Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
File: eyqKwwKLcJEcthEf_aOi7-VYhi0.mft (raw, json)
Hash identifier: +IMk3D+tjIP3hNBY+tECwlU8b1lG6rhmeJNoijar06M=
Subject key identifier: 7F:AC:66:62:1F:5B:F2:D1:AE:F6:5E:33:2F:DE:2A:62:C8:7C:0A:39
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 01A0016FB507FF3C3C01392E78B88EC80FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 18:01:33 +0000
Manifest this update: Fri 14 Aug 2026 18:01:33 +0000
Manifest next update: Sat 15 Aug 2026 18:01:33 +0000
Files and hashes: 1: QKSBmP3gzvhQzJUUPBNcCLWHKHM.roa (hash: KF0eVyAAEY8VGFQ1+W9WFibrhH45a/vXshpeDiUAhF0=)
2: eyqKwwKLcJEcthEf_aOi7-VYhi0.crl (hash: bjb8XpgXpTLAkHu9Xo4SGxyK8pDL5uhGBhQdqyr51c0=)
3: ycdkqwKUZrrAqLHqkXN7UpQhhcY.roa (hash: eyPv8WnShqVImAMmncYrIFp/3E9eBCBd7q2DigUVUPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:b5:07:ff:3c:3c:01:39:2e:78:b8:8e:c8:0f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Aug 14 18:01:33 2026 GMT
Not After : Aug 15 18:01:33 2026 GMT
Subject: CN=7fac66621f5bf2d1aef65e332fde2a62c87c0a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:63:c7:72:35:9f:49:1c:b7:8e:66:1c:1c:
c0:a3:db:0a:a8:c7:b7:9c:a8:a7:c2:97:0c:c6:f4:
68:82:1a:a2:3c:96:09:0f:33:16:06:5b:78:7f:ba:
c0:b2:f7:3c:60:ec:bb:f1:99:f5:ac:7d:d2:43:26:
16:30:1c:e3:e0:f5:84:3c:17:9d:c6:d8:f0:c7:28:
a6:c5:d7:aa:31:b6:27:b7:91:0d:01:b0:8f:d1:f2:
9c:7f:66:85:6f:82:4c:90:63:33:e5:f7:10:45:ab:
a4:b6:74:92:c0:01:f8:c1:0c:7f:23:20:7f:5d:02:
1a:57:0a:bc:4a:49:e5:9d:05:02:e6:5f:82:7b:80:
3b:90:73:f5:81:2f:b7:2f:de:fb:24:dc:22:9c:6e:
ca:9b:6e:f2:aa:b0:f7:28:9e:16:b7:a9:3e:cc:b7:
e2:2a:59:a3:0e:44:dc:63:68:da:68:fc:59:9f:14:
b5:ca:4a:b6:4b:c9:35:5b:58:e5:be:7d:5b:f3:02:
2a:4a:41:d4:b9:e6:21:0d:22:41:db:c6:bb:fe:0d:
22:32:dd:a2:94:11:b7:f3:7a:e4:8b:59:57:0e:b2:
54:12:93:a0:54:b2:fd:9a:87:9a:55:f8:50:d1:c7:
1e:8f:34:35:66:b0:8d:59:10:4e:32:6a:d1:51:86:
d6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AC:66:62:1F:5B:F2:D1:AE:F6:5E:33:2F:DE:2A:62:C8:7C:0A:39
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e6:ea:97:d5:8a:f1:29:e7:8e:1f:b2:2f:ae:35:2c:2a:4e:
ca:79:cb:3a:7b:df:69:38:84:9a:70:39:b6:43:56:45:b5:52:
95:a5:70:15:07:f3:46:7b:fa:b8:5c:11:85:2f:bd:23:39:d5:
96:86:72:8d:71:93:16:e6:e3:19:87:45:9b:e0:69:ce:2c:3e:
7b:71:02:60:91:d0:b6:0b:9a:52:d4:66:33:61:2c:91:34:50:
c7:3a:cf:35:3a:58:3e:c7:72:2c:f5:04:78:1c:cf:87:fa:f2:
82:67:a8:45:22:ef:4b:2b:f0:67:e6:12:26:c9:c8:a3:3f:a6:
66:35:50:8c:e9:2d:a7:48:a7:b7:1d:8c:a9:eb:72:0c:60:ed:
70:a7:0e:d5:90:67:6b:5a:7e:a1:9f:37:90:1b:a6:b4:19:26:
cb:c7:de:e5:4f:45:db:6c:3e:ea:14:9d:40:46:dc:a9:94:1e:
fe:66:9c:2b:d9:bb:85:bf:4d:08:89:94:6f:a8:b0:e7:d1:5f:
d3:0c:51:21:20:5c:03:48:08:d8:ff:b1:32:8d:c0:4b:8e:02:
4f:15:fe:58:7f:51:2f:92:2d:a6:19:b5:89:26:8c:af:78:22:
ed:8b:cc:28:aa:f7:3e:dc:cd:d8:78:44:ed:57:79:cc:9c:11:
32:b8:52:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:29:59 2026 by rpki-client