Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
File: eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft (raw, json)
Hash identifier: ylEM6gX6wRtMf9mVAjNzUiwOvAWu3yqwrvf8R6pLZGU=
Subject key identifier: 44:CA:50:83:2A:C3:8C:A1:2A:D5:65:6A:74:07:79:73:EB:4C:2A:35
Authority key identifier: 78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
Certificate issuer: /CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Certificate serial: 01A08CE92162C16B13CD7C0777DD4D3B84F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
Manifest number: 0ABB
Signing time: Thu 10 Sep 2026 20:01:23 +0000
Manifest this update: Thu 10 Sep 2026 20:01:23 +0000
Manifest next update: Fri 11 Sep 2026 20:01:23 +0000
Files and hashes: 1: 5VmOpi03r_fL6ZM9_FCqD-4ELvY.roa (hash: 4huAnYa6nby7innz6R7TqYphvP6rJYEBi+2SzImbtCI=)
2: 770u0l1B70bIL0OjL2bsRR1d2sY.roa (hash: uO5mw4nMU516BWnsv4GqL4pOVudc9WSSFB2GhY5zuAU=)
3: eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl (hash: hCySFwzIF2TqDOo8gqoUELWGvLd6M/b96N16ICXyIk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e9:21:62:c1:6b:13:cd:7c:07:77:dd:4d:3b:84:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Validity
Not Before: Sep 10 20:01:23 2026 GMT
Not After : Sep 11 20:01:23 2026 GMT
Subject: CN=44ca50832ac38ca12ad5656a74077973eb4c2a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:05:cf:1e:66:f4:ba:ef:6f:fc:98:87:b9:b8:
1c:cf:3c:f7:76:ec:74:83:78:30:b8:15:dc:85:cb:
31:21:7f:14:b0:f1:c5:57:6e:96:b2:6a:33:52:72:
87:23:11:0d:d5:55:f2:fe:85:be:b7:f2:62:a8:71:
77:39:c0:d8:c0:e8:53:e6:5c:6f:24:d0:af:4a:57:
e1:9b:0d:d8:41:95:8f:53:56:94:af:96:e3:1c:a2:
e3:a3:1f:86:f9:41:02:3b:17:b7:88:36:1b:c8:8f:
48:a2:9c:27:b2:aa:50:4c:06:d5:57:c2:1e:d0:f7:
6b:1f:e8:e4:b0:54:ef:92:d0:af:c7:bf:f5:80:bc:
54:3f:6b:c2:b0:04:9f:d5:f0:ad:27:02:36:4c:75:
dc:71:eb:b5:0b:b2:32:4f:47:91:b1:c5:7b:21:3d:
80:20:62:17:82:f4:76:10:b5:70:0b:e1:99:a3:a3:
33:c2:ae:6d:a7:4e:7d:ce:0f:05:f2:c1:fd:04:fa:
8b:8d:d1:f9:fc:83:c4:a5:84:be:61:28:72:21:86:
a1:83:3b:26:4a:7d:ee:7e:3f:ec:51:4c:ae:d7:c5:
eb:a9:29:2c:c9:d5:c2:77:04:5f:2a:e7:00:42:f4:
5c:28:ab:55:93:72:ad:68:84:c9:b3:e5:e2:4e:14:
cc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CA:50:83:2A:C3:8C:A1:2A:D5:65:6A:74:07:79:73:EB:4C:2A:35
X509v3 Authority Key Identifier:
keyid:78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2e:bd:e5:df:05:8f:03:5c:3a:e9:9e:49:09:b5:9d:73:98:
20:ed:4a:ed:69:0d:f9:59:21:0d:27:b8:98:bb:a5:01:a0:46:
76:25:80:4c:15:16:a9:72:0f:f7:1e:dc:43:00:fd:1b:73:59:
fa:de:4b:6e:2e:70:19:99:89:35:28:99:19:31:31:dc:8e:36:
ad:6d:37:04:5c:0e:73:cd:ce:c0:fa:e6:97:85:e1:e7:d9:2f:
42:72:e2:bf:3e:70:27:4f:28:68:45:6a:79:35:11:64:7d:c0:
98:4b:59:0f:ee:19:12:47:02:fa:dd:95:b7:ca:03:63:44:b7:
86:2f:3e:ec:e8:67:d7:5d:a3:a2:6f:5e:12:02:18:3b:09:79:
63:6e:71:08:cd:a0:70:19:f6:75:12:da:a5:de:91:d1:3f:91:
5b:81:b0:69:81:cb:4d:20:a8:27:08:97:35:91:57:ea:a6:b4:
e8:05:39:38:dd:18:f3:46:a6:81:35:a1:e7:21:88:ed:a6:b8:
00:61:c4:03:8f:3f:bd:55:8c:7f:3c:65:f2:d7:92:42:25:41:
b9:fa:0f:c8:b3:56:85:6a:b5:2c:c3:c1:12:2c:00:e4:b2:f1:
61:cc:6c:c3:1e:20:2a:10:e5:c0:f9:68:6d:a6:0d:cc:c4:8f:
2e:31:5f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:05:41 2026 by rpki-client