:78:e9:2b:10:
b1:bf:10:8b:66:51:05:11:b6:6b:8e:8c:ca:b5:63:
00:79:01:39:cd:3e:13:dd:94:ad:f1:8e:f4:73:71:
8f:d3:f7:f2:3a:68:95:80:47:60:d1:c9:36:6d:7d:
9a:ed:d8:7a:72:a5:da:34:86:c8:11:7a:69:53:63:
c5:b5:5b:3b:c7:e4:88:f0:f3:0a:64:81:34:71:13:
64:9c:62:6e:ad:f9:55:fd:a4:b9:d9:7c:89:75:d5:
c8:ed:3e:63:28:87:39:d8:18:ea:a1:5c:1e:3f:98:
9f:d2:d2:57:ba:f1:2e:86:cd:8c:75:00:a2:46:91:
a9:0c:06:ee:73:0f:e8:76:df:07:00:db:07:ae:3c:
8a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:88:E0:F7:80:D4:F4:D2:6E:82:2C:0F:50:11:14:E0:09:A5:7F:AE
X509v3 Authority Key Identifier:
keyid:78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:67:b9:3c:fa:dc:33:53:8e:a6:06:fd:69:47:2e:cd:39:10:
ef:72:3e:70:54:12:b4:1c:d6:09:61:0b:18:b0:8f:95:db:49:
ae:ff:cd:5e:d9:cf:f6:2f:f4:94:cf:f6:9f:95:b4:19:ea:18:
18:47:d1:1a:bb:7c:25:c3:c4:ce:e8:4c:9d:dd:07:73:e1:03:
1a:1c:63:ed:89:25:7b:2a:4e:06:bd:cd:4c:60:42:03:70:91:
d1:53:f9:2b:d6:c3:77:5f:20:89:94:a6:ef:22:b6:7f:23:fe:
31:86:1e:fa:7f:cd:4e:d6:8f:eb:66:80:5d:de:ba:e8:00:f7:
9a:08:b4:d9:e3:65:0d:d0:6a:09:63:6a:57:8e:09:06:95:0c:
df:99:01:b9:6f:98:13:19:79:c9:c2:4d:e7:79:93:b6:14:2e:
c6:da:5e:58:8a:f6:e0:89:1b:e9:29:91:ab:20:07:06:f8:10:
df:d9:4b:ef:76:e3:07:f8:a9:a4:7b:62:55:0f:a1:4f:92:5c:
76:a4:69:71:3e:1f:69:e4:98:70:f7:e4:ce:45:34:a5:67:22:
eb:15:d0:26:8b:cc:49:24:d5:27:23:b5:a1:eb:62:b8:b0:c8:
62:98:1e:62:38:1a:f9:62:34:bc:e0:2a:8f:85:81:70:3c:7d:
48:eb:2e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:48:58 2026 by rpki-client